Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a343030303a3a2f33342d3334203d3e20323733333136.roa
File:                     323830343a386364343a343030303a3a2f33342d3334203d3e20323733333136.roa (raw, json)
Hash identifier:          hHKeqe8W9WsfCW2g3ArAFnP/tXyo2QJLWUk0HXWUrh4=
Subject key identifier:   8F:C0:B8:C6:D8:51:4B:4F:BB:82:51:C1:3A:DD:56:C5:E7:51:8B:D7
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       2109875F8792C42EBCFF03752D7BABC3AE45E74A
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a343030303a3a2f33342d3334203d3e20323733333136.roa
Signing time:             Wed 08 Oct 2025 19:17:01 +0000
ROA not before:           Wed 08 Oct 2025 19:12:01 +0000
ROA not after:            Wed 07 Oct 2026 19:17:01 +0000
asID:                     273316
IP address blocks:        2804:8cd4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:09:87:5f:87:92:c4:2e:bc:ff:03:75:2d:7b:ab:c3:ae:45:e7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Oct  8 19:12:01 2025 GMT
            Not After : Oct  7 19:17:01 2026 GMT
        Subject: CN=8FC0B8C6D8514B4FBB8251C13ADD56C5E7518BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:7f:65:9c:60:4f:9e:0b:02:da:3b:89:5b:
                    2a:da:ab:bc:89:16:5f:df:b5:0b:dd:3f:99:be:04:
                    b5:0f:b1:ea:58:ea:94:8a:09:5c:63:60:12:5d:cc:
                    7f:f3:a7:63:b7:9d:fa:43:5f:38:a0:30:98:80:62:
                    44:3f:6f:4a:a5:94:e8:33:0f:a7:fd:da:b9:9b:c7:
                    88:37:c8:ee:9c:08:6a:83:b0:d7:1a:08:25:e7:02:
                    37:6b:78:26:57:1e:48:41:d5:4a:49:e8:57:f7:e7:
                    a7:75:5d:81:c0:17:c3:6a:23:fc:7b:6c:47:1b:ab:
                    24:a9:bc:bc:ec:21:3c:cf:ca:de:89:86:c9:bf:22:
                    fb:f5:d9:2a:5d:1c:6f:8e:70:5c:ee:f3:3a:67:7b:
                    0c:09:fd:72:00:92:65:72:db:65:99:76:c8:78:01:
                    42:b5:d3:d8:c7:a1:aa:ba:d5:fb:e5:7d:f2:9e:b8:
                    11:a1:02:37:ac:37:46:92:35:fe:00:c2:a2:3f:b1:
                    d3:d2:8b:51:4e:ea:6d:b2:14:01:97:d4:cd:2b:61:
                    05:5c:0f:bf:9f:6d:4a:fa:f9:92:6c:bf:dd:b8:8f:
                    00:87:76:fd:b5:81:b1:51:96:90:33:40:c8:2a:a4:
                    58:07:9b:71:23:ba:cc:69:86:73:cc:88:f9:48:65:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C0:B8:C6:D8:51:4B:4F:BB:82:51:C1:3A:DD:56:C5:E7:51:8B:D7
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a343030303a3a2f33342d3334203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:3d:e5:43:3a:99:8d:a6:a5:f2:25:f2:37:a1:04:0e:d3:99:
         3a:d0:8f:92:97:06:a6:e5:9d:36:29:c1:20:a1:44:b2:37:ed:
         2a:5a:9b:54:14:ae:b4:70:14:98:bf:3b:e2:31:ef:9e:5e:8e:
         e4:38:af:57:56:63:69:70:d0:d4:2f:74:bc:7d:83:4e:84:3c:
         12:7d:cb:3f:74:6e:b5:c4:3f:eb:3a:df:9f:dd:f6:5d:22:03:
         4e:ea:31:21:5b:6b:5f:59:17:71:24:33:c5:c8:76:81:80:ff:
         8c:28:00:6f:4e:4a:f4:6e:4d:ee:af:39:0f:11:1f:84:27:72:
         c8:7f:9e:18:25:80:03:1f:66:c1:52:48:ca:2f:9d:89:60:dc:
         cb:17:07:be:4f:dd:65:71:e9:c3:45:b8:47:3a:b3:40:22:55:
         c0:ad:07:5b:b3:03:11:2c:13:af:51:3b:c8:7c:fd:1d:50:6c:
         a4:38:f7:6e:b1:dd:5e:b7:40:be:7e:a0:c1:39:e8:ff:f1:36:
         80:5e:d2:a3:0e:c1:00:93:49:83:56:a3:5c:86:24:69:79:12:
         39:b2:b9:a7:1f:0c:cd:6a:dc:0a:17:f4:7b:f0:5a:7d:38:e0:
         1d:70:93:cf:6a:5e:27:8e:62:a3:04:e7:32:9c:4a:c7:1e:c3:
         b0:0d:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:15 2025 by rpki-client