Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/323830343a376530303a3a2f33322d313238203d3e20323731353936.roa
File:                     323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (raw, json)
Hash identifier:          atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=
Subject key identifier:   70:92:77:09:97:41:47:EC:F5:FD:AB:2C:90:8D:BE:A3:2C:80:B3:43
Certificate issuer:       /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
Certificate serial:       5D64B5C2CB251AA3E90E01F1AE3ED3D5782FFE99
Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/323830343a376530303a3a2f33322d313238203d3e20323731353936.roa
Signing time:             Wed 27 Aug 2025 02:08:42 +0000
ROA not before:           Wed 27 Aug 2025 02:03:42 +0000
ROA not after:            Wed 26 Aug 2026 02:08:42 +0000
asID:                     271596
IP address blocks:        2804:7e00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl
                          rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 08:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:64:b5:c2:cb:25:1a:a3:e9:0e:01:f1:ae:3e:d3:d5:78:2f:fe:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC
        Validity
            Not Before: Aug 27 02:03:42 2025 GMT
            Not After : Aug 26 02:08:42 2026 GMT
        Subject: CN=70927709974147ECF5FDAB2C908DBEA32C80B343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:13:90:78:c3:29:ae:9e:1f:8e:ce:d2:b5:
                    ab:3f:4d:93:15:66:9d:23:c7:6c:92:cd:54:1c:c4:
                    bf:d2:e8:e6:07:7b:19:21:75:f0:0f:63:2a:2b:4c:
                    24:b5:8f:f8:6e:e8:55:70:55:3c:5e:ae:6f:25:67:
                    6d:54:47:e7:2c:a8:4e:55:14:50:36:06:71:97:a7:
                    d7:e5:de:43:8a:46:eb:c5:96:1b:c2:7f:eb:cb:b3:
                    11:8b:1f:ad:a5:fb:54:2b:aa:4f:c4:53:25:96:29:
                    c7:2f:22:f3:9c:5d:d7:79:4d:2f:85:0b:b0:5d:d3:
                    77:2c:63:8c:9b:7f:7d:f5:dd:5d:ff:14:f8:d2:8d:
                    d3:31:7d:2b:b3:b9:9e:8a:17:f3:36:53:55:ff:3c:
                    83:af:7b:2c:f3:eb:5b:34:5e:52:0a:51:a1:d3:ba:
                    82:91:85:22:6a:be:ee:f2:b8:f6:69:0f:4c:de:65:
                    7a:5b:b5:cd:e6:ac:12:c6:9f:0e:ed:c5:43:2a:7c:
                    60:4a:c1:44:aa:ab:84:b6:13:74:dc:0f:6c:84:4e:
                    45:35:75:f1:30:b0:b7:35:ea:ed:2f:66:2e:40:94:
                    7e:d1:9f:62:1e:29:d3:ae:9e:a5:01:40:cd:31:2b:
                    14:ea:d4:f1:8a:09:9d:ff:2b:7e:93:ec:e0:5e:29:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:92:77:09:97:41:47:EC:F5:FD:AB:2C:90:8D:BE:A3:2C:80:B3:43
            X509v3 Authority Key Identifier:
                keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/323830343a376530303a3a2f33322d313238203d3e20323731353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d4:86:99:ae:39:92:62:11:f9:64:37:c2:1c:b5:59:5e:53:
         de:3f:2d:c1:7f:76:03:ee:05:a3:03:11:8b:66:3c:d1:bd:54:
         4a:f3:3f:d9:3f:07:f7:a7:8c:f3:3e:b3:49:47:fb:50:8d:c0:
         8a:75:12:0e:5c:0a:07:de:c4:e7:34:c7:14:47:f5:65:26:3c:
         6c:4e:04:c6:f8:6d:43:32:4f:eb:1a:11:88:7c:93:0b:98:b2:
         a3:f4:cd:1a:24:32:b5:a9:bc:55:71:ba:14:0f:db:a0:c7:b2:
         15:93:61:6e:36:d0:8d:8c:8e:e1:df:f7:b0:1c:91:8b:ee:99:
         46:50:db:2a:e7:c4:20:a0:15:23:7e:7e:d8:54:ce:32:29:86:
         5a:ce:26:4e:c1:38:86:54:53:fd:fe:1b:23:d2:0f:7d:7b:37:
         c9:2d:d5:1d:65:fc:8b:7d:aa:5e:48:21:bc:61:0d:b6:c6:f3:
         7f:a8:02:28:b4:4e:65:e5:db:db:37:2d:b0:f1:3e:df:5c:f6:
         f6:ea:30:18:a2:b1:12:fe:e0:32:6b:77:1a:ce:3e:fd:43:22:
         2d:51:05:39:d4:20:0c:27:31:a7:ac:c4:f0:d5:79:1e:e9:34:
         d4:7e:50:08:4f:26:d1:aa:ad:cb:af:20:f6:72:92:05:72:5b:
         c0:80:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:37:47 2025 by rpki-client