Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
File:                     323830343a363931383a3a2f33322d313238203d3e20323730323438.roa (raw, json)
Hash identifier:          O1uPQ/wTenkax2KmZcI446DgIK9r+iKoGTSwgkQrYe4=
Subject key identifier:   04:97:A5:EE:4F:37:96:B7:E3:EA:38:DB:EC:BE:8C:1B:BC:13:3B:6B
Certificate issuer:       /CN=A0D377413A41A5AA392254A23418883FB5A476B0
Certificate serial:       33AAFC1217A69A8E0848497A7B6DEC8EC2C82D4B
Authority key identifier: A0:D3:77:41:3A:41:A5:AA:39:22:54:A2:34:18:88:3F:B5:A4:76:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D377413A41A5AA392254A23418883FB5A476B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa
Signing time:             Thu 04 Sep 2025 18:37:28 +0000
ROA not before:           Thu 04 Sep 2025 18:32:28 +0000
ROA not after:            Thu 03 Sep 2026 18:37:28 +0000
asID:                     270248
IP address blocks:        2804:6918::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/A0D377413A41A5AA392254A23418883FB5A476B0.crl
                          rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/A0D377413A41A5AA392254A23418883FB5A476B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D377413A41A5AA392254A23418883FB5A476B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 04:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:fc:12:17:a6:9a:8e:08:48:49:7a:7b:6d:ec:8e:c2:c8:2d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D377413A41A5AA392254A23418883FB5A476B0
        Validity
            Not Before: Sep  4 18:32:28 2025 GMT
            Not After : Sep  3 18:37:28 2026 GMT
        Subject: CN=0497A5EE4F3796B7E3EA38DBECBE8C1BBC133B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:b1:e9:b3:f9:b3:7e:04:2c:3b:74:ca:45:
                    84:f1:2f:e2:58:e8:d8:a4:24:10:0a:4e:26:55:92:
                    79:a2:05:63:8e:27:9d:47:a4:27:f9:8d:e1:7d:99:
                    06:8b:b0:e2:cb:0d:3a:82:18:60:77:89:76:f5:ad:
                    ff:04:29:70:e9:b3:fb:a0:80:89:64:7b:a9:1d:ff:
                    4c:d8:41:92:7a:56:67:27:51:c2:a1:b0:90:8d:8d:
                    6a:f8:33:1d:b0:02:11:e9:30:48:aa:1b:4d:ef:5b:
                    31:3b:40:05:c5:ed:58:e6:37:e1:4f:ff:55:89:8d:
                    b9:9e:57:4b:8a:d1:eb:5e:12:56:4a:60:80:3f:e4:
                    22:46:cd:87:e8:d8:5b:e4:8f:c3:f8:c3:ec:ee:f2:
                    f8:69:92:14:5c:fa:29:53:93:d2:81:70:54:d6:99:
                    4f:c8:bb:f3:56:ac:05:5e:e5:c4:c0:a5:74:14:fd:
                    11:11:0e:f4:8e:c6:fa:dd:90:2e:f3:88:f0:26:3c:
                    fc:ee:f9:90:6a:da:6b:5b:46:61:4e:7e:d2:2d:de:
                    c4:9e:2a:05:0c:e4:e3:d1:3d:28:a1:a6:01:19:9d:
                    8e:af:fb:e0:5b:09:2c:ae:c2:02:93:43:e3:2f:8d:
                    be:e7:89:1e:22:8e:0f:90:2d:92:d8:94:1f:19:96:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:A5:EE:4F:37:96:B7:E3:EA:38:DB:EC:BE:8C:1B:BC:13:3B:6B
            X509v3 Authority Key Identifier:
                keyid:A0:D3:77:41:3A:41:A5:AA:39:22:54:A2:34:18:88:3F:B5:A4:76:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/A0D377413A41A5AA392254A23418883FB5A476B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D377413A41A5AA392254A23418883FB5A476B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHENi3DBehDtMTmBMS1yRA33AiVRP5MkiKz9wMe5Qqn7/0/323830343a363931383a3a2f33322d313238203d3e20323730323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6918::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:43:69:12:77:a9:c7:82:31:1b:0a:cf:8c:cd:65:47:d5:0f:
         a6:1c:40:8c:50:e3:01:4a:08:d9:10:11:06:64:b3:59:95:b2:
         07:5a:f9:aa:61:0e:04:b1:ad:25:f8:14:31:85:be:6f:71:5d:
         14:dc:c5:97:75:0b:bc:27:da:6f:0d:4b:89:35:85:83:72:9f:
         93:1c:c0:22:f7:ca:c7:99:eb:84:3d:8e:2a:df:88:bc:3c:ab:
         cd:9c:80:45:e1:ef:23:4e:4a:8f:80:4a:60:24:55:61:82:f7:
         fc:a7:51:2d:6c:c2:15:88:3d:86:38:06:df:08:ab:8e:d7:b9:
         a2:43:ee:62:ff:c6:58:18:12:95:f1:1a:f4:37:ba:77:13:11:
         8e:41:81:d0:c8:73:58:09:cf:ee:10:79:11:05:ce:3e:ec:5b:
         ed:bf:33:7e:98:d3:30:b8:a8:7d:8d:33:04:51:89:ff:79:86:
         cf:95:6b:66:62:08:33:6c:18:3a:b9:4b:f5:98:eb:19:58:de:
         fb:82:02:f3:12:25:07:99:a4:27:84:0d:ef:1b:4b:75:88:1e:
         e8:18:b9:2c:7c:98:75:aa:ff:80:df:09:e8:74:d3:72:1b:9f:
         ff:c6:d0:3d:9a:81:f8:28:75:40:9a:ab:fc:43:97:ab:2f:ca:
         4c:f2:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:11:36 2025 by rpki-client