Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
File:                     323830343a346439303a3a2f33322d3332203d3e20323638323035.roa (raw, json)
Hash identifier:          U95ir9T5kBIGMLRHPXOoeKCEcB1x9145UPUGqhe/YAY=
Subject key identifier:   93:5D:A2:74:B3:D8:B7:BC:FC:7C:31:FF:5D:24:A3:DE:11:F9:DD:87
Certificate issuer:       /CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
Certificate serial:       4A01CD74D136005DE2E8F2B4609E39BECE45720E
Authority key identifier: FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa
Signing time:             Thu 24 Jul 2025 01:42:33 +0000
ROA not before:           Thu 24 Jul 2025 01:37:33 +0000
ROA not after:            Thu 23 Jul 2026 01:42:33 +0000
asID:                     268205
IP address blocks:        2804:4d90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl
                          rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 20:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:01:cd:74:d1:36:00:5d:e2:e8:f2:b4:60:9e:39:be:ce:45:72:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA3907829FD3FBDB932447112E7CCAE0C541AF99
        Validity
            Not Before: Jul 24 01:37:33 2025 GMT
            Not After : Jul 23 01:42:33 2026 GMT
        Subject: CN=935DA274B3D8B7BCFC7C31FF5D24A3DE11F9DD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:3b:6a:3b:ad:dd:19:c7:9e:82:c3:e1:58:
                    c0:b9:f7:15:59:55:0e:b0:71:86:b1:ab:02:ab:ad:
                    87:6f:c3:8c:08:23:db:df:a0:a9:3c:5a:da:c0:43:
                    d3:6b:29:af:15:67:95:27:a1:42:eb:f8:2c:2a:bd:
                    11:b7:0b:c1:71:2c:f8:35:25:76:e6:95:38:04:65:
                    06:6f:c8:ef:38:6a:45:51:fa:1a:9c:fa:27:6a:9c:
                    2e:4a:0d:88:ff:4c:91:61:6f:2b:5d:9b:57:92:dc:
                    b1:44:36:04:eb:bf:84:3d:04:45:28:e7:a2:52:79:
                    2a:90:fa:cf:de:37:61:27:ab:b4:9f:8c:cf:f1:ce:
                    c2:83:bb:e9:6c:28:97:67:72:4c:7a:5d:fb:78:35:
                    bd:78:1e:99:44:79:19:11:87:6f:0a:95:b4:5a:f4:
                    57:6c:4a:46:29:b2:ab:74:73:54:74:13:da:4c:6e:
                    84:8d:35:c5:59:ac:e9:5b:98:f1:06:70:9e:12:05:
                    18:1f:14:99:cd:25:95:70:81:a2:b1:d6:52:f0:78:
                    38:64:7c:c0:c6:83:00:b2:0b:54:c2:3f:e6:50:9d:
                    d6:57:50:41:76:88:05:27:b3:97:c7:12:18:77:23:
                    31:66:09:21:0f:bb:ee:8f:a6:bd:e1:a7:3c:9d:c4:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:A2:74:B3:D8:B7:BC:FC:7C:31:FF:5D:24:A3:DE:11:F9:DD:87
            X509v3 Authority Key Identifier:
                keyid:FA:39:07:82:9F:D3:FB:DB:93:24:47:11:2E:7C:CA:E0:C5:41:AF:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/FA3907829FD3FBDB932447112E7CCAE0C541AF99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA3907829FD3FBDB932447112E7CCAE0C541AF99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/323830343a346439303a3a2f33322d3332203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:82:77:20:7f:16:a3:1f:8d:38:0a:e6:62:60:8a:7b:3e:
         10:d7:11:07:04:33:57:67:cd:02:82:e0:df:83:ba:fd:03:9d:
         8a:0a:9b:63:b9:ef:e1:e1:97:8c:d2:8f:65:64:27:bb:03:5d:
         20:be:b5:05:d8:d6:17:b9:59:0f:b6:e1:dd:48:68:7d:e0:77:
         3f:82:4c:1a:09:a8:47:2e:18:af:86:98:63:78:8d:42:83:ea:
         f8:0f:f9:25:dc:60:af:eb:3f:70:68:71:c6:53:d0:bd:b1:72:
         ed:a7:c2:8f:1a:ca:b9:ba:22:a3:18:f6:0d:34:54:0e:12:73:
         4f:20:50:b3:f4:56:d0:8e:9d:10:2b:9b:4b:3d:fa:31:aa:48:
         16:e7:cb:74:09:ab:69:ed:ec:48:a6:a9:b6:f3:f4:87:b2:76:
         44:cb:10:b7:27:7d:fd:a9:d4:54:a3:74:a6:9c:54:b2:9f:03:
         6b:0d:30:a2:09:03:c9:7d:cc:dc:26:1c:30:47:f5:93:d1:19:
         ba:04:cd:a2:c7:f7:38:39:52:a1:9a:f7:8f:44:26:b8:00:ce:
         8b:43:ed:7a:22:0a:be:40:51:86:60:70:16:fa:99:fe:d2:e3:
         60:17:c8:9a:21:66:ef:f3:2f:32:e2:4b:53:e8:0e:13:c6:41:
         46:0f:28:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:26:30 2025 by rpki-client