Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa
File:                     323830343a353331633a3a2f33322d313238203d3e20323638353634.roa (raw, json)
Hash identifier:          bw1WW6GWbWeJMCOoifTsH4AiSiS5eco7vGabyTZ4xYs=
Subject key identifier:   C5:EA:38:D2:21:D5:F0:D0:5E:D8:53:97:AC:FE:9A:4F:C7:02:89:4C
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       1DC91607873DB45DEE2D5F26EB47583895D3B6B2
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa
Signing time:             Mon 04 Aug 2025 20:29:30 +0000
ROA not before:           Mon 04 Aug 2025 20:24:30 +0000
ROA not after:            Mon 03 Aug 2026 20:29:30 +0000
asID:                     268564
IP address blocks:        2804:531c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 20:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c9:16:07:87:3d:b4:5d:ee:2d:5f:26:eb:47:58:38:95:d3:b6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Aug  4 20:24:30 2025 GMT
            Not After : Aug  3 20:29:30 2026 GMT
        Subject: CN=C5EA38D221D5F0D05ED85397ACFE9A4FC702894C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:e7:48:7e:cc:2d:b1:ae:ea:76:d6:9f:52:
                    f9:a0:18:07:12:a5:3a:32:b3:2d:54:83:26:6c:fb:
                    71:03:cf:96:cf:f2:b2:cc:79:4d:49:e8:b0:a7:ce:
                    93:38:66:8d:a8:4e:0e:ea:11:b2:9a:42:87:58:af:
                    d7:56:49:48:47:6b:62:d7:58:c3:bb:e3:54:7c:45:
                    c3:02:e7:ae:2b:d5:fa:d5:4e:d8:50:c0:d6:90:dc:
                    23:aa:96:0a:d7:f9:c2:41:1d:05:95:4c:f1:e4:2d:
                    78:e6:fb:5b:51:b6:cf:f0:fd:46:cc:2d:29:e8:4e:
                    23:b9:eb:f7:25:87:0c:37:69:59:89:54:7f:ee:be:
                    2a:aa:89:6e:75:62:f4:01:4d:c6:4f:30:0e:8c:5b:
                    08:d3:bc:e2:65:04:b9:b3:de:74:22:f7:a0:be:51:
                    72:60:77:7f:1e:f7:91:4e:c5:4f:d4:9b:34:e6:d5:
                    f8:ad:72:79:42:35:39:a5:9e:c9:a9:9d:b8:92:af:
                    25:cc:3d:01:bf:b8:d4:ff:6f:b2:57:25:47:18:57:
                    4e:e4:66:54:bd:5e:0a:bd:71:dc:32:f8:55:ba:94:
                    14:21:7f:c9:72:66:21:10:f0:62:7b:24:55:73:8a:
                    b3:fa:2f:0f:bb:70:bf:6b:21:5f:14:d6:db:6b:61:
                    2c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:38:D2:21:D5:F0:D0:5E:D8:53:97:AC:FE:9A:4F:C7:02:89:4C
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3a2f33322d313238203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:06:ec:b5:b3:b9:89:43:e3:0c:d8:a3:f4:9c:0b:d7:b4:ac:
         8d:5f:94:fe:15:8b:6c:7c:c0:6a:45:12:27:31:e3:69:43:92:
         ac:4d:bc:99:fc:f4:54:d5:ae:31:2a:50:88:4d:b5:45:5d:84:
         49:14:cd:d6:c0:33:44:5e:77:f8:03:64:f5:5e:87:9a:c0:89:
         b1:e4:34:40:e9:2d:a5:40:1b:db:fd:0d:d3:69:f6:4e:2d:7d:
         74:26:f0:b2:a0:83:77:02:91:be:ef:68:c5:b2:1e:1d:e8:66:
         41:c6:6f:14:dd:b0:f3:ce:11:21:99:12:e1:23:88:e3:20:2f:
         81:26:9d:b1:3b:3e:75:b0:59:13:67:9e:1e:04:e1:92:90:5f:
         4b:10:49:50:d4:61:df:41:39:3f:7a:74:49:07:6c:10:7b:db:
         11:12:d2:a1:ea:f6:b6:26:e3:08:20:6c:b3:b2:fc:a9:91:3b:
         7f:0c:cd:5f:8b:51:4d:7a:c3:c9:b2:81:69:0b:2f:78:26:f7:
         2f:40:9b:85:08:22:68:37:60:18:a5:0b:21:48:92:d8:f8:84:
         c6:ad:96:b9:05:ea:49:d4:a5:ee:27:da:47:fd:97:32:9c:3d:
         45:92:25:c7:52:db:da:85:5b:e0:3d:7b:e3:19:aa:2b:d9:20:
         80:2d:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:39 2025 by rpki-client