Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33322d3332203d3e20323732313637.roa
File:                     323830343a383266343a3a2f33322d3332203d3e20323732313637.roa (raw, json)
Hash identifier:          IzTVWvSf9u11DY6MdNWxDB5IY3k6uVZLdbX98MSihQc=
Subject key identifier:   6A:4E:73:19:99:C2:BA:C4:8E:74:64:38:10:CA:9E:E3:09:64:25:46
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       2D34F7655584294CCD30A714D736D9F0CFBCCA85
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33322d3332203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:32:57 +0000
ROA not before:           Sun 22 Jun 2025 23:27:57 +0000
ROA not after:            Sun 21 Jun 2026 23:32:57 +0000
asID:                     272167
IP address blocks:        2804:82f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:f7:65:55:84:29:4c:cd:30:a7:14:d7:36:d9:f0:cf:bc:ca:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:27:57 2025 GMT
            Not After : Jun 21 23:32:57 2026 GMT
        Subject: CN=6A4E731999C2BAC48E74643810CA9EE309642546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:cf:6f:f6:ce:04:b4:19:5a:a6:0b:2d:c9:
                    47:f5:58:54:60:ea:2b:d9:ec:80:34:59:51:a4:94:
                    ce:32:04:70:b1:14:97:cd:2a:54:c7:23:ae:0d:bc:
                    59:22:d0:4f:24:74:fd:2e:b6:e4:3f:a6:1b:38:8c:
                    c1:b6:66:ce:09:10:64:75:a1:32:64:6d:79:4f:c2:
                    90:25:aa:7d:ae:f8:4f:3b:9f:e2:cd:a6:54:bf:98:
                    6f:d0:26:08:84:db:52:60:86:c4:ec:75:d9:b0:2d:
                    d9:80:d7:d9:ff:6d:af:d4:5e:a6:de:2f:76:ee:0d:
                    a1:07:ef:50:c4:47:5f:52:1b:3f:19:b7:81:ff:e4:
                    44:ff:6d:8b:a8:f7:6c:ae:18:05:51:80:fc:c1:2e:
                    c4:3e:c1:db:58:90:c2:ff:67:39:46:71:3d:53:15:
                    ee:ab:60:1e:69:39:7c:3b:ab:87:a5:fc:ae:e6:4a:
                    d5:d0:5a:58:7c:63:e9:d5:30:90:b7:f1:96:5e:a0:
                    cb:50:b7:fd:48:03:f0:09:6c:31:a0:b6:a2:dd:b8:
                    dd:ea:64:84:76:13:3b:d9:01:46:8e:4f:65:4c:1a:
                    01:d1:08:76:e2:23:5a:68:50:00:da:10:a8:c2:1c:
                    07:3c:d5:61:17:ea:5c:60:7c:d8:0b:1a:0b:b1:84:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:73:19:99:C2:BA:C4:8E:74:64:38:10:CA:9E:E3:09:64:25:46
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a3a2f33322d3332203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:35:54:7b:6c:bd:b1:3a:b6:3a:08:ba:01:75:94:b0:fe:08:
         44:7d:69:8a:cf:61:42:56:4e:27:69:96:ef:f2:03:7f:d9:73:
         af:47:e9:c3:7f:3a:15:69:09:9a:a5:f3:15:78:9d:ab:9f:70:
         0c:28:12:67:93:fc:2a:0f:b9:44:1f:4d:6f:98:30:05:29:d7:
         da:19:6a:11:d2:4d:aa:c5:1b:13:f5:0c:98:93:a3:10:e2:ba:
         72:58:86:c3:6f:cf:98:a3:7b:f8:b9:ff:29:32:61:3d:96:a1:
         e7:4e:c5:f2:4f:03:aa:24:dd:e9:30:0e:4d:04:e5:d0:ff:ef:
         4f:21:4f:fb:39:d4:93:2d:67:84:6d:e0:27:fa:82:93:75:31:
         4e:9f:df:ff:4e:02:71:3f:c6:bd:88:3e:b0:51:4d:fe:da:f8:
         ab:23:82:b7:9f:ad:c0:d1:13:47:3b:4e:52:e4:fe:73:f4:f2:
         ca:b7:48:7a:35:bf:e8:39:48:88:d0:ac:7b:d9:0a:9a:a0:c6:
         3e:3d:7a:bd:ff:97:3f:ca:ad:b5:db:1d:11:b1:54:f7:25:3e:
         f0:19:1b:f2:2f:1b:f2:a3:89:80:9c:b7:0d:a9:dd:69:df:20:
         31:98:85:6a:47:01:e0:a7:44:1b:b4:66:ea:98:54:1d:62:72:
         16:ef:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:45:38 2025 by rpki-client