Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa
File:                     323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa (raw, json)
Hash identifier:          dYkQIBxArgMzViAiI7fmFsIC4Ny1xpVABWAMv0v1IT8=
Subject key identifier:   93:39:E6:D1:28:7A:FE:A6:16:43:A4:23:84:B5:F0:64:E7:9D:4E:78
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       5C4BA64FA65F55283BCE8EDED0670921C57D5D50
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa
Signing time:             Mon 28 Jul 2025 23:11:15 +0000
ROA not before:           Mon 28 Jul 2025 23:06:15 +0000
ROA not after:            Mon 27 Jul 2026 23:11:15 +0000
asID:                     271608
IP address blocks:        2804:7e30:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4b:a6:4f:a6:5f:55:28:3b:ce:8e:de:d0:67:09:21:c5:7d:5d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:06:15 2025 GMT
            Not After : Jul 27 23:11:15 2026 GMT
        Subject: CN=9339E6D1287AFEA61643A42384B5F064E79D4E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:f7:ca:2d:c8:9e:20:49:37:5f:60:cd:fc:
                    90:72:2a:2e:ef:32:e5:f8:16:d5:4f:34:ee:c6:ca:
                    f2:54:17:71:77:95:94:be:58:0a:14:38:f3:b9:e4:
                    8c:aa:ce:e4:1e:a1:d9:bd:c2:39:49:a8:af:ec:76:
                    59:ba:bd:54:e5:95:b4:f4:00:66:b8:e0:a4:d0:20:
                    2d:71:68:91:08:20:b1:d5:c4:57:f7:27:5b:88:84:
                    18:a7:93:49:70:36:3a:15:09:cf:0a:e3:ca:08:35:
                    9a:3e:af:65:25:fb:96:37:67:2b:03:a3:9c:f7:27:
                    d5:97:61:0a:01:79:90:7e:38:5f:30:66:f4:e0:39:
                    fe:3f:96:7d:e8:af:e2:ed:26:45:de:42:2a:3f:bf:
                    f5:19:55:3d:27:d9:79:3e:ef:8f:b4:70:a2:55:f9:
                    a1:42:06:81:af:64:c7:90:19:20:c0:12:e6:6b:66:
                    f8:f4:3d:5d:ce:b1:74:a8:e1:5d:43:ca:27:4b:9d:
                    1b:d0:12:26:6f:4e:69:a8:b0:95:80:73:0e:fe:69:
                    d3:1b:6e:7d:a1:3a:95:01:31:f8:d4:ca:29:e4:df:
                    33:27:f7:fc:00:b4:e7:41:32:fe:f1:e0:6b:7e:6a:
                    0e:77:dc:da:22:0c:d5:d2:1b:2f:3f:02:7b:69:bb:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:E6:D1:28:7A:FE:A6:16:43:A4:23:84:B5:F0:64:E7:9D:4E:78
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a383030303a3a2f33342d3334203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e30:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:77:8a:84:07:cc:e0:92:72:24:35:3d:e5:4b:9e:a4:c1:44:
         d6:df:23:e4:fd:c7:86:bd:78:db:e1:00:c6:2d:c6:ef:7b:a6:
         a6:93:65:b8:71:35:5c:0d:8b:b5:5f:44:0f:e8:73:a5:3d:75:
         f9:78:c5:b1:c0:0e:bc:84:c3:8e:cc:ba:71:53:bb:0c:7d:d3:
         f9:96:da:68:a7:2c:16:c8:5a:92:2e:5c:83:c5:0d:e8:7e:6e:
         e5:c0:91:0d:2d:7b:61:d0:61:da:ba:b0:f2:b9:94:42:a8:81:
         c2:f2:54:71:6f:40:5d:a3:36:17:21:df:0e:bc:78:e0:94:ce:
         48:3a:02:da:11:e8:b8:55:63:af:4f:cc:e5:18:2b:bb:0c:84:
         64:a8:a5:b0:ec:72:2a:39:90:52:0e:98:f6:2a:73:b5:cd:80:
         f3:10:bc:51:18:cb:03:55:ba:64:bd:cf:51:85:f7:d5:e8:71:
         4a:7f:6b:f9:62:27:09:4b:73:ed:a7:0b:ca:b5:78:e3:6c:55:
         25:20:38:c6:bc:e7:94:e3:0a:4b:a5:28:c2:f0:21:ef:fe:92:
         ad:2c:38:a7:9f:f9:4e:54:29:77:07:b2:0f:ad:9b:f9:27:f2:
         d6:79:76:79:b4:46:0e:d9:96:d0:bb:2e:07:aa:52:73:f5:ff:
         5c:d2:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:47:56 2025 by rpki-client