Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d313238203d3e203533303035.roa
File:                     323830343a3534383a3a2f33322d313238203d3e203533303035.roa (raw, json)
Hash identifier:          QA4Od3CAsJJfsv3VjUkvKIVuCpliaVm5/IZJI6RkIRQ=
Subject key identifier:   6E:44:21:CB:08:6F:C0:FD:F5:54:E6:B9:29:BC:54:3F:95:4B:EB:7A
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       4DED778954B7D2D6779AC171AEF60118753E14C5
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d313238203d3e203533303035.roa
Signing time:             Fri 31 Oct 2025 14:14:35 +0000
ROA not before:           Fri 31 Oct 2025 14:09:35 +0000
ROA not after:            Fri 30 Oct 2026 14:14:35 +0000
asID:                     53005
IP address blocks:        2804:548::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 08:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ed:77:89:54:b7:d2:d6:77:9a:c1:71:ae:f6:01:18:75:3e:14:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Oct 31 14:09:35 2025 GMT
            Not After : Oct 30 14:14:35 2026 GMT
        Subject: CN=6E4421CB086FC0FDF554E6B929BC543F954BEB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:ff:ac:8a:33:ff:f6:d1:e9:87:09:f5:8a:
                    62:1b:3c:43:ff:59:6f:00:e9:06:f0:75:6f:d4:f2:
                    1b:50:31:1b:8d:0b:4e:8f:46:6e:10:9a:41:01:74:
                    05:83:cd:ed:3d:4c:3c:55:fb:f2:bf:98:3e:49:f7:
                    40:43:9b:52:5e:0c:41:af:82:1f:0d:1a:a4:61:32:
                    49:9c:ef:62:7e:e4:5e:64:88:24:d4:51:c3:bc:ec:
                    63:78:73:a7:4b:7c:45:3d:2b:f9:71:94:33:be:76:
                    f1:1c:82:cd:26:a7:ad:64:5f:c4:7b:9c:e3:3c:69:
                    49:af:97:e3:82:78:c3:45:fb:c5:44:33:cb:0f:40:
                    49:ef:5a:a6:f6:63:e9:1b:4e:61:ec:47:30:1a:0e:
                    c6:ab:8c:3d:ba:95:2d:68:64:f1:a7:9d:1f:f3:6f:
                    30:c4:9c:aa:11:8b:26:a1:7e:17:f0:79:12:04:0b:
                    fe:93:10:47:83:ee:8f:70:e3:c6:95:dc:f9:0a:01:
                    a7:d4:88:f7:ad:e1:53:ae:78:05:d0:e0:89:9c:87:
                    94:0c:b7:8c:2d:2d:5d:c6:2d:d7:63:6f:f6:ef:b5:
                    48:07:86:43:32:97:ff:72:af:7a:32:e0:01:83:f6:
                    3e:c1:6b:7c:e9:cb:7c:28:8c:9b:bd:52:21:7d:6f:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:21:CB:08:6F:C0:FD:F5:54:E6:B9:29:BC:54:3F:95:4B:EB:7A
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d313238203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:548::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:9f:fc:0d:7d:75:58:01:64:58:48:e6:9e:6c:36:20:fc:
         08:96:77:9b:06:11:49:12:6e:53:10:ec:83:db:6e:46:f7:47:
         e9:97:93:90:96:20:52:86:fd:da:e7:ee:7b:4b:1e:09:17:02:
         8f:4d:9b:80:47:91:3d:29:3d:6b:41:75:aa:78:db:10:35:72:
         08:13:5f:99:8d:aa:1e:ca:e7:e1:3b:a3:81:4f:76:a2:fd:9a:
         13:13:ca:9d:15:ad:f1:35:b5:29:db:df:d1:58:e5:7e:4f:c3:
         93:77:9d:02:1f:9c:54:98:73:19:c1:08:b4:10:fa:55:c2:2d:
         06:32:a7:e4:c2:c8:68:fa:89:2b:d5:fb:bd:ca:d4:3a:53:4d:
         81:be:37:61:66:60:8d:87:e0:ae:a5:c4:7c:46:6b:92:4c:89:
         8f:d5:84:86:fc:d2:86:81:d8:a0:f4:47:10:c1:1e:0a:f9:82:
         95:78:f0:60:82:0b:02:47:ac:76:2f:2f:d3:e1:c8:9e:95:29:
         85:c7:18:96:e3:c7:e6:e6:07:32:96:52:e7:6e:cb:1c:fd:fa:
         2b:99:0b:95:e6:7a:cd:01:3f:47:48:bc:08:eb:5a:91:9a:bc:
         1f:37:3a:16:99:65:a7:02:42:e9:bd:98:dd:b8:b5:02:9e:da:
         13:d4:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:21:15 2025 by rpki-client