Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa
File:                     323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa (raw, json)
Hash identifier:          3a9UnHQ1lma2jvTdR8Z5LxhGO+PtIrUpSv5VAj72N98=
Subject key identifier:   A9:3E:AE:8A:F1:26:5F:47:D4:E8:7E:EA:86:35:25:6A:A5:F7:F3:CF
Certificate issuer:       /CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
Certificate serial:       4766A72492634232BEF66FFC79020BBD6FD142C0
Authority key identifier: 09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa
Signing time:             Fri 05 Sep 2025 17:21:31 +0000
ROA not before:           Fri 05 Sep 2025 17:16:31 +0000
ROA not after:            Fri 04 Sep 2026 17:21:31 +0000
asID:                     265419
IP address blocks:        2804:33d4:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:a7:24:92:63:42:32:be:f6:6f:fc:79:02:0b:bd:6f:d1:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09FAF7FC2061224C37D7CA16E7184E5BE3F1279F
        Validity
            Not Before: Sep  5 17:16:31 2025 GMT
            Not After : Sep  4 17:21:31 2026 GMT
        Subject: CN=A93EAE8AF1265F47D4E87EEA8635256AA5F7F3CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:d2:82:cd:da:92:7d:73:1a:56:8d:d1:da:
                    79:1a:95:22:13:58:a4:e2:9f:41:6b:66:07:8b:85:
                    40:2a:39:d1:3e:cb:7a:a4:ca:05:de:5f:96:5f:eb:
                    4b:94:b4:57:73:9e:c3:76:9b:99:63:1f:cd:00:03:
                    5f:27:38:6f:f3:d8:0d:8c:58:69:4d:33:a0:0e:d3:
                    17:48:66:d1:30:65:b1:e0:30:1d:3e:39:bb:71:9a:
                    1b:9d:2d:2d:34:f1:3c:de:41:5f:84:97:f3:2c:70:
                    04:b0:92:be:ef:e4:36:78:0b:22:09:28:d7:29:ec:
                    84:39:e0:12:f7:8b:68:bb:c9:00:fc:c1:ca:9e:ba:
                    43:5b:f2:89:b0:d4:aa:b9:7b:51:e3:89:9a:2a:39:
                    22:95:d3:b6:5a:16:0e:ad:25:2b:09:e8:40:a0:18:
                    ed:8c:a8:fe:dc:19:1d:bf:fb:d4:e0:0b:20:36:11:
                    45:94:1a:9d:b1:fc:da:8d:56:8c:e8:dd:a7:d7:f1:
                    9c:97:1e:9e:55:cd:cd:ec:da:8e:04:e5:dd:ba:c8:
                    9c:4f:c0:88:8e:7d:aa:cb:95:4e:ef:fb:1d:ab:f3:
                    18:16:c9:cc:89:9d:e9:2d:90:d2:7b:5a:d6:50:c1:
                    07:46:1d:ae:cf:9e:f7:41:7b:ee:2c:f2:1a:20:26:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3E:AE:8A:F1:26:5F:47:D4:E8:7E:EA:86:35:25:6A:A5:F7:F3:CF
            X509v3 Authority Key Identifier:
                keyid:09:FA:F7:FC:20:61:22:4C:37:D7:CA:16:E7:18:4E:5B:E3:F1:27:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09FAF7FC2061224C37D7CA16E7184E5BE3F1279F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a613a3a2f34382d3438203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:83:bb:9e:ad:83:f5:58:1a:eb:5d:fe:dc:f5:a5:d6:20:f7:
         38:06:2c:7b:0a:77:a7:48:1e:b8:03:58:18:e5:4e:a1:2d:7c:
         7f:3a:cc:fd:6a:40:4b:2f:ae:c5:f2:9e:e5:37:ae:e6:67:a9:
         f3:90:ee:6f:ac:c1:f1:94:a4:31:62:39:92:95:05:ac:aa:31:
         1d:62:06:f7:23:50:ef:e0:d7:30:29:e9:57:6b:3d:21:b6:0b:
         c0:ac:c6:d8:90:1a:77:96:7c:78:46:10:82:b7:f7:cb:8d:7d:
         dd:d6:48:0b:28:44:30:da:dc:93:4d:a3:ea:9c:7a:05:64:df:
         5e:c1:88:e7:24:e1:42:e6:dc:cb:57:80:fd:61:43:da:b2:cd:
         e9:9c:b3:26:91:ce:93:0f:04:c9:f0:28:1c:59:37:b8:82:e6:
         32:a9:67:12:ba:23:3e:17:6e:0e:e2:2b:40:35:d0:33:99:0b:
         31:e3:f8:32:fa:33:46:15:b0:35:87:ff:cd:5f:d6:6b:99:bc:
         49:e0:a1:52:64:9d:b2:7f:7e:a5:7b:fb:fb:b0:e3:29:d6:93:
         b0:ae:fd:5b:97:44:cb:1d:1f:80:b1:c2:16:ca:27:0a:3a:eb:
         20:b8:e9:08:42:e5:f3:ad:dc:40:3e:a3:d4:fd:28:c7:9e:55:
         9c:f2:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:08 2025 by rpki-client