Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa
File:                     323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa (raw, json)
Hash identifier:          g6jBqZWP9f/yK+Gs8y1veV3ZGveDnPxlH9MGwPhvzAI=
Subject key identifier:   C8:CB:C6:23:34:22:FF:2F:6F:9C:A5:1D:6C:6A:38:EC:21:B6:B7:47
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       079F56F05520210E906D13A158ED7A9743AFADB0
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa
Signing time:             Wed 08 Oct 2025 19:17:01 +0000
ROA not before:           Wed 08 Oct 2025 19:12:01 +0000
ROA not after:            Wed 07 Oct 2026 19:17:01 +0000
asID:                     273316
IP address blocks:        2804:8cd4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:56:f0:55:20:21:0e:90:6d:13:a1:58:ed:7a:97:43:af:ad:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Oct  8 19:12:01 2025 GMT
            Not After : Oct  7 19:17:01 2026 GMT
        Subject: CN=C8CBC6233422FF2F6F9CA51D6C6A38EC21B6B747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:3d:73:75:78:89:af:5f:2e:2b:6c:b4:49:
                    f8:e5:f2:5b:7a:d9:2e:79:58:a9:67:4e:8e:f3:e3:
                    00:b9:ee:2b:0f:41:ea:dd:e1:90:f0:8d:cc:21:0c:
                    60:1c:14:21:ae:39:8e:45:53:31:0c:c9:c7:20:56:
                    8c:e8:77:e3:19:69:92:ae:f4:ba:09:0f:78:d2:4b:
                    0e:38:39:58:dc:df:d3:e2:1d:f3:ca:e2:8f:7f:07:
                    3c:2b:0d:4f:58:99:5d:3f:39:cd:17:42:59:3d:3b:
                    e6:49:4f:82:e1:78:ce:d1:e4:32:ce:58:ca:45:b5:
                    9f:25:51:4e:f2:e2:4c:0a:11:ed:24:c3:71:95:19:
                    85:5f:e6:7c:bd:b9:25:90:38:29:c1:3c:af:ab:b2:
                    b1:42:99:ef:72:3e:66:5e:d9:af:1a:3a:7b:24:16:
                    24:90:5c:19:95:f2:42:35:5f:65:d4:8e:0e:c8:f0:
                    b4:21:d5:2e:a3:b7:78:8c:35:c9:02:a3:5d:44:b1:
                    f4:be:68:32:eb:d9:2b:28:81:fc:d6:a9:dc:54:c1:
                    19:99:8c:94:2d:ac:db:74:03:28:07:8d:7c:a3:b2:
                    75:6c:2e:2d:73:47:04:a5:b4:a6:75:46:9f:33:a6:
                    47:7a:18:24:99:7c:9b:4d:43:f4:34:87:83:4b:90:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:C6:23:34:22:FF:2F:6F:9C:A5:1D:6C:6A:38:EC:21:B6:B7:47
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:f2:81:55:53:78:37:af:74:68:73:6c:19:ec:05:c0:fb:
         11:d3:30:23:6e:04:76:0b:51:81:5d:f7:94:96:ca:45:a2:d7:
         56:b9:1f:f1:b7:41:7a:cc:ba:f8:cf:41:4f:43:31:5c:40:93:
         e0:68:8c:a8:b1:da:87:c8:13:31:b4:fe:98:dd:ec:22:4a:fb:
         97:38:d8:ae:f5:64:64:00:3f:fa:02:4f:d3:fe:02:f5:47:06:
         66:83:83:6a:f1:fc:e3:2e:10:44:9f:aa:1d:c6:ac:53:9a:92:
         e2:0c:0c:4a:87:93:91:d8:b8:9f:c7:73:01:cb:6e:a9:04:12:
         65:da:0a:c8:d0:46:38:8b:db:e0:fd:b2:7a:d9:db:3d:09:5c:
         3a:79:8c:9b:0f:49:2c:91:14:de:62:d7:77:c3:dc:ef:f5:01:
         a3:62:6a:14:04:9e:3f:2d:be:7a:6d:fb:f6:39:c5:0e:a1:05:
         08:03:1f:f5:5b:6b:47:c8:e3:d5:6b:2a:48:e9:b3:83:f3:e0:
         12:f5:f1:9a:ef:08:ee:db:5f:5f:29:4f:d6:23:0d:a3:a2:16:
         f0:ab:e8:3b:55:6b:02:74:78:98:d2:b0:04:5e:4f:57:0b:46:
         31:d5:3a:2e:6b:dd:94:ee:bd:c6:9a:33:52:a9:7a:58:d2:41:
         6a:c1:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:28 2025 by rpki-client