Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa
File:                     323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa (raw, json)
Hash identifier:          4b4GefeN5Secy7Mu3rOwAhfqKkiNqeH9skstI15GUtA=
Subject key identifier:   5D:A1:A8:00:1E:6E:E2:28:CC:5E:AC:34:F7:DE:90:30:35:2B:7C:6E
Certificate issuer:       /CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
Certificate serial:       712B0F6CBE77D946AFFDB1FFBDF28E0BA590337E
Authority key identifier: D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa
Signing time:             Thu 21 Aug 2025 17:42:58 +0000
ROA not before:           Thu 21 Aug 2025 17:37:58 +0000
ROA not after:            Thu 20 Aug 2026 17:42:58 +0000
asID:                     265419
IP address blocks:        2804:33d4:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2b:0f:6c:be:77:d9:46:af:fd:b1:ff:bd:f2:8e:0b:a5:90:33:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FE73496B303F7473BC7683C3E88B77B8F07D23
        Validity
            Not Before: Aug 21 17:37:58 2025 GMT
            Not After : Aug 20 17:42:58 2026 GMT
        Subject: CN=5DA1A8001E6EE228CC5EAC34F7DE9030352B7C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:ce:68:2b:84:b8:e1:2b:07:b5:94:f1:26:
                    02:62:cb:40:1a:03:68:fc:95:7a:ef:ad:5e:24:b3:
                    3c:e4:fa:f3:37:3a:bb:66:8a:82:32:1a:cc:48:11:
                    75:13:84:6b:99:35:28:52:c9:7f:c7:e3:4b:52:87:
                    a0:c0:a6:22:9a:e4:0f:11:95:c5:96:4b:d0:09:f7:
                    8b:29:e5:e5:3a:14:a9:85:55:e4:f6:0a:29:5e:4c:
                    fb:05:85:32:5d:e8:95:18:d6:03:64:bd:b4:59:24:
                    12:6e:fd:80:ef:7a:29:76:10:64:ca:4c:87:fc:69:
                    f3:ef:39:cf:7d:a2:32:7c:ce:30:69:11:35:aa:c9:
                    5a:47:2d:a1:9d:80:78:74:ee:17:0e:1e:b7:d2:e2:
                    f4:c5:8b:ba:5e:9d:23:c3:f3:39:b0:06:5e:30:de:
                    7f:7c:8d:e2:1f:01:81:81:b7:8a:3c:75:0f:d9:f2:
                    3a:27:af:00:cd:3e:bb:76:c6:74:5f:13:53:70:f6:
                    27:90:7a:b9:28:0a:ad:d0:b6:b3:76:6d:cc:91:55:
                    c5:f5:fc:61:31:2c:71:47:53:6d:a3:dc:8c:80:b0:
                    43:d6:14:77:1a:f3:8a:4a:42:4c:2a:93:4e:6f:fe:
                    90:bf:19:fb:1c:a4:a1:db:33:49:34:f0:cf:39:6c:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A1:A8:00:1E:6E:E2:28:CC:5E:AC:34:F7:DE:90:30:35:2B:7C:6E
            X509v3 Authority Key Identifier:
                keyid:D6:FE:73:49:6B:30:3F:74:73:BC:76:83:C3:E8:8B:77:B8:F0:7D:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/D6FE73496B303F7473BC7683C3E88B77B8F07D23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FE73496B303F7473BC7683C3E88B77B8F07D23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/323830343a333364343a623a3a2f34382d3438203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33d4:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:b7:b4:a0:f6:45:72:8d:90:0c:09:5e:a0:39:c9:2c:d7:
         80:ab:21:3d:e9:c7:95:71:d9:5d:34:37:4b:77:f5:93:12:33:
         96:08:d5:db:4b:40:46:df:2a:29:a7:ec:0e:e0:38:0f:79:85:
         8d:e6:90:3f:a3:5e:12:1d:b6:59:3d:2e:0a:46:a2:fe:32:f7:
         c0:29:82:cd:69:b1:2b:36:b8:08:00:60:0d:d7:a6:99:bd:de:
         29:05:ae:e1:45:19:ba:8b:f8:34:00:44:0a:d1:38:2f:4a:2c:
         b0:39:84:2d:aa:09:d2:be:9b:d9:7b:75:78:d3:61:c0:d6:09:
         3b:18:1a:3c:51:e7:e1:bd:53:bc:f8:d2:28:08:6d:db:99:46:
         56:9d:1b:3a:06:a6:47:50:7e:64:1d:90:80:71:b6:b7:18:81:
         c8:72:57:df:b7:85:3e:38:d9:9d:1a:a8:b8:f7:84:49:56:fe:
         08:4c:ba:59:5f:a0:7a:af:b0:7f:85:f0:86:4e:07:66:8f:5f:
         1b:8d:1c:1c:be:6b:04:72:c4:79:c6:36:31:5a:74:a8:6d:af:
         6c:4a:7c:90:e5:12:07:1e:84:fe:09:bf:28:b5:4a:a6:3a:a2:
         66:d8:36:7e:36:9c:62:91:1a:53:16:fb:89:ce:35:f0:19:2c:
         0c:6a:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:25 2025 by rpki-client