Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/323830343a393566303a3a2f33322d313238203d3e20323734353537.roa
File:                     323830343a393566303a3a2f33322d313238203d3e20323734353537.roa (raw, json)
Hash identifier:          i1e7OX99sSyBcrLH2XI/GXQl0NueN++J3bV7DqzJ/Tg=
Subject key identifier:   71:EE:63:C0:56:97:8F:7F:29:05:8F:FD:F8:F3:0A:B8:AD:6E:B1:99
Certificate issuer:       /CN=AD74CAB99F32EE468020770D4BDB780560E9ECEF
Certificate serial:       4BD8B1BBEB213705230231EE46B6793731FEDAB0
Authority key identifier: AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/323830343a393566303a3a2f33322d313238203d3e20323734353537.roa
Signing time:             Sat 25 Oct 2025 14:40:47 +0000
ROA not before:           Sat 25 Oct 2025 14:35:47 +0000
ROA not after:            Sat 24 Oct 2026 14:40:47 +0000
asID:                     274557
IP address blocks:        2804:95f0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.crl
                          rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 10:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d8:b1:bb:eb:21:37:05:23:02:31:ee:46:b6:79:37:31:fe:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD74CAB99F32EE468020770D4BDB780560E9ECEF
        Validity
            Not Before: Oct 25 14:35:47 2025 GMT
            Not After : Oct 24 14:40:47 2026 GMT
        Subject: CN=71EE63C056978F7F29058FFDF8F30AB8AD6EB199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:18:3c:73:8f:5e:13:3e:12:9c:40:08:a8:
                    e4:05:ea:7c:06:e7:43:c4:41:1f:25:b8:8e:c3:3b:
                    f5:ed:16:01:ee:35:2a:b6:a0:5b:97:90:a5:2a:75:
                    ef:d5:b7:f8:2a:81:a1:fc:93:5a:9b:50:d8:be:d5:
                    90:e7:f3:78:9a:c6:1b:68:a1:bd:23:db:2a:70:27:
                    7b:1a:a2:c6:a0:c9:8b:91:a5:27:d9:69:df:31:87:
                    d2:36:f9:1d:21:16:8e:56:70:11:e6:56:2f:f0:6b:
                    79:a2:bd:a7:f6:18:20:3a:4a:f8:72:16:b5:45:93:
                    9d:37:47:e8:11:5c:c1:ca:b4:a3:03:a8:8e:4b:02:
                    72:d9:3a:cf:3f:5d:66:e0:a4:bc:1a:55:3b:15:3a:
                    9b:41:07:36:61:f3:54:4a:ad:d9:11:f9:b8:ef:23:
                    57:74:25:06:1a:d0:73:40:62:bf:51:1f:f9:9e:b6:
                    d7:ea:5a:80:79:55:36:08:05:8b:15:b5:53:aa:9a:
                    8e:1a:5b:21:cf:8e:2e:7d:34:c2:0f:ca:a1:01:63:
                    17:23:a6:83:85:98:9c:1c:b3:4f:76:be:2b:b7:41:
                    b9:71:6b:3a:d5:92:5a:76:46:ef:89:83:6a:f3:9f:
                    a1:c8:35:61:60:93:d6:70:12:a3:a8:88:09:ac:1b:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:63:C0:56:97:8F:7F:29:05:8F:FD:F8:F3:0A:B8:AD:6E:B1:99
            X509v3 Authority Key Identifier:
                keyid:AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/323830343a393566303a3a2f33322d313238203d3e20323734353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:f1:5e:8d:46:84:a3:c8:30:b7:ab:08:81:b6:4d:8b:ef:df:
         53:d9:a6:34:d0:f7:a8:e0:eb:ef:f6:1f:ee:34:19:39:ee:d8:
         34:7a:48:5d:89:a9:b3:8b:67:83:55:6b:9b:c1:4a:a5:86:28:
         f7:23:e6:ad:28:47:c3:ee:05:62:09:0a:49:f8:b4:cf:36:40:
         03:b9:86:f0:89:bb:a3:d7:0f:e7:e2:46:ae:43:57:ce:fb:64:
         e8:0f:04:e2:a4:59:41:68:88:a6:be:f3:43:7b:21:51:ab:d5:
         b3:5e:07:8e:27:4c:8e:ea:68:06:89:ce:1c:06:9d:a5:37:ae:
         af:4f:3a:ea:17:03:0a:c9:db:5d:73:dd:1d:f9:9b:91:58:74:
         50:62:42:b5:91:82:27:bf:27:c4:09:e9:46:16:a2:35:06:bd:
         1c:b8:b0:48:86:42:44:33:b4:44:06:83:37:ae:90:74:05:6d:
         9e:43:cd:36:47:25:bd:fe:fd:8e:ab:dd:3e:92:3c:2e:5e:b6:
         40:55:38:14:91:91:49:4e:60:be:32:28:4a:87:ff:1b:b9:ab:
         87:f6:c1:88:a2:65:54:7b:96:4c:ca:9a:82:6b:2d:55:f5:ff:
         cb:29:ed:1c:41:1d:68:64:9b:7d:ae:74:73:7a:d7:c1:0c:ca:
         f5:58:f0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:21:53 2025 by rpki-client