Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa
File:                     323830343a363633633a3a2f33322d313238203d3e20323639353335.roa (raw, json)
Hash identifier:          4GsVdnrX70b5P2ipb6ZsdX0i4/IV3OWiKJlfoqHPjdQ=
Subject key identifier:   04:09:5D:74:0F:B2:4D:CB:6D:31:AE:17:0D:B5:99:2D:61:4D:45:76
Certificate issuer:       /CN=ED21D10C23C2376429733090A859B9263A7A9ADC
Certificate serial:       2750A3F6666B19613D1FE399A0E610081ED99F39
Authority key identifier: ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa
Signing time:             Wed 16 Jul 2025 17:20:44 +0000
ROA not before:           Wed 16 Jul 2025 17:15:44 +0000
ROA not after:            Wed 15 Jul 2026 17:20:44 +0000
asID:                     269535
IP address blocks:        2804:663c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl
                          rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 02:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:50:a3:f6:66:6b:19:61:3d:1f:e3:99:a0:e6:10:08:1e:d9:9f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED21D10C23C2376429733090A859B9263A7A9ADC
        Validity
            Not Before: Jul 16 17:15:44 2025 GMT
            Not After : Jul 15 17:20:44 2026 GMT
        Subject: CN=04095D740FB24DCB6D31AE170DB5992D614D4576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:a1:b0:a5:d2:77:65:56:de:f5:6b:c4:ce:
                    9e:c4:fc:f9:b0:d4:68:52:e9:46:6b:2e:ef:f9:f0:
                    c5:df:fd:9e:ac:a4:b3:4e:8e:61:ba:b6:58:6c:80:
                    ee:73:26:e9:98:90:e3:0d:a5:35:90:71:6d:37:7e:
                    0a:68:8f:6d:19:1f:fb:9d:77:1d:ea:44:a7:e8:79:
                    de:ae:96:44:1e:bd:fa:31:37:99:c9:45:7c:0e:5b:
                    a4:aa:d6:18:35:04:a7:c5:09:89:7b:6a:db:35:a6:
                    97:e4:74:69:83:3a:8e:54:ce:15:ea:a1:50:96:f7:
                    5f:42:6a:6e:34:2c:31:83:28:00:2e:2f:f4:5f:b1:
                    31:46:33:05:4a:17:23:79:68:db:07:cd:db:f2:78:
                    a2:18:15:e0:18:03:bd:cc:3d:bb:92:30:32:f4:e3:
                    c2:73:b4:51:24:44:be:9d:4c:47:11:d9:06:cd:7d:
                    38:e0:26:25:0c:29:36:1d:48:0e:29:fb:4a:3e:14:
                    61:d8:91:e8:05:4a:22:aa:e8:04:09:96:4f:63:44:
                    a1:cb:6e:a2:49:8c:3b:be:2e:e2:1c:b7:2c:b6:72:
                    8a:86:8b:19:8c:2d:bc:27:5e:53:bc:62:de:1f:29:
                    3d:1a:0a:d0:a6:36:9c:02:df:18:c6:d6:1a:93:73:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:5D:74:0F:B2:4D:CB:6D:31:AE:17:0D:B5:99:2D:61:4D:45:76
            X509v3 Authority Key Identifier:
                keyid:ED:21:D1:0C:23:C2:37:64:29:73:30:90:A8:59:B9:26:3A:7A:9A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/ED21D10C23C2376429733090A859B9263A7A9ADC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED21D10C23C2376429733090A859B9263A7A9ADC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBifz2PrzRuD4GfUmUzJw1mohZowWLcuKpaooi8QxkV2/0/323830343a363633633a3a2f33322d313238203d3e20323639353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:663c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:ef:a1:52:db:37:2f:99:70:6b:30:8f:ff:1a:e6:22:09:
         c5:29:61:08:bb:36:2c:49:28:13:37:18:18:45:f0:12:e0:fc:
         8e:45:f0:92:e7:e3:89:1b:a0:ce:63:4c:7d:9e:1a:89:cf:ab:
         4c:86:a2:9f:fa:0f:47:50:2e:46:3d:96:83:c4:ae:33:da:d4:
         8d:62:05:31:28:29:25:ce:cb:cc:60:f0:fc:5e:a3:ac:0d:eb:
         db:44:9f:25:73:b6:32:43:3d:28:24:29:4b:8f:92:3d:da:c9:
         ae:88:c7:61:68:19:b4:ce:a8:79:d3:6a:86:2c:c1:fb:6f:70:
         2c:f4:d8:73:3d:ab:c4:18:23:3e:75:20:49:03:2f:76:6e:18:
         ab:3f:1e:f9:cd:c7:95:91:fc:fe:31:3d:7b:93:d8:8e:ed:2a:
         bd:91:3d:aa:78:b5:f1:6f:21:27:ac:fe:86:db:2d:56:99:13:
         e0:5b:54:28:13:d1:92:4f:d9:f5:a4:f1:20:ed:2c:e9:a6:8a:
         d2:52:fe:ae:c5:50:f2:80:30:0d:7a:9d:52:0b:de:86:47:87:
         19:2e:d6:1c:af:b6:d9:0c:ad:c7:88:5e:5b:1a:5b:8c:73:9d:
         dc:b8:5f:aa:07:c7:29:d6:f3:42:e4:66:5d:81:44:f4:66:9b:
         2e:36:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:34 2025 by rpki-client