Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa
File:                     323830343a373462303a3a2f33332d3333203d3e20323730393937.roa (raw, json)
Hash identifier:          elpn4V9duxYMuZJOaTURma4idWGuQszNEbDrmP1ufOs=
Subject key identifier:   0F:C8:41:07:53:BE:19:58:73:19:F8:80:18:C5:D4:E5:6C:94:5C:20
Certificate issuer:       /CN=258338C892819C29299C2555CE03148F8D63A950
Certificate serial:       2FFE7D288F4839EF7229FADDF36BDBF1B14E61FD
Authority key identifier: 25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa
Signing time:             Fri 19 Jun 2026 14:13:59 +0000
ROA not before:           Fri 19 Jun 2026 14:08:59 +0000
ROA not after:            Fri 18 Jun 2027 14:13:59 +0000
asID:                     270997
IP address blocks:        2804:74b0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl
                          rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fe:7d:28:8f:48:39:ef:72:29:fa:dd:f3:6b:db:f1:b1:4e:61:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258338C892819C29299C2555CE03148F8D63A950
        Validity
            Not Before: Jun 19 14:08:59 2026 GMT
            Not After : Jun 18 14:13:59 2027 GMT
        Subject: CN=0FC8410753BE19587319F88018C5D4E56C945C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:07:a5:b7:e8:20:3e:5a:6e:af:bb:18:ff:
                    60:0b:8e:12:b4:8f:ee:02:fc:b3:16:69:8f:b3:d4:
                    3f:ee:60:08:b5:d8:53:30:cc:a8:71:56:c3:01:44:
                    15:f4:0f:aa:56:c1:a1:41:c6:4a:49:da:30:19:b3:
                    cf:40:38:79:52:dc:b6:51:8e:89:19:fa:e3:e4:49:
                    62:6b:2c:08:be:ed:56:92:cf:a9:4b:c5:f9:f2:d9:
                    f2:1b:a4:6c:d6:df:3a:81:2b:c5:a3:df:9a:97:80:
                    4f:66:0e:9b:29:da:b3:b2:c3:ce:2d:4f:38:47:ca:
                    d4:5d:1a:19:ba:32:0e:5b:d9:1d:bc:a5:c4:74:35:
                    50:0c:a9:c1:e7:97:47:78:8e:b3:8e:70:75:1d:ba:
                    56:83:19:2a:92:cc:a1:86:3c:e8:53:17:7c:88:6a:
                    94:81:91:89:ea:23:22:aa:9d:06:c9:fb:6f:5b:c4:
                    2a:e4:5c:b7:54:46:f7:70:9d:03:f3:8a:bf:17:ad:
                    08:fc:d7:a8:e1:87:86:3d:3f:10:a9:02:66:0a:9e:
                    a6:b6:60:c2:ba:75:6d:1a:12:83:7f:fa:0b:76:18:
                    53:72:57:d1:75:8c:1f:0b:78:e2:89:0b:a4:f7:d9:
                    53:81:e2:ea:e1:7b:56:b2:52:68:a2:21:4e:e4:5f:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C8:41:07:53:BE:19:58:73:19:F8:80:18:C5:D4:E5:6C:94:5C:20
            X509v3 Authority Key Identifier:
                keyid:25:83:38:C8:92:81:9C:29:29:9C:25:55:CE:03:14:8F:8D:63:A9:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/258338C892819C29299C2555CE03148F8D63A950.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/258338C892819C29299C2555CE03148F8D63A950.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/323830343a373462303a3a2f33332d3333203d3e20323730393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74b0::/33

    Signature Algorithm: sha256WithRSAEncryption
         d6:b5:10:82:04:3f:bb:d2:e1:c1:5a:f4:3d:2e:5a:ac:b6:0b:
         5d:ba:a0:6c:ed:e5:df:f7:d1:87:65:80:e7:c0:09:e0:41:a9:
         4e:cb:6a:3c:6d:8c:f6:7c:d8:81:32:2a:6b:0b:8c:3c:f6:ba:
         9e:5f:70:80:95:84:fd:85:04:9d:c4:db:7e:d5:4f:2b:18:8e:
         9e:3d:68:bd:9a:96:46:0b:2b:dd:e5:05:02:a1:7a:f0:92:93:
         39:1c:ac:16:e8:8c:1e:10:59:2e:bf:b5:9a:d9:f7:d1:bf:13:
         67:a6:72:91:6c:23:00:88:15:db:41:43:46:82:2d:49:78:10:
         fd:da:49:82:eb:3f:5f:2a:04:ec:09:17:d9:dd:a8:ba:9c:4e:
         89:4f:e3:93:30:a0:f9:df:ec:9f:f6:09:47:7d:a7:c4:9f:5a:
         3d:81:d5:ed:a9:51:3c:48:d4:88:e9:15:51:a4:62:32:4a:3a:
         91:30:44:c7:c5:ca:a6:1e:8d:f5:a9:94:f3:96:1c:c6:95:ad:
         90:f5:9b:7d:16:23:cc:2f:33:19:f7:cb:0f:f6:86:ac:cc:4c:
         c8:5d:12:06:2f:99:c0:f0:78:88:6f:a3:0c:8f:47:0e:7e:4c:
         3c:c0:f1:33:10:1a:b8:54:6d:1b:bf:71:fe:59:0e:32:80:2a:
         de:43:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:49 2026 by rpki-client