Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa
File:                     323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa (raw, json)
Hash identifier:          6VMO3BCjiiwMf4yDLydEYqF5sOvBnUAfe161UTqxSCI=
Subject key identifier:   1B:55:F1:68:94:8F:E2:CB:03:B2:0F:33:6D:AA:6B:63:42:58:4F:31
Certificate issuer:       /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial:       7C30927711B854F1436C3DB64C7AB74EC6C68A89
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa
Signing time:             Wed 29 Oct 2025 22:10:35 +0000
ROA not before:           Wed 29 Oct 2025 22:05:35 +0000
ROA not after:            Wed 28 Oct 2026 22:10:35 +0000
asID:                     273564
IP address blocks:        2804:90a0:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
                          rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:30:92:77:11:b8:54:f1:43:6c:3d:b6:4c:7a:b7:4e:c6:c6:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
        Validity
            Not Before: Oct 29 22:05:35 2025 GMT
            Not After : Oct 28 22:10:35 2026 GMT
        Subject: CN=1B55F168948FE2CB03B20F336DAA6B6342584F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:c7:60:e3:75:40:7c:ee:39:db:3c:d3:bc:
                    01:14:4c:48:d4:c5:04:5f:76:01:dd:a1:b6:2c:a2:
                    a0:ab:69:69:b7:65:63:3d:50:7d:34:af:22:38:4d:
                    f9:4e:7d:4c:e6:b6:40:b1:a3:7f:eb:71:ff:06:75:
                    3a:73:0b:10:c9:ee:61:c0:df:f7:0f:87:e0:eb:1e:
                    02:9e:8f:8e:55:2f:66:06:ba:9e:7f:0e:80:c0:bd:
                    f6:78:0f:36:97:1a:5d:5b:ea:b4:db:86:14:ab:3b:
                    86:1f:d2:23:a1:11:78:42:f6:6d:34:16:64:46:a4:
                    8c:b8:1b:4f:4e:41:88:73:f5:cd:50:f1:40:61:9b:
                    8d:db:2a:7f:36:a5:33:69:b6:1c:ff:b1:ce:97:6b:
                    8f:ab:82:83:eb:ff:01:74:64:ff:c5:20:3d:00:79:
                    a6:4e:5d:6a:be:41:57:52:a7:f5:1b:2f:ee:63:8b:
                    af:b2:5b:91:0b:b2:78:40:9d:62:65:99:d5:37:08:
                    69:72:11:8e:f7:a8:11:9f:dd:bd:f7:e4:98:18:56:
                    2a:e4:91:09:a0:71:e3:d6:4a:38:eb:dd:7d:88:e2:
                    dc:b6:f1:44:07:7b:cd:2b:42:45:c2:c6:4e:1e:1a:
                    47:d1:54:09:63:a2:da:57:14:2a:22:ce:a0:f3:19:
                    b2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:55:F1:68:94:8F:E2:CB:03:B2:0F:33:6D:AA:6B:63:42:58:4F:31
            X509v3 Authority Key Identifier:
                keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a376630303a3a2f34302d3430203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:f1:07:f9:27:23:e7:a1:9c:30:a0:75:46:e8:37:71:a7:53:
         04:34:1c:3e:b7:88:68:e4:94:6b:5a:11:c2:a3:8e:84:61:7f:
         c3:f6:8d:9f:a0:24:b6:97:26:46:b6:6f:d8:a9:ed:f8:b4:ec:
         3e:71:71:4e:56:0c:25:db:58:d9:bf:df:11:3b:48:6e:7c:21:
         18:bd:d8:68:f9:5d:28:8f:af:02:6a:37:f5:6b:6a:c7:97:cc:
         e0:3a:e4:e5:c4:5a:c2:4b:8d:e3:fc:2c:bc:a2:74:8a:90:4e:
         02:b4:d0:cf:99:7a:b7:bd:25:ec:0b:3a:eb:ee:18:0a:84:78:
         1a:91:cc:e4:c6:fa:55:09:b7:7e:ba:2a:66:60:e4:61:d8:69:
         12:50:91:96:a0:90:94:e8:8a:43:b7:5e:a4:11:df:99:54:00:
         8c:1c:39:c9:87:77:b3:3e:e2:97:d5:84:3a:dd:4d:ba:78:0e:
         01:bc:49:f6:5f:30:cc:26:37:04:7e:3a:45:eb:2a:1e:cb:37:
         2f:95:e3:cc:e0:62:fc:1d:72:da:fe:6f:2e:45:84:28:1a:b0:
         80:90:81:c6:f1:b5:4f:86:3c:93:b8:11:e0:db:22:c0:9e:da:
         03:4f:2e:10:d8:c7:5c:3e:4e:59:7c:a0:d5:ae:e0:f6:3f:07:
         d2:8f:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:23:55 2025 by rpki-client