Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630323a3a2f34382d3438203d3e20323730373034.roa
File:                     323830343a373031343a666630323a3a2f34382d3438203d3e20323730373034.roa (raw, json)
Hash identifier:          +aJsHtuSwbHbwDuO5PXNkRLgYXVTtjBWXrDlqXZ3Tvo=
Subject key identifier:   FC:91:4C:E7:71:0D:98:DB:0A:50:42:8E:7B:B1:4E:23:ED:7B:80:8F
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       7FB651B24385BA58CD84541811C8E3D4472241F8
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630323a3a2f34382d3438203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:43 +0000
ROA not before:           Fri 03 Oct 2025 02:23:43 +0000
ROA not after:            Fri 02 Oct 2026 02:28:43 +0000
asID:                     270704
IP address blocks:        2804:7014:ff02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b6:51:b2:43:85:ba:58:cd:84:54:18:11:c8:e3:d4:47:22:41:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:43 2025 GMT
            Not After : Oct  2 02:28:43 2026 GMT
        Subject: CN=FC914CE7710D98DB0A50428E7BB14E23ED7B808F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:e0:2d:3f:a0:01:66:2e:45:96:fb:e4:48:
                    db:03:c1:ea:25:55:56:84:bb:0a:23:3b:20:64:4a:
                    77:32:4e:6e:54:d4:88:ad:32:ab:0d:ae:9f:11:38:
                    ab:9d:f4:d2:5e:89:ef:b8:23:3b:93:da:4f:5e:e9:
                    e1:54:5d:19:a7:6b:cd:35:cf:08:58:3c:b9:e6:58:
                    3e:81:7d:44:84:9b:91:71:85:ef:4e:b6:89:97:23:
                    94:d1:b9:1e:74:90:fc:c1:d4:05:d9:fd:3d:01:cf:
                    90:c5:9c:8a:b3:93:60:d3:29:01:7a:34:d9:91:fa:
                    de:ae:16:d3:c7:24:8b:10:73:e6:a0:fc:50:a0:aa:
                    a4:94:cd:57:a2:53:7e:c8:65:2e:e3:d6:57:91:fe:
                    39:14:19:40:f4:4e:b9:1e:0d:80:db:09:e5:5a:0a:
                    18:0c:7b:1f:34:6c:fa:4a:50:63:fd:5d:89:b7:00:
                    38:1f:1c:f8:a5:cf:11:2c:55:9f:70:18:d2:03:d6:
                    19:d6:42:02:80:31:bb:e8:29:1e:17:8c:02:7c:40:
                    fb:8c:73:ae:92:fb:40:41:df:2c:e8:7a:0d:43:7f:
                    4c:f9:85:33:5c:c7:7f:35:3e:10:2e:0c:14:ca:89:
                    4c:64:3e:cc:0f:b9:17:2a:b2:cb:e2:31:51:a5:23:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:91:4C:E7:71:0D:98:DB:0A:50:42:8E:7B:B1:4E:23:ED:7B:80:8F
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a666630323a3a2f34382d3438203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014:ff02::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:3a:03:c0:50:67:55:05:72:0a:f0:72:51:4a:b8:dc:da:
         49:a3:ee:e8:60:3d:b9:7a:4c:30:e5:40:7b:b6:ae:35:b9:b8:
         82:0b:79:e3:11:10:3a:89:1b:49:82:45:05:5c:35:37:a8:a3:
         f2:8a:87:64:59:e4:21:6a:7b:7d:36:90:5b:1f:e0:bb:e3:ed:
         61:56:16:85:be:d2:12:be:e9:4f:ad:3b:95:94:e3:aa:88:93:
         6c:2e:14:60:e8:1f:56:c8:3f:13:aa:ea:a8:d9:95:9d:6e:07:
         d4:92:02:62:95:63:8a:97:32:6d:86:0d:b9:6a:45:f8:a1:c3:
         09:6d:af:91:59:d1:e9:68:ec:ad:b4:bd:86:dc:eb:91:48:b4:
         8b:19:c8:13:31:94:03:17:57:87:1a:1c:aa:95:ee:c3:4d:08:
         8f:ab:36:3a:25:b7:c0:03:47:0f:07:b6:f0:17:a9:e9:f1:67:
         89:74:38:76:14:5e:4b:e6:a1:0d:f8:51:f2:d1:22:ea:83:28:
         1a:ad:33:bd:84:ba:c7:95:48:bb:b5:7d:f6:5e:dd:93:e4:f2:
         b4:66:62:3d:4f:4d:e2:35:90:6a:22:21:45:52:8d:27:e2:85:
         1e:4f:9d:0f:95:8a:c0:1d:95:20:55:16:73:7d:0b:94:b9:41:
         4b:36:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:10 2025 by rpki-client