Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa
File:                     323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa (raw, json)
Hash identifier:          pqDVUnKE3sWtOneeWubtKyT9k4LBf8ZGnsVJLDpooTc=
Subject key identifier:   CC:7D:7A:A0:C8:D9:ED:52:DB:14:29:51:1D:03:1C:7A:0C:C8:5B:1A
Certificate issuer:       /CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
Certificate serial:       4A5EF6C3AC386B60D01626D2527E4F80CAC93863
Authority key identifier: B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa
Signing time:             Wed 29 Oct 2025 22:10:44 +0000
ROA not before:           Wed 29 Oct 2025 22:05:44 +0000
ROA not after:            Wed 28 Oct 2026 22:10:44 +0000
asID:                     273564
IP address blocks:        2804:90a0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl
                          rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:f6:c3:ac:38:6b:60:d0:16:26:d2:52:7e:4f:80:ca:c9:38:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E1EA3585A9852E5C12D39221F08AC0DFFC132D
        Validity
            Not Before: Oct 29 22:05:44 2025 GMT
            Not After : Oct 28 22:10:44 2026 GMT
        Subject: CN=CC7D7AA0C8D9ED52DB1429511D031C7A0CC85B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:3b:5e:74:9c:be:b3:e8:d3:3b:58:8e:c5:
                    f2:cc:af:88:5e:3d:90:08:10:3a:b9:26:54:3f:8b:
                    65:34:72:40:60:a3:75:50:ed:88:e0:97:26:68:de:
                    a5:e5:75:0f:c9:d2:30:f2:bf:18:73:dd:82:c3:6e:
                    40:57:06:1d:4f:1f:17:89:4f:83:5d:7d:54:c4:03:
                    ca:b7:f9:5e:1b:73:8b:ac:43:b3:fe:4f:ce:7f:80:
                    27:1b:7b:e2:12:b1:da:a5:c1:8a:c8:97:8b:fd:11:
                    74:a8:4a:20:46:9b:10:3b:79:c4:91:7e:af:e0:43:
                    fc:cd:36:b3:de:72:77:ed:70:ee:81:4f:ed:03:2e:
                    5c:64:f7:4b:67:cb:5d:74:fd:a5:d0:6a:5b:c5:db:
                    69:10:62:f0:c7:ac:4c:cd:b7:80:11:aa:57:1c:34:
                    aa:bb:cb:cb:bd:c3:b0:9b:93:8d:36:3f:e1:a0:f5:
                    79:e4:89:ac:74:17:84:54:1a:52:ba:74:d8:32:4b:
                    a1:70:4d:bb:1f:c8:99:ee:e2:93:af:1a:f8:64:66:
                    c9:af:80:f5:84:9d:e9:12:d4:7e:a7:48:00:8e:30:
                    1f:5f:8f:b9:bd:1c:af:f1:d1:53:77:03:e9:d0:84:
                    48:82:c9:bd:83:ee:fc:2b:08:fb:cc:47:ba:98:8f:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:7A:A0:C8:D9:ED:52:DB:14:29:51:1D:03:1C:7A:0C:C8:5B:1A
            X509v3 Authority Key Identifier:
                keyid:B4:E1:EA:35:85:A9:85:2E:5C:12:D3:92:21:F0:8A:C0:DF:FC:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4E1EA3585A9852E5C12D39221F08AC0DFFC132D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HRBUB45r3BvNcDACBSbPaVY53eP8JF3795w1Yp3jn1pg/0/323830343a393061303a383030303a3a2f33332d3333203d3e20323733353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90a0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:11:2c:75:2f:e0:2c:7f:93:e2:7f:40:77:b4:c7:77:a8:3d:
         a3:a3:42:3e:c6:9d:05:34:81:a7:4d:68:9d:bc:63:d6:63:e1:
         f4:3d:31:6a:2e:fc:32:03:07:61:91:ac:4c:98:1e:6d:05:bb:
         e4:14:e9:90:53:ec:79:ba:06:45:b1:59:4a:8f:14:d6:1f:3e:
         2f:60:8c:2e:b7:f7:36:c7:64:bf:a3:70:dd:26:09:38:63:7f:
         a0:d5:01:60:b0:27:64:d1:45:e1:5d:7c:4c:f7:f4:7d:1b:06:
         e7:22:ad:0d:3a:b0:55:f9:64:03:04:e2:21:77:d5:c9:9a:76:
         c8:a7:b6:ea:f9:80:46:a4:a0:de:82:64:c7:64:77:d8:6d:37:
         b1:5a:bb:16:72:5c:82:a0:d7:89:c0:01:89:dd:3f:a3:60:0d:
         3e:21:ff:76:8f:90:23:4b:72:f1:9a:00:be:44:e0:66:fc:a9:
         dc:c6:c7:78:aa:20:48:7b:ce:cb:c0:79:db:97:4d:53:3a:f8:
         a8:43:cd:44:20:b8:f9:0d:11:7f:c8:51:0a:a6:9a:01:03:86:
         a3:53:05:a6:cd:46:f3:b9:0e:d0:a2:54:84:42:cf:10:7e:54:
         e8:f1:c5:08:b6:3a:93:67:43:40:8a:1d:5c:2d:0c:62:60:3d:
         ca:10:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:00:54 2025 by rpki-client