Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653730303a3a2f34382d3438203d3e20323633363132.roa
File:                     323830343a6666633a653730303a3a2f34382d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          GVkkApyVeP4DWQ3LMO3/n8jSw2YhUy1qNF4bs9UWbJk=
Subject key identifier:   19:21:0F:86:52:48:63:21:C1:30:69:24:7D:FC:B9:9B:E7:A0:F3:42
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       5299CCCB33D27B276A27512BBF528DAF2BEE215D
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653730303a3a2f34382d3438203d3e20323633363132.roa
Signing time:             Wed 06 Aug 2025 22:56:31 +0000
ROA not before:           Wed 06 Aug 2025 22:51:31 +0000
ROA not after:            Wed 05 Aug 2026 22:56:31 +0000
asID:                     263612
IP address blocks:        2804:ffc:e700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 06:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:cc:cb:33:d2:7b:27:6a:27:51:2b:bf:52:8d:af:2b:ee:21:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Aug  6 22:51:31 2025 GMT
            Not After : Aug  5 22:56:31 2026 GMT
        Subject: CN=19210F8652486321C13069247DFCB99BE7A0F342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:8d:e3:e6:61:22:17:7c:34:44:63:ef:0e:
                    87:d3:19:51:7f:ac:23:aa:a1:21:75:6f:68:63:6e:
                    61:57:4d:02:98:dc:f1:b8:ab:93:75:fb:46:c7:83:
                    67:6d:ff:82:39:f5:ef:b0:1e:b4:c2:ef:25:d0:68:
                    85:fc:47:27:58:7e:b5:12:43:9b:ad:23:d9:8a:f3:
                    6e:d3:48:8a:f0:a8:30:ce:54:da:ab:5c:13:7f:04:
                    37:9a:71:2e:1e:83:5e:09:17:73:11:e5:3d:19:db:
                    23:4d:6b:b1:d7:a1:53:29:58:50:3f:ab:92:dd:2a:
                    e9:fd:a0:77:10:c3:10:e4:9a:5f:92:f3:5e:75:35:
                    3f:b9:94:37:74:51:d5:cc:43:53:76:4c:5c:11:7b:
                    d6:fc:51:26:fa:3b:f6:20:0c:db:35:43:63:82:f4:
                    e2:0a:72:12:0e:69:5d:0c:2e:aa:f8:48:59:b9:c8:
                    47:62:0e:3d:6d:92:7a:d2:af:93:64:b8:bb:30:54:
                    04:cd:3d:3c:9a:bd:51:72:cf:88:e0:cf:d8:fb:dd:
                    53:21:a2:88:8b:77:78:33:61:00:12:b5:c7:b7:ed:
                    a8:3a:fa:ee:73:4a:38:59:42:ae:7d:8f:ce:a3:f6:
                    88:cc:a5:c8:9d:66:be:b0:d8:bb:9a:07:6b:d1:f8:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:21:0F:86:52:48:63:21:C1:30:69:24:7D:FC:B9:9B:E7:A0:F3:42
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653730303a3a2f34382d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e700::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:54:c6:81:cd:56:37:1c:46:5b:d9:fa:5d:f9:fb:12:37:b3:
         e9:00:c6:c3:ce:01:4d:02:fd:f4:c8:83:ba:79:3c:10:f2:54:
         b0:5c:2c:80:38:d2:12:d8:99:96:36:e2:91:0e:c1:23:68:f4:
         a5:bf:91:c4:be:41:f3:73:1f:85:96:c2:9a:0c:9a:44:64:98:
         49:b1:5f:e2:01:b2:55:7e:47:5d:e8:8d:67:66:79:f6:4b:cc:
         15:a6:1d:85:6d:84:56:5b:8c:62:47:e5:a1:55:00:c7:ac:9f:
         9a:8b:f2:d0:53:0d:36:03:83:66:6c:34:6a:50:84:44:af:52:
         3c:d4:77:8b:cd:9e:a0:ef:f6:fd:6b:c5:71:a6:55:9f:92:52:
         6c:bd:ed:dc:a5:05:c8:d7:49:5d:0e:e2:66:1a:02:74:1b:15:
         42:ac:49:40:50:81:40:34:d8:e5:be:4c:b4:bd:e5:e8:da:27:
         5b:b1:49:d1:ee:ca:f9:6a:78:47:e4:37:ea:5c:e9:2f:47:bb:
         ca:d9:ed:87:16:51:9e:d1:60:29:2c:cc:2d:12:5b:61:f4:c9:
         27:65:d3:48:2f:69:22:53:38:2a:de:5b:4d:06:08:ca:4e:e5:
         b6:2d:1a:76:0c:40:97:43:a4:58:8b:7e:28:51:5d:11:25:64:
         bc:d0:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:42 2025 by rpki-client