Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3438203d3e20323734363437.roa
File:                     323830343a393138383a3a2f33322d3438203d3e20323734363437.roa (raw, json)
Hash identifier:          Bni/gewlTpvsi/d7y06XdboHoggaWC2Q8LtTu0dJx4Y=
Subject key identifier:   B8:4C:BF:DE:08:1D:73:47:0D:36:8F:0F:4B:D2:B1:47:7C:C3:2D:5B
Certificate issuer:       /CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
Certificate serial:       2461F96255690C483EB51864C18CB99B5A459C55
Authority key identifier: D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3438203d3e20323734363437.roa
Signing time:             Wed 27 Aug 2025 14:20:49 +0000
ROA not before:           Wed 27 Aug 2025 14:15:49 +0000
ROA not after:            Wed 26 Aug 2026 14:20:49 +0000
asID:                     274647
IP address blocks:        2804:9188::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:f9:62:55:69:0c:48:3e:b5:18:64:c1:8c:b9:9b:5a:45:9c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A007F1729CF77E579054C48F61B1DD7A6652AC
        Validity
            Not Before: Aug 27 14:15:49 2025 GMT
            Not After : Aug 26 14:20:49 2026 GMT
        Subject: CN=B84CBFDE081D73470D368F0F4BD2B1477CC32D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:6b:10:99:b8:e9:46:11:3f:87:e7:d9:99:
                    cf:1c:22:2f:53:76:43:4b:5b:94:4f:ab:49:f2:c2:
                    2e:cd:3d:00:61:4e:14:6b:6b:71:b0:41:26:c5:de:
                    4f:62:fd:52:a8:ba:ba:f1:31:8a:02:36:9d:7e:5e:
                    05:01:54:1e:94:b5:50:56:98:a7:b9:b8:21:db:be:
                    71:35:91:92:bd:ec:94:41:c2:79:77:ee:e5:b8:4f:
                    c4:96:a9:ca:79:55:ee:96:a4:f0:ab:f4:07:a6:10:
                    2d:aa:1e:ed:e7:60:13:8b:4e:4a:aa:16:4b:98:0f:
                    c0:d2:11:96:2c:5d:f3:9e:d5:1a:09:d0:28:55:da:
                    1a:70:77:b3:0e:3f:b7:e3:cb:e2:c6:8f:cf:b2:a8:
                    47:0f:c6:01:53:c7:6d:cd:c9:ee:e7:8b:60:d3:57:
                    60:73:d3:b0:53:ef:c3:ec:66:56:27:85:83:23:5f:
                    54:fb:b8:84:87:5f:d4:01:29:47:05:28:49:ab:6d:
                    21:67:45:6b:6a:34:8f:2a:4e:79:f2:cb:70:66:56:
                    1f:f1:5b:d2:de:bf:c3:38:d5:03:c7:cf:16:6d:43:
                    7e:a6:c2:23:9c:b1:06:27:ec:8c:87:ea:ab:16:66:
                    37:8a:e6:61:38:e9:3c:3a:96:bb:8a:ad:5d:a0:e9:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4C:BF:DE:08:1D:73:47:0D:36:8F:0F:4B:D2:B1:47:7C:C3:2D:5B
            X509v3 Authority Key Identifier:
                keyid:D5:A0:07:F1:72:9C:F7:7E:57:90:54:C4:8F:61:B1:DD:7A:66:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/D5A007F1729CF77E579054C48F61B1DD7A6652AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A007F1729CF77E579054C48F61B1DD7A6652AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3438203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:60:61:f3:ca:cd:05:06:6b:9e:7c:90:92:0d:97:bb:ab:
         16:2e:fd:89:8f:18:ae:24:75:47:75:59:3b:3c:41:7b:90:a5:
         66:65:24:6c:cb:d6:cb:65:30:5c:40:11:4e:0b:0b:00:76:e5:
         22:de:53:e9:12:4e:c9:c6:75:df:ed:e6:b0:58:ea:18:f5:4a:
         ba:da:f2:dc:15:c8:9e:24:c1:cb:b2:47:3e:ab:00:9b:1f:56:
         4a:fd:22:8e:ac:54:66:05:26:3e:8c:65:4a:22:92:0e:d1:26:
         03:51:97:3e:6e:06:24:31:08:51:7f:f4:ce:87:1b:46:96:12:
         82:99:58:ac:71:d2:71:e5:ac:66:be:0f:d7:ea:a8:ea:1f:d8:
         3f:2a:b6:cf:cb:52:9a:b4:e7:2a:a1:24:bd:d2:e9:f5:6b:b5:
         a1:ef:fc:22:8d:64:17:20:5d:10:e1:b5:9a:02:92:f0:0a:28:
         1e:53:d8:e0:4f:b9:6c:13:82:16:48:3c:64:9c:88:ea:8a:e2:
         3c:e8:49:63:db:3a:52:e8:2b:5d:18:f7:db:c5:7a:73:fe:fc:
         f0:8f:0b:0f:91:de:53:6f:84:43:26:0b:06:6b:12:a0:06:66:
         88:f8:4f:bd:e5:bd:06:e8:49:a6:42:64:6c:db:ab:87:3c:24:
         de:45:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:58:41 2025 by rpki-client