Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
File:                     323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (raw, json)
Hash identifier:          VSH2fxDW2V0tjSJpkhSvwy0Yrc/hswmaGt0+pSH8vjk=
Subject key identifier:   5D:27:6B:16:8C:94:87:D6:4B:6B:4F:CE:FF:A5:E1:72:C2:AD:71:13
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       7B37E50A60CF7FC9C6C7DA48527F8DD65DFC6DEB
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
Signing time:             Mon 15 Sep 2025 20:13:31 +0000
ROA not before:           Mon 15 Sep 2025 20:08:31 +0000
ROA not after:            Mon 14 Sep 2026 20:13:31 +0000
asID:                     267263
IP address blocks:        2804:4ac8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 06:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:37:e5:0a:60:cf:7f:c9:c6:c7:da:48:52:7f:8d:d6:5d:fc:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Sep 15 20:08:31 2025 GMT
            Not After : Sep 14 20:13:31 2026 GMT
        Subject: CN=5D276B168C9487D64B6B4FCEFFA5E172C2AD7113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:43:6a:09:f8:62:c9:94:37:5c:b7:b8:bb:
                    54:3c:de:0c:4a:de:34:e8:51:8c:7c:36:0f:d1:b8:
                    34:ed:6e:ec:44:e5:5c:11:67:55:38:05:b4:20:af:
                    6f:7b:3e:ba:ee:4a:20:b5:8b:01:2c:f9:c2:77:e4:
                    0c:29:03:3e:e7:94:54:f2:ca:cf:77:93:cf:a9:f1:
                    70:a4:de:47:5d:64:ce:cb:d6:82:69:70:d9:db:12:
                    ea:df:f7:ec:5f:15:71:0c:d7:7a:58:b8:8f:f9:10:
                    6f:a8:22:b8:bc:54:55:82:97:5d:e2:8f:16:48:2a:
                    78:fb:15:fe:68:82:b2:11:06:e4:64:d6:6f:ba:73:
                    38:6f:fd:d4:e3:57:19:df:d8:36:30:3c:e4:c4:2b:
                    c7:bd:65:dc:97:de:b5:c7:8e:76:74:51:8b:70:18:
                    0c:0c:fa:01:95:38:7c:6b:7c:47:a1:13:42:4f:66:
                    b2:44:c3:b1:4b:c0:67:57:47:bf:b0:3b:2e:ad:07:
                    84:19:5f:71:d2:b7:e5:8c:28:f8:e9:26:72:3a:76:
                    ed:5a:8a:fe:b9:39:ed:6d:da:d0:8c:a2:d9:78:05:
                    2c:e1:c8:f6:f1:cc:1d:1d:40:85:ef:8c:3a:87:f4:
                    8e:d8:82:65:46:b3:77:15:8c:7e:94:f2:f4:9c:ed:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:27:6B:16:8C:94:87:D6:4B:6B:4F:CE:FF:A5:E1:72:C2:AD:71:13
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:20:cf:b1:72:f7:dd:3a:68:ee:4b:7c:98:d1:ca:97:bf:
         06:f8:68:3e:32:14:cc:ad:93:9f:8e:53:28:89:42:5e:69:ab:
         46:c1:37:16:6e:80:e6:93:d0:90:06:eb:d9:7e:7b:58:42:6a:
         66:c6:0e:e0:1f:82:3e:d1:77:4f:88:f8:39:2b:e1:a3:8a:bf:
         13:4c:ca:f9:85:d7:db:0d:eb:ca:e2:d6:63:88:e6:62:b4:4c:
         3b:4e:24:4c:08:fe:f3:d9:79:da:d7:5b:9f:ca:59:06:ec:46:
         e8:b5:b2:ec:e8:35:b1:a2:72:5b:a5:fa:3d:6c:c5:a3:1e:ba:
         80:da:88:d1:fa:71:98:a2:b1:b0:50:9e:a5:f4:05:cc:3a:4e:
         c6:d4:ef:6d:0c:ff:57:29:47:3f:8d:89:a4:e9:99:0b:65:b6:
         7e:ad:bd:ed:f9:07:1f:93:c3:e4:87:b2:1c:c9:21:d6:ee:95:
         e5:f6:77:12:44:1e:95:fd:ae:d4:21:1d:0d:7d:de:39:39:48:
         64:91:c9:fa:5b:ca:e5:c4:cb:c8:41:d4:b5:b6:7c:84:f9:2f:
         0c:9c:e3:53:dd:f2:8f:2d:f1:a6:4d:83:1a:e0:53:17:e5:96:
         eb:3e:9c:e6:d9:71:33:f7:8e:80:35:ff:14:40:01:b1:b9:76:
         18:83:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:23:23 2025 by rpki-client