Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/323830343a383931383a3a2f33322d3332203d3e20323733353830.roa
File:                     323830343a383931383a3a2f33322d3332203d3e20323733353830.roa (raw, json)
Hash identifier:          pTMRPMua6cEKxRcEjQWQEvJxQ/yfsOzQJ8TTzkoh5Ks=
Subject key identifier:   E7:93:1E:78:D8:0E:0B:3D:E3:1F:2E:AA:77:E3:59:CD:E5:87:AC:45
Certificate issuer:       /CN=1209D9C857F463458E737B2E278969D81C4F384A
Certificate serial:       2CC0069639ABB33D12C1F851D7529BDB550DD8C3
Authority key identifier: 12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/323830343a383931383a3a2f33322d3332203d3e20323733353830.roa
Signing time:             Wed 20 Aug 2025 02:34:33 +0000
ROA not before:           Wed 20 Aug 2025 02:29:33 +0000
ROA not after:            Wed 19 Aug 2026 02:34:33 +0000
asID:                     273580
IP address blocks:        2804:8918::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl
                          rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 04:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:06:96:39:ab:b3:3d:12:c1:f8:51:d7:52:9b:db:55:0d:d8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1209D9C857F463458E737B2E278969D81C4F384A
        Validity
            Not Before: Aug 20 02:29:33 2025 GMT
            Not After : Aug 19 02:34:33 2026 GMT
        Subject: CN=E7931E78D80E0B3DE31F2EAA77E359CDE587AC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:b2:e3:12:15:0b:cb:9e:67:6c:b9:09:7d:
                    5d:3e:bc:3a:ac:4e:a2:89:e8:4f:70:07:26:b0:1b:
                    01:97:31:2b:d0:c2:63:f8:75:f1:cd:ec:cb:b3:95:
                    93:27:34:c7:d3:55:4b:69:ea:1b:00:28:0c:7d:6a:
                    58:73:3c:32:df:c7:bd:df:04:6d:20:65:78:b6:d7:
                    06:14:19:2f:0a:d3:e6:7a:1c:e5:d6:4a:0d:ed:e5:
                    ef:45:97:ee:c0:a3:83:ab:e4:15:44:dd:8d:70:fd:
                    e4:04:8c:9b:ad:aa:4a:b7:4f:dd:02:27:0c:4c:ae:
                    44:9c:aa:6c:eb:b4:2e:d0:7b:52:e5:39:53:7e:42:
                    38:23:d1:2b:0c:49:e3:78:4e:03:9e:7c:95:50:d6:
                    f7:5b:ad:11:5a:bc:d1:ff:88:4d:a7:a0:6f:69:fc:
                    32:c4:43:5e:ab:5d:e4:a3:ed:82:ed:f5:74:c6:ce:
                    35:5e:72:d9:90:9e:c7:62:cf:dd:e2:8d:43:54:59:
                    bd:a2:43:d8:46:9d:15:e5:17:45:7a:aa:ae:bd:22:
                    a6:4d:83:41:dc:a0:70:a9:d9:f9:ab:f3:3d:06:e0:
                    a3:6c:40:70:3a:bd:90:0f:85:3b:92:e8:4f:95:cf:
                    3f:0c:53:4a:17:2a:09:41:c0:4f:93:f0:48:25:33:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:93:1E:78:D8:0E:0B:3D:E3:1F:2E:AA:77:E3:59:CD:E5:87:AC:45
            X509v3 Authority Key Identifier:
                keyid:12:09:D9:C8:57:F4:63:45:8E:73:7B:2E:27:89:69:D8:1C:4F:38:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/1209D9C857F463458E737B2E278969D81C4F384A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1209D9C857F463458E737B2E278969D81C4F384A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HauzfAfLhdzZVrPU7VL7MUPcWcS73DZcGa9BqDiwKa3u/0/323830343a383931383a3a2f33322d3332203d3e20323733353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8918::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ad:45:82:85:b1:48:e0:93:e1:a5:f5:20:a6:de:9f:9b:c1:
         75:03:e7:a5:ed:be:9a:dc:69:88:fe:a6:7c:70:fa:58:72:60:
         b2:23:e0:bf:fa:fb:cb:1d:1d:ee:22:7e:54:68:6f:a3:09:15:
         af:29:38:b4:4a:a9:de:1a:f6:88:bb:9a:27:6b:5e:b3:ef:f0:
         89:01:9c:6f:28:7f:9a:4c:96:ee:8d:2c:1b:37:6a:82:f5:be:
         ac:15:72:83:aa:ed:19:8b:c8:dc:75:6c:d3:c7:7d:26:0c:21:
         f6:e0:27:5b:03:70:3b:b1:a4:dc:d7:ef:92:10:61:17:7d:2c:
         5e:29:90:4b:93:43:35:7a:67:d9:3d:f7:a4:e1:73:a9:88:4a:
         3c:8b:7c:04:17:e3:df:aa:4b:d2:80:21:15:d5:4c:e9:dc:a9:
         fb:71:be:b5:d7:e1:32:f5:92:f1:08:f6:a7:71:d2:43:3b:4c:
         b4:84:d9:5d:18:e0:9d:cf:ae:97:d2:66:54:3f:2e:96:e3:6d:
         a3:5f:21:e7:c9:b5:59:5f:97:18:3a:50:e8:d5:1c:4a:b8:91:
         bb:26:9b:21:21:cf:54:16:30:49:d2:e0:12:ea:6e:33:12:ca:
         7e:2d:12:d9:b0:e0:c1:e9:b1:54:86:f0:8e:f7:2a:9c:6d:9b:
         3a:bc:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 20:29:39 2025 by rpki-client