Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/323830343a366565303a3a2f33322d3334203d3e20323730363234.roa
File:                     323830343a366565303a3a2f33322d3334203d3e20323730363234.roa (raw, json)
Hash identifier:          mLfGgGeWDbdyAEI99GRmLSYKCJxstDT5vzmel9bW/kw=
Subject key identifier:   61:1B:06:8C:06:2D:19:0F:9E:88:82:A0:48:39:84:36:0E:29:96:2E
Certificate issuer:       /CN=803A7C5B6496990909FCECFA71E79A79E3580104
Certificate serial:       68E78EF983AE50A1D641039BF431934163B68779
Authority key identifier: 80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/323830343a366565303a3a2f33322d3334203d3e20323730363234.roa
Signing time:             Wed 09 Jul 2025 12:02:48 +0000
ROA not before:           Wed 09 Jul 2025 11:57:48 +0000
ROA not after:            Wed 08 Jul 2026 12:02:48 +0000
asID:                     270624
IP address blocks:        2804:6ee0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.crl
                          rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e7:8e:f9:83:ae:50:a1:d6:41:03:9b:f4:31:93:41:63:b6:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803A7C5B6496990909FCECFA71E79A79E3580104
        Validity
            Not Before: Jul  9 11:57:48 2025 GMT
            Not After : Jul  8 12:02:48 2026 GMT
        Subject: CN=611B068C062D190F9E8882A0483984360E29962E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:9a:86:52:e5:f0:65:65:e3:43:b4:2b:47:
                    e6:5f:2a:c0:63:51:45:7b:58:95:31:44:7d:be:32:
                    e6:c2:ad:8b:bc:2c:97:55:99:da:5d:06:ac:93:ef:
                    5b:d8:31:22:22:e0:ca:7f:30:35:eb:a4:bd:2d:c2:
                    f8:fe:a7:c5:cf:5a:a4:45:a0:61:3a:33:ae:d2:5e:
                    b9:bb:0e:48:6e:ae:0b:35:0e:8e:29:9c:c1:d9:02:
                    d1:87:79:61:e3:3d:5f:80:c4:f4:fe:cf:99:b3:99:
                    72:f2:94:27:2b:7e:35:40:ab:f0:22:f1:b9:1e:c3:
                    4c:2c:1e:35:7d:14:69:2f:5f:88:bc:dc:04:ec:34:
                    f2:d9:18:d0:3f:d1:ed:21:4a:c1:22:72:be:8e:d1:
                    95:33:d0:1c:fa:18:8f:12:7f:5a:db:8e:b9:9c:ae:
                    3e:13:e6:4f:20:0c:42:09:61:af:c6:40:09:38:41:
                    fe:5c:4b:10:3b:f0:0a:34:0a:30:74:1c:29:38:d2:
                    31:94:f9:3f:dc:9b:22:26:2e:a5:9e:93:e9:1f:1d:
                    67:11:96:d4:df:d2:fe:8b:79:25:1e:ea:5e:60:59:
                    5a:93:4b:8d:17:5e:c7:87:ae:00:d9:31:35:62:2f:
                    de:73:2a:f8:1f:a9:43:fa:91:0c:72:24:10:d2:4d:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1B:06:8C:06:2D:19:0F:9E:88:82:A0:48:39:84:36:0E:29:96:2E
            X509v3 Authority Key Identifier:
                keyid:80:3A:7C:5B:64:96:99:09:09:FC:EC:FA:71:E7:9A:79:E3:58:01:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/803A7C5B6496990909FCECFA71E79A79E3580104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/803A7C5B6496990909FCECFA71E79A79E3580104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYHi1p5wrB8nKiNaJZLa9WHDmgDyrYqHuKs2JhfsZdDo/0/323830343a366565303a3a2f33322d3334203d3e20323730363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:dc:98:0c:73:c8:69:89:f0:07:90:a4:60:11:24:85:38:
         32:0b:f1:dc:3d:68:98:9c:20:58:6d:06:45:39:e6:1a:b6:a7:
         f6:aa:e1:96:af:2c:ef:44:2a:0b:21:b9:b0:78:ee:d4:ac:70:
         c0:d7:10:eb:08:24:14:55:b4:f7:88:f0:e8:6a:08:ef:a8:7d:
         93:ba:b7:f8:68:9c:18:f0:b4:85:d2:8c:98:17:91:17:03:0b:
         2c:9c:dd:f8:72:78:2e:54:11:d3:9a:ff:8c:dc:eb:a1:64:b7:
         23:b0:55:74:96:ac:9c:bf:eb:22:36:f9:67:b7:e5:30:9f:9c:
         fe:94:1c:52:a2:d2:32:4d:25:51:a3:a3:7d:f7:04:f0:83:4f:
         c4:88:10:4b:5b:4d:f8:a5:34:1b:34:1e:8d:c3:78:55:cd:16:
         f3:0b:0c:e1:d3:e2:92:12:0c:55:ac:fd:23:10:32:e9:19:46:
         10:03:91:e5:6d:ad:4e:1c:31:52:92:f5:bf:fa:14:c1:79:93:
         47:b7:21:00:8b:f6:ba:e7:02:57:4a:1b:ad:26:76:3d:da:1c:
         4a:ca:9a:b7:2a:2e:76:eb:db:f0:99:f0:42:cd:e3:f2:bb:c5:
         7a:56:cc:be:c7:10:7a:fc:14:23:1f:b6:e0:67:bc:6e:7d:47:
         55:19:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:45 2025 by rpki-client