Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a383030303a3a2f33332d3333203d3e20323632393732.roa
File:                     323830343a6563303a383030303a3a2f33332d3333203d3e20323632393732.roa (raw, json)
Hash identifier:          2N9jbRPMbzbZSFT6p/QKsCZU7iyvd9iXxwkrLQ9fTrU=
Subject key identifier:   B0:66:2B:A8:7D:79:10:75:6C:FA:9A:C3:37:DD:D5:6F:5C:DD:6F:4E
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       73DF0925B077370083CE017914B45CC62B3BEE1A
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a383030303a3a2f33332d3333203d3e20323632393732.roa
Signing time:             Mon 07 Jul 2025 11:48:14 +0000
ROA not before:           Mon 07 Jul 2025 11:43:14 +0000
ROA not after:            Mon 06 Jul 2026 11:48:14 +0000
asID:                     262972
IP address blocks:        2804:ec0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:df:09:25:b0:77:37:00:83:ce:01:79:14:b4:5c:c6:2b:3b:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jul  7 11:43:14 2025 GMT
            Not After : Jul  6 11:48:14 2026 GMT
        Subject: CN=B0662BA87D7910756CFA9AC337DDD56F5CDD6F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:d0:3c:15:7a:a9:ae:80:92:1e:99:b5:1c:
                    51:bf:98:12:a8:8e:30:c5:fe:ab:86:4a:f0:3a:58:
                    c5:18:e2:d7:09:00:5e:e3:46:5c:e0:8b:53:82:f4:
                    dc:3a:47:64:00:58:94:c7:ef:27:28:dd:25:69:8a:
                    09:5a:5c:3e:5c:d4:4b:62:7a:3c:39:6a:47:01:9c:
                    b5:98:83:ca:5c:ca:d0:6b:2e:fc:c5:94:85:aa:64:
                    9a:41:b7:c1:24:3f:a0:59:4e:83:af:6a:53:ca:d5:
                    3c:42:4e:6a:47:da:4a:2c:7a:83:c0:2c:79:ea:56:
                    01:ae:95:48:6a:13:db:39:6b:1f:d4:5e:ad:bb:2f:
                    7c:12:3b:a2:b9:1e:29:d4:ff:f1:1f:08:eb:a5:bd:
                    c0:a2:f3:cf:3d:15:83:c4:91:ca:b1:35:77:59:8a:
                    96:61:4a:2f:a7:f9:64:b0:15:bd:96:f3:9d:f6:9e:
                    0a:9b:8b:5e:d9:54:c9:26:16:aa:af:5e:9a:0e:b3:
                    b1:b3:11:f8:6e:77:57:62:88:02:d2:c2:8a:b1:9f:
                    5d:ab:ba:1b:4d:4b:76:0e:27:bc:18:a5:7e:4b:be:
                    4b:97:84:15:9a:a4:37:a9:d5:87:2d:81:05:11:b5:
                    bf:3d:69:b4:1e:34:b0:57:08:db:b1:f3:9f:e6:21:
                    6b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:66:2B:A8:7D:79:10:75:6C:FA:9A:C3:37:DD:D5:6F:5C:DD:6F:4E
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a383030303a3a2f33332d3333203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:3f:28:36:c2:1f:86:eb:91:1b:4f:78:d7:6e:89:69:88:
         8c:79:a7:be:95:b7:36:68:48:51:be:80:4b:13:90:55:71:54:
         19:06:62:76:17:cd:ba:f7:4b:61:36:f6:2e:b4:b8:05:80:0a:
         8c:24:7f:ab:33:90:61:b9:84:d6:de:ae:08:01:ce:af:23:c8:
         f7:44:06:a1:27:8a:36:ad:2c:bc:17:6e:29:bc:1b:16:f7:fe:
         67:7a:ac:7b:42:e1:94:24:04:62:8e:72:18:7f:0b:fa:bb:fa:
         b9:22:31:5d:19:64:cb:44:b0:1e:33:01:6d:b7:bf:19:15:ec:
         82:48:29:71:57:18:01:9c:d6:c2:5c:1a:0a:74:8d:3e:0f:ae:
         ce:85:e0:7f:f9:b4:7b:82:35:13:1b:22:99:8c:3b:d4:1a:c6:
         18:e9:2c:43:55:08:2f:fa:c8:87:36:f8:cb:52:35:b2:85:b8:
         73:9f:45:12:7a:db:79:f1:46:d7:24:16:17:01:25:86:9b:c6:
         8d:7b:ff:b5:e7:e0:86:c0:d0:e5:af:29:ec:12:e6:67:3c:60:
         39:4b:c8:95:df:03:2c:01:cb:2e:17:d9:39:f0:51:20:1b:99:
         ac:c7:01:2f:91:f4:cd:f4:c4:f5:af:43:09:32:a9:68:7b:63:
         36:1c:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:33 2025 by rpki-client