Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa
File:                     323830343a346665303a3a2f33322d3332203d3e20323638333535.roa (raw, json)
Hash identifier:          4GIAN6A0ztAgt+6zdfDVuh+yrYGA2FWm7BMrP7pPH78=
Subject key identifier:   AB:9E:1C:69:62:01:80:AD:2F:2B:36:3A:80:15:DC:AA:D5:24:EB:96
Certificate issuer:       /CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
Certificate serial:       021C09D74E528B2192C3768306B3F7302AACBC59
Authority key identifier: 28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa
Signing time:             Wed 17 Sep 2025 14:36:10 +0000
ROA not before:           Wed 17 Sep 2025 14:31:10 +0000
ROA not after:            Wed 16 Sep 2026 14:36:10 +0000
asID:                     268355
IP address blocks:        2804:4fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl
                          rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1c:09:d7:4e:52:8b:21:92:c3:76:83:06:b3:f7:30:2a:ac:bc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C
        Validity
            Not Before: Sep 17 14:31:10 2025 GMT
            Not After : Sep 16 14:36:10 2026 GMT
        Subject: CN=AB9E1C69620180AD2F2B363A8015DCAAD524EB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:c1:fe:a8:98:cc:04:a5:6f:42:54:b1:47:
                    8f:03:ce:0f:1d:65:db:2f:85:33:6e:66:81:5b:bb:
                    2f:2a:9c:ec:30:ae:ca:eb:a4:02:b3:f7:39:13:a6:
                    24:1c:77:3e:80:13:7d:68:b4:52:45:68:9c:fb:2d:
                    b5:63:9a:9e:25:c9:fb:8f:11:4a:52:5d:f8:3e:9a:
                    d7:17:d7:df:b2:85:88:ad:43:b4:2a:99:46:6b:04:
                    92:fd:bd:83:b2:ca:a7:38:53:bd:1d:08:69:93:45:
                    1c:e8:a0:14:59:45:4e:06:f3:40:2d:b3:75:65:81:
                    ef:c9:da:2f:65:01:31:96:9a:81:e3:94:71:d4:2a:
                    41:c9:a3:2a:68:8c:2e:b5:ac:ad:e0:4f:d7:de:86:
                    5b:1b:75:41:1c:d8:da:97:d4:90:cf:c8:69:3a:16:
                    e9:6f:d9:3b:37:d4:97:db:24:bf:b7:8e:f4:62:7c:
                    cf:79:5a:47:78:35:5d:3b:ea:49:80:ae:9b:8a:70:
                    40:12:db:2e:77:b1:4a:1c:2d:1b:cf:77:31:71:bc:
                    57:d9:ac:79:ed:e2:6b:b1:4d:ea:6a:4e:a1:4a:37:
                    bf:0d:bc:0c:18:d4:6b:6c:af:48:8b:52:87:09:16:
                    de:11:fc:d6:b5:d9:90:3a:a2:c9:c4:80:6f:59:a8:
                    ae:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:1C:69:62:01:80:AD:2F:2B:36:3A:80:15:DC:AA:D5:24:EB:96
            X509v3 Authority Key Identifier:
                keyid:28:F9:F9:FB:DF:48:9E:86:A2:CB:92:9A:47:E8:BC:0A:BC:2A:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28F9F9FBDF489E86A2CB929A47E8BC0ABC2A1B1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/0/323830343a346665303a3a2f33322d3332203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:d9:1c:f5:8b:c2:05:a5:5c:ce:fb:8d:9f:a2:ec:05:16:
         9c:c6:16:28:3c:62:43:65:a3:f2:5d:66:f0:b3:b9:79:26:2f:
         cf:ad:73:3d:2d:f4:2e:56:3b:6a:b4:92:fe:5b:bd:02:e7:0b:
         84:24:22:31:dd:3c:10:4d:83:ba:82:48:24:30:ef:4c:8d:ad:
         c2:c1:47:61:e1:cf:e9:00:91:97:a7:8f:c8:0c:44:0b:d8:d3:
         1c:ad:f3:ee:16:f9:a6:29:a5:c2:c1:0f:2f:ed:f0:1f:98:79:
         63:76:40:a6:4c:81:4b:a0:6c:dc:e5:e3:59:74:62:24:3d:48:
         6a:e5:20:57:df:55:1d:b9:b7:0d:9e:44:7a:33:dc:cf:6f:b2:
         96:c6:11:2b:c7:fd:57:b2:ab:f2:ab:cb:c3:9c:a0:42:17:48:
         9c:2d:49:d1:b2:fa:b1:c1:e8:dc:9d:40:ce:02:4d:8b:4e:48:
         4b:6c:61:a7:5f:f8:b4:df:5a:65:eb:6d:9f:83:46:69:38:61:
         13:db:df:d4:c1:f3:5e:ed:3e:5a:56:3f:1f:3a:27:6e:93:79:
         49:2c:be:04:9c:75:fd:81:99:b4:95:c7:96:cf:e2:b2:07:1c:
         39:3f:50:92:41:94:df:f1:06:78:90:5f:6b:5b:61:6b:57:ee:
         71:0d:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:59 2025 by rpki-client