Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a636563303a3a2f34382d3438203d3e20323732313637.roa
File:                     323830343a383266343a636563303a3a2f34382d3438203d3e20323732313637.roa (raw, json)
Hash identifier:          C8iKOax3WaWV6Hz6Ne+KO91aB6tTNRmvO4E9FlTRooI=
Subject key identifier:   E7:C0:CA:F8:7F:C1:04:56:F6:8E:AC:8C:DF:07:B4:8F:25:6E:C5:47
Certificate issuer:       /CN=266EB7778B34AD61D225851E8CF4924FC36A8639
Certificate serial:       171F0E89D3F8B5929A478A89E75951181EB15DDF
Authority key identifier: 26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a636563303a3a2f34382d3438203d3e20323732313637.roa
Signing time:             Sun 22 Jun 2025 23:36:21 +0000
ROA not before:           Sun 22 Jun 2025 23:31:21 +0000
ROA not after:            Sun 21 Jun 2026 23:36:21 +0000
asID:                     272167
IP address blocks:        2804:82f4:cec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl
                          rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1f:0e:89:d3:f8:b5:92:9a:47:8a:89:e7:59:51:18:1e:b1:5d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266EB7778B34AD61D225851E8CF4924FC36A8639
        Validity
            Not Before: Jun 22 23:31:21 2025 GMT
            Not After : Jun 21 23:36:21 2026 GMT
        Subject: CN=E7C0CAF87FC10456F68EAC8CDF07B48F256EC547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:3e:05:16:5c:a1:cd:2d:d9:ce:00:7f:5d:
                    62:cd:22:3c:b8:17:08:5d:59:16:e7:2e:c2:35:9f:
                    dc:fd:9f:59:68:c2:e0:3a:e3:46:49:83:7b:21:17:
                    74:79:92:eb:44:d0:27:a2:f2:dc:2c:e6:bf:31:2d:
                    26:29:01:f2:5b:ae:43:92:c2:03:59:f9:01:09:4d:
                    42:93:6a:1a:72:92:07:7b:34:ef:51:a8:11:ef:e6:
                    ea:22:e5:87:67:fc:64:b6:cf:35:bf:dd:37:9f:8a:
                    64:21:ae:98:79:b5:76:d1:70:b1:4d:39:ea:fc:77:
                    bb:b4:8d:bb:29:92:22:18:1d:9b:7b:36:f2:61:54:
                    e9:9f:be:5a:d2:ac:7a:f3:c1:7f:6c:c0:90:29:f2:
                    a8:19:07:db:e4:39:66:8b:5a:f3:74:2b:01:72:c7:
                    af:70:0b:98:51:91:b0:fe:16:56:a1:66:8a:8d:5e:
                    77:2b:03:1d:cc:12:8f:bd:d8:1d:dc:3f:d4:89:bc:
                    44:dd:1f:5b:ed:39:5e:a0:2c:1e:f4:f9:01:a9:f4:
                    cb:f6:3f:fe:64:f5:60:d9:80:b7:06:1a:99:8a:09:
                    9b:2d:de:d2:91:74:b2:3f:45:42:7c:ca:94:ea:c6:
                    e8:4b:ae:d7:a5:67:39:ec:e2:68:9c:f1:67:6d:f4:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C0:CA:F8:7F:C1:04:56:F6:8E:AC:8C:DF:07:B4:8F:25:6E:C5:47
            X509v3 Authority Key Identifier:
                keyid:26:6E:B7:77:8B:34:AD:61:D2:25:85:1E:8C:F4:92:4F:C3:6A:86:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/266EB7778B34AD61D225851E8CF4924FC36A8639.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/266EB7778B34AD61D225851E8CF4924FC36A8639.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWXcn9Lz1uCkrm5YmTH19mouFzgkksmfnDwaVWo6fvfF/0/323830343a383266343a636563303a3a2f34382d3438203d3e20323732313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82f4:cec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:5c:dd:f4:b0:72:1b:29:7e:5a:fc:ae:83:9b:0f:df:c2:
         84:1b:1a:3f:25:2a:ab:09:98:f4:3d:3a:fc:33:04:0b:45:3a:
         3a:53:8d:29:9b:ac:5b:b4:82:20:ab:17:ca:67:dd:01:d1:00:
         ae:ba:98:82:06:5c:11:d5:9c:43:ba:48:86:5a:d5:35:72:d4:
         2a:e9:f1:86:9a:d4:bf:8c:ec:b5:71:a6:0d:ba:3f:b2:98:d7:
         9b:b6:1a:d4:4a:9a:6f:6c:28:51:02:6a:fb:2c:89:8b:0f:fe:
         82:0b:aa:88:3d:bd:99:01:92:a8:78:51:64:99:8f:aa:3b:f9:
         58:dc:e2:b0:a0:46:a0:e4:92:4c:56:2b:ab:2b:7e:11:84:67:
         c3:83:2d:d1:72:2d:48:9c:38:03:8d:4a:17:8c:23:87:5f:fd:
         5f:a3:6f:a5:c0:01:36:db:33:2f:5d:12:f7:01:d1:21:31:f4:
         a9:fa:94:42:23:37:9e:5d:c5:ac:99:ed:32:fd:dc:c8:9f:61:
         e9:aa:63:fe:f4:01:b3:a6:c6:fc:b6:ae:3b:77:c7:39:c4:73:
         dd:93:84:23:5b:05:c2:d4:7b:93:fc:47:51:31:ca:6b:fd:d6:
         bb:b4:ab:9a:8d:ed:15:10:d8:58:d6:2e:55:07:d3:82:05:32:
         9b:e2:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:44:55 2025 by rpki-client