Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa
File:                     323830343a333032343a3a2f33322d313238203d3e20323634393332.roa (raw, json)
Hash identifier:          CJb/R8lfVZNFnEVbcBYc5lEo9LH01ERHg/ohf3iZva4=
Subject key identifier:   EF:6A:83:F9:CB:12:A4:45:21:D2:6F:11:79:AE:9B:7B:B2:54:17:B9
Certificate issuer:       /CN=78BB725DD620FC3670B009AE72263BDA1E7AC92C
Certificate serial:       269EF4C6A1B478F192D06BBABCFAB33F211A08AB
Authority key identifier: 78:BB:72:5D:D6:20:FC:36:70:B0:09:AE:72:26:3B:DA:1E:7A:C9:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa
Signing time:             Mon 02 Jun 2025 13:41:26 +0000
ROA not before:           Mon 02 Jun 2025 13:36:26 +0000
ROA not after:            Mon 01 Jun 2026 13:41:26 +0000
asID:                     264932
IP address blocks:        2804:3024::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.crl
                          rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9e:f4:c6:a1:b4:78:f1:92:d0:6b:ba:bc:fa:b3:3f:21:1a:08:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78BB725DD620FC3670B009AE72263BDA1E7AC92C
        Validity
            Not Before: Jun  2 13:36:26 2025 GMT
            Not After : Jun  1 13:41:26 2026 GMT
        Subject: CN=EF6A83F9CB12A44521D26F1179AE9B7BB25417B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:1b:0e:fb:42:5f:04:24:e6:eb:f1:43:08:
                    70:45:64:c3:de:cb:20:bf:19:1e:62:48:23:53:7c:
                    15:fa:f4:86:9f:ea:11:c5:69:cb:10:6e:ba:cf:24:
                    a1:5b:f6:61:3e:f6:ce:34:f0:53:ab:a4:5c:6d:3d:
                    a2:36:29:91:33:a9:33:d7:12:d5:5c:4d:9e:4d:37:
                    c5:73:db:a5:83:fe:8a:8f:0c:ef:77:67:27:05:c2:
                    dd:6f:8e:c3:bd:95:cf:6e:29:e1:cf:f0:8c:fc:29:
                    ab:3f:5a:20:15:08:f0:0f:e7:4e:11:30:a3:55:21:
                    44:57:68:d4:4d:bf:6d:0a:ce:b6:04:df:c1:b1:b0:
                    eb:0e:13:6e:98:46:c1:6a:39:0c:d7:72:46:87:76:
                    e9:5e:fd:f2:a6:72:8d:49:df:de:c2:a3:8d:73:33:
                    24:dc:63:30:b7:fa:d3:60:22:ac:a3:78:81:16:56:
                    6a:3a:e5:67:5d:6b:93:b2:d0:81:54:8e:5e:9b:ee:
                    48:1d:d8:0b:27:52:18:2e:21:83:63:64:3d:6d:9c:
                    03:74:20:52:67:8b:40:c1:96:4b:61:8b:32:a9:1b:
                    3e:0d:fa:38:28:3c:24:8c:68:e8:97:f8:fe:51:58:
                    d9:5d:ed:25:4a:af:bc:b0:be:24:f2:77:4a:6f:3d:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:83:F9:CB:12:A4:45:21:D2:6F:11:79:AE:9B:7B:B2:54:17:B9
            X509v3 Authority Key Identifier:
                keyid:78:BB:72:5D:D6:20:FC:36:70:B0:09:AE:72:26:3B:DA:1E:7A:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/78BB725DD620FC3670B009AE72263BDA1E7AC92C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78BB725DD620FC3670B009AE72263BDA1E7AC92C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDzXJtxXvXRkjVa6fiUEDTfdactB9KNnhnBKGU2gQiW2/0/323830343a333032343a3a2f33322d313238203d3e20323634393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3024::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:7d:20:11:cd:9f:82:53:5b:88:3a:bb:08:bb:95:65:9a:
         b3:a5:cc:33:61:e4:1e:7a:70:01:cf:28:f0:05:9f:6c:b9:12:
         33:7c:44:7d:df:b7:4d:31:9e:96:2d:84:4e:a5:d1:3f:7a:a6:
         77:ed:c0:df:c7:74:83:ac:7b:99:c0:5a:f9:5e:4f:bf:93:49:
         42:c6:2a:0e:30:4f:2d:52:dd:c1:28:ee:a1:81:60:f4:d5:cd:
         8d:e4:62:ff:b3:ad:7f:75:fe:d8:a4:d9:3e:f1:f8:c3:ee:4f:
         82:87:18:35:2d:be:fd:c1:ab:36:00:2e:9e:37:71:2e:25:0a:
         8a:75:69:c8:b4:83:8c:ef:b3:bf:d8:91:55:09:44:58:a5:c0:
         2a:8d:86:80:d4:a1:cf:31:b4:5c:b0:e7:25:b8:d5:5e:4f:db:
         b5:63:51:7f:09:1f:e0:81:20:f2:bb:1f:27:97:a2:0a:ce:57:
         b2:4c:7f:d1:6d:de:39:5b:08:e6:dd:a7:7f:95:e2:da:f0:25:
         54:9b:ae:78:79:fa:9d:f1:09:fc:62:dc:c7:8a:ac:19:16:eb:
         18:c7:b4:5c:0e:a0:fd:2d:43:ea:05:e5:ca:bd:63:ea:77:1d:
         d5:61:8d:6b:96:e8:b4:57:14:c8:09:b8:cd:db:52:4f:59:4a:
         b6:75:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:51 2025 by rpki-client