Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
File:                     323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (raw, json)
Hash identifier:          wDwmD6PxnkZP/5JQu4bI7J3qwEKLTRwIegHE8jB8b+g=
Subject key identifier:   31:34:37:4C:ED:A3:A4:88:06:4A:D5:78:DE:79:64:BF:1F:C7:59:C4
Certificate issuer:       /CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
Certificate serial:       4973A550016DD137D1ECDC7E35BA1257FD73E64F
Authority key identifier: 77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
Signing time:             Tue 01 Jul 2025 20:57:14 +0000
ROA not before:           Tue 01 Jul 2025 20:52:14 +0000
ROA not after:            Tue 30 Jun 2026 20:57:14 +0000
asID:                     269713
IP address blocks:        2804:68c0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 09:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:73:a5:50:01:6d:d1:37:d1:ec:dc:7e:35:ba:12:57:fd:73:e6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77B49FAE0B44A260013E4F5043DD07033113F7D0
        Validity
            Not Before: Jul  1 20:52:14 2025 GMT
            Not After : Jun 30 20:57:14 2026 GMT
        Subject: CN=3134374CEDA3A488064AD578DE7964BF1FC759C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:77:6f:fd:41:14:09:52:3d:d3:10:40:d7:
                    e4:77:d9:a1:a0:cc:b2:af:b5:4e:a1:c2:f5:3f:3f:
                    e3:b0:b2:40:c5:1d:17:80:47:36:88:30:03:00:44:
                    9f:1e:50:af:eb:9a:41:0c:64:ad:95:59:f2:84:f8:
                    ec:99:07:90:ac:ef:c5:74:c2:f4:1a:45:fd:c5:30:
                    42:6a:1a:15:ce:54:5e:35:0c:70:9e:67:46:14:f8:
                    77:73:1f:56:49:c8:ca:1a:41:67:a5:65:23:83:87:
                    18:b3:4f:8a:58:4a:92:6a:5b:82:ad:b8:63:ce:e8:
                    fe:4f:25:15:14:0c:be:54:35:99:02:dc:4c:4e:70:
                    3d:65:19:ab:c7:82:b5:2b:11:f1:bf:85:0c:fb:54:
                    b1:9e:24:83:63:72:57:46:c3:74:88:48:c4:04:04:
                    1b:23:77:95:a8:b0:4f:47:a5:f8:50:1b:04:cf:e2:
                    96:7a:c4:dc:da:06:ba:f0:60:a3:ea:99:b5:e0:02:
                    3e:b7:ab:a6:8f:e6:f5:c4:01:1f:b3:e1:10:04:7c:
                    f1:41:59:9d:f4:60:f7:54:a7:33:55:7e:4c:ff:72:
                    08:b6:4d:52:00:2d:fc:e0:c0:d9:67:d3:78:a7:6a:
                    3b:1c:61:55:7c:13:ed:30:1b:ee:d3:6b:49:f9:74:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:37:4C:ED:A3:A4:88:06:4A:D5:78:DE:79:64:BF:1F:C7:59:C4
            X509v3 Authority Key Identifier:
                keyid:77:B4:9F:AE:0B:44:A2:60:01:3E:4F:50:43:DD:07:03:31:13:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/77B49FAE0B44A260013E4F5043DD07033113F7D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77B49FAE0B44A260013E4F5043DD07033113F7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/0/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:30:76:67:56:5a:af:95:8c:b0:a8:0d:d9:86:ff:bf:12:
         7a:e6:7b:6a:ef:b6:e8:29:59:e9:29:fd:80:9d:92:5e:ae:62:
         d0:9d:cc:6c:0c:6d:02:f9:07:33:54:09:41:1d:77:e0:13:59:
         5e:d8:34:a1:b6:42:49:b9:fc:99:c4:17:1d:d3:0f:a8:0e:4c:
         89:2b:66:14:5e:d7:92:e1:ef:1a:28:4b:29:2f:4d:f0:a0:1a:
         f1:db:98:33:0a:88:31:82:25:54:39:a5:1d:70:a3:aa:c9:e1:
         dd:c3:c9:85:07:39:2d:71:5e:a7:1b:98:7f:35:09:98:57:5c:
         b6:f2:83:9e:66:80:f1:51:f4:07:18:e3:b9:b9:eb:2e:10:3b:
         78:46:ac:09:0b:5b:1f:45:95:1d:da:db:88:50:f6:df:46:78:
         84:c5:42:d6:e8:d5:00:8d:ce:63:06:39:c3:ec:fa:0d:93:e3:
         ec:20:4a:f1:33:74:a3:88:7b:47:67:d5:80:80:ab:b6:49:f3:
         d7:9f:ee:7a:50:92:2e:6b:a0:48:e7:00:03:88:77:39:d1:0e:
         71:74:f6:c0:b9:72:fd:31:d9:51:b1:8d:80:60:21:20:bf:77:
         6b:34:29:8b:46:5d:de:1c:56:bf:32:10:36:f2:1e:cc:b9:fa:
         43:ce:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:53:44 2025 by rpki-client