Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa
File:                     323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa (raw, json)
Hash identifier:          X0E3zTRBUOkPabFqAeiEPSYOlwn/AyD20fkmcBQQ1A8=
Subject key identifier:   07:20:0C:52:27:54:23:9C:5E:AD:D1:FE:C0:C9:AE:B8:D9:11:FE:4F
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       5FFF92EBAF19461D16690AD77DDA9C6DBB0BE778
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:55 +0000
ROA not before:           Thu 21 Aug 2025 17:37:55 +0000
ROA not after:            Thu 20 Aug 2026 17:42:55 +0000
asID:                     265419
IP address blocks:        2804:33d4:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ff:92:eb:af:19:46:1d:16:69:0a:d7:7d:da:9c:6d:bb:0b:e7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:55 2025 GMT
            Not After : Aug 20 17:42:55 2026 GMT
        Subject: CN=07200C522754239C5EADD1FEC0C9AEB8D911FE4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:bb:cf:c7:f7:b3:a8:61:e9:4e:10:93:cd:
                    2d:31:13:35:7d:83:d6:b7:9e:2b:70:c8:cf:d1:b0:
                    d0:68:0f:30:79:0e:fb:f5:19:2f:63:a9:ea:40:87:
                    92:2b:07:21:f7:6c:f8:36:04:59:86:43:40:09:1e:
                    c7:66:5d:4d:56:44:18:08:1f:55:fc:8a:1d:d4:05:
                    ad:b2:1e:c0:13:b6:67:31:9a:18:e2:18:04:c9:a2:
                    30:f6:0c:d3:69:b3:15:47:0e:9e:71:13:d4:01:bd:
                    ae:8c:5d:96:c9:76:b2:56:43:f3:2c:97:63:cc:96:
                    90:19:86:6b:db:36:8b:03:c7:bc:2c:d1:4a:1a:9b:
                    16:f6:71:08:2a:89:0a:0c:78:72:e1:66:ad:38:e5:
                    41:df:1c:27:dd:28:3a:86:14:d8:ae:a6:86:0b:c4:
                    47:a5:92:f0:15:0a:0b:36:df:54:f1:63:8e:1f:c4:
                    b8:2d:52:b3:c8:ec:1d:65:09:e2:1e:7e:82:fe:ae:
                    73:59:e8:42:59:71:3f:cb:8e:4d:21:1a:4a:74:e0:
                    1a:db:86:4b:62:66:f1:d9:01:ac:3a:ae:80:07:98:
                    4c:3c:73:fe:2f:82:58:0a:19:c4:51:be:0b:53:50:
                    a2:f8:6b:f0:4e:83:1c:72:f6:b2:7b:94:ce:90:a4:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:20:0C:52:27:54:23:9C:5E:AD:D1:FE:C0:C9:AE:B8:D9:11:FE:4F
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:66:f7:9f:b3:55:77:31:e9:b3:2f:29:97:c0:f3:cf:d9:
         c1:32:49:e0:6f:59:c6:fe:29:2d:88:44:b6:fe:b2:56:b0:1d:
         19:cb:8c:4c:f6:e2:3d:0a:b1:1b:9a:3d:ca:89:f5:82:5d:25:
         57:e5:ea:1d:68:43:13:9b:b6:c8:28:fd:55:bd:a8:ba:b6:82:
         f1:04:64:a1:07:36:63:f5:0c:af:29:b0:58:84:de:93:b8:af:
         bc:f0:46:c8:b5:50:3e:da:5d:ef:09:21:c6:f6:ff:4a:01:79:
         c1:0d:e3:33:47:c9:1c:e3:e6:41:d7:35:e9:fc:12:b6:2d:e7:
         07:1a:9b:9d:5f:90:33:08:00:bf:c2:0b:ea:07:8b:36:70:fd:
         e9:fc:d0:a6:b0:73:04:06:65:c3:8a:81:cb:a3:6f:12:54:d8:
         4c:0e:6a:e2:8c:b2:58:63:91:eb:14:76:05:c6:9f:60:f1:e5:
         4f:a0:82:76:ec:d7:66:d3:36:1f:46:35:f5:cf:bd:21:88:57:
         84:d3:91:11:c0:41:c5:d8:a6:04:cc:26:3b:3f:29:fb:b8:6e:
         76:82:8c:bd:51:9f:dd:c6:05:31:c9:2b:71:d8:fd:56:68:7f:
         f2:4d:a6:fe:02:8b:59:94:69:41:16:9e:ff:9b:23:cd:df:e7:
         8c:2f:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:18 2025 by rpki-client