Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa
File:                     323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa (raw, json)
Hash identifier:          6WDNJTKeRdGExho8mCsEE2oRFwgijpY81obIySihtwI=
Subject key identifier:   47:8A:12:28:9F:92:87:36:5A:CC:A0:05:EE:ED:D5:F1:77:82:BA:DA
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       08BAD46363AD6C7D241C6E3274A2484A56F95813
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa
Signing time:             Wed 08 Oct 2025 19:17:01 +0000
ROA not before:           Wed 08 Oct 2025 19:12:01 +0000
ROA not after:            Wed 07 Oct 2026 19:17:01 +0000
asID:                     273316
IP address blocks:        2804:8cd4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ba:d4:63:63:ad:6c:7d:24:1c:6e:32:74:a2:48:4a:56:f9:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Oct  8 19:12:01 2025 GMT
            Not After : Oct  7 19:17:01 2026 GMT
        Subject: CN=478A12289F9287365ACCA005EEEDD5F17782BADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:e2:66:2f:62:41:97:88:77:91:fa:fa:f8:
                    6e:87:79:3e:8d:70:8b:d4:c9:f3:ae:bc:b4:51:51:
                    4a:9c:56:6b:06:86:43:c5:0b:f2:dc:99:fd:ae:97:
                    c5:7a:f4:9d:41:06:2f:01:5b:cb:67:ba:cb:be:f9:
                    e0:25:32:8d:61:10:7e:c8:d6:e6:e9:b2:2d:5d:a2:
                    3e:fc:f1:05:1a:3d:85:d7:95:0a:1a:b1:43:db:16:
                    5f:f0:b4:61:5b:eb:83:a4:2f:f1:43:d3:af:53:67:
                    fb:65:7d:82:b2:03:89:c9:28:87:20:b3:d0:28:a7:
                    1a:d2:b9:bc:1c:f3:d0:1f:fa:31:b2:f2:e2:2d:64:
                    03:0d:61:19:39:d0:5d:e5:38:c5:ea:c3:cd:c0:69:
                    a0:82:0e:f1:ac:38:a6:54:74:8e:9b:ea:b2:45:36:
                    c7:10:a1:e7:4b:3e:e4:f2:64:41:ce:37:29:e4:33:
                    17:63:a6:5c:bf:0d:ca:1d:1f:06:13:3d:0f:a2:67:
                    03:be:31:0d:e1:a7:c9:2e:32:2f:d3:99:36:8c:a7:
                    1f:45:0f:34:9c:4c:47:07:46:52:76:56:ea:6b:90:
                    da:a7:08:83:7c:5b:ae:3d:a2:de:4d:a1:a9:a1:02:
                    e3:98:f8:bd:27:79:c6:b8:a7:b3:0f:32:de:cc:e9:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:12:28:9F:92:87:36:5A:CC:A0:05:EE:ED:D5:F1:77:82:BA:DA
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:d5:d8:17:36:58:53:b5:f4:a0:a2:88:47:02:40:5c:f6:
         77:6d:ef:23:4d:0c:4c:dc:00:db:d0:d0:ec:14:b5:bb:6a:e5:
         61:09:05:ab:0a:2c:67:7c:0d:9d:c6:b6:41:00:10:98:11:13:
         ac:2e:0b:ae:0a:a2:74:77:f0:46:e5:e4:0d:1a:77:47:b3:db:
         5b:e1:7e:af:f9:3f:98:88:a3:79:0d:19:b9:f6:a0:87:5d:6b:
         67:39:2f:b4:32:6f:6f:84:9a:90:5a:e5:e2:c4:34:84:02:31:
         99:6d:7b:dd:fd:07:d7:c8:92:ef:f9:58:99:23:b7:16:7c:89:
         e6:cf:01:be:9d:8e:b0:92:a9:c2:9d:4a:78:f5:6a:66:74:48:
         30:37:4c:06:f9:df:bb:68:b9:e9:85:3d:4f:74:8f:2a:d4:8f:
         91:5e:a7:02:15:05:69:15:42:64:89:ed:e0:a9:7e:63:c8:0c:
         e4:c1:ed:ed:a7:df:35:43:f6:58:7e:7e:55:92:a4:eb:e7:87:
         64:3c:31:5c:30:81:83:59:53:49:32:50:44:a9:94:1c:d3:51:
         aa:78:ee:32:93:2c:92:37:87:c5:6a:91:8a:8b:0b:53:e6:1c:
         9f:33:e8:7e:d8:ac:e1:03:78:6b:6a:d8:6c:cf:05:e7:5f:88:
         40:87:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:55 2025 by rpki-client