Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a3a2f33342d3334203d3e20323731363038.roa
File:                     323830343a376533303a3a2f33342d3334203d3e20323731363038.roa (raw, json)
Hash identifier:          AUaYLQpU6E548AgJuhhA62BebgGUSbg+CkVt1eYaTy8=
Subject key identifier:   BA:09:E4:EA:DA:CC:0E:07:F7:72:82:C4:01:76:95:D2:2F:AF:2A:CE
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       3A5C252A353BD5D666716E6EE0ECCA8B8EB75B5D
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a3a2f33342d3334203d3e20323731363038.roa
Signing time:             Mon 28 Jul 2025 23:10:50 +0000
ROA not before:           Mon 28 Jul 2025 23:05:50 +0000
ROA not after:            Mon 27 Jul 2026 23:10:50 +0000
asID:                     271608
IP address blocks:        2804:7e30::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5c:25:2a:35:3b:d5:d6:66:71:6e:6e:e0:ec:ca:8b:8e:b7:5b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:05:50 2025 GMT
            Not After : Jul 27 23:10:50 2026 GMT
        Subject: CN=BA09E4EADACC0E07F77282C4017695D22FAF2ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:93:53:db:bc:07:78:c5:7e:99:6c:4d:34:
                    53:7f:49:bb:5a:dd:9e:34:db:81:ae:cd:47:3a:f6:
                    62:36:4f:52:b1:e5:7f:25:ad:96:a0:d8:af:a1:eb:
                    fa:41:fd:dc:c4:0d:97:4c:ac:96:c5:a8:7d:c0:18:
                    7b:44:66:44:bf:29:7b:18:03:a8:15:38:04:1e:d3:
                    b2:20:26:13:67:ff:d1:d4:94:90:75:5c:83:ae:db:
                    ba:83:eb:5f:42:b5:4a:7e:c2:51:a4:3a:0d:52:68:
                    33:71:b4:4d:65:26:3a:b1:20:db:ff:70:88:91:de:
                    fa:5d:26:21:2a:22:a6:f4:1e:dd:f4:6f:10:a1:ed:
                    53:9e:a6:51:b8:f5:67:b6:14:6d:d2:0e:f9:23:15:
                    b0:f8:14:0e:4c:8e:5e:b8:07:87:c8:15:12:66:c9:
                    6c:4e:9d:61:ce:4b:82:d1:73:e2:d2:67:01:2c:79:
                    28:7c:35:42:81:82:ca:da:9b:e4:ea:0b:96:38:bf:
                    8e:42:c7:d6:99:9c:37:b1:0d:bc:0b:fc:0b:22:82:
                    48:be:cd:2d:4f:ab:4b:4e:2d:1a:54:02:19:54:f2:
                    2f:83:26:27:fa:2b:83:6b:05:be:f7:65:bd:2c:be:
                    66:03:62:9c:4f:f0:fb:50:42:9a:b3:01:84:1f:65:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:09:E4:EA:DA:CC:0E:07:F7:72:82:C4:01:76:95:D2:2F:AF:2A:CE
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a3a2f33342d3334203d3e20323731363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e30::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:62:76:6a:33:c1:99:b4:a0:09:2d:f5:fc:04:70:c5:b8:
         a6:fb:ea:49:21:74:95:51:36:2b:1a:7b:79:25:7f:68:c4:60:
         f6:62:29:55:6b:8a:75:d6:04:e7:cc:b4:dc:18:c9:58:61:fa:
         72:76:0f:c6:d8:3c:8d:1b:c3:f7:b4:54:80:7e:0a:83:5f:92:
         26:b1:37:97:f7:b5:d0:dd:09:18:70:ef:5c:ca:07:15:22:6e:
         ef:f7:0d:2a:f1:b3:d4:73:cf:d8:1d:87:ad:cb:1b:dc:15:2f:
         9a:ba:b5:ea:01:d9:65:1c:0a:f2:57:3c:bb:e6:68:3d:3c:a9:
         ca:de:9d:3d:00:7d:69:37:40:c4:cb:ae:51:f1:b4:15:c0:07:
         0e:4a:0c:de:40:31:1b:58:3f:5f:91:63:6c:39:cc:66:60:de:
         e3:70:1d:7e:61:c4:89:a6:de:32:3d:cc:69:74:77:f8:e3:af:
         0a:76:38:42:ca:9e:7f:c6:09:6d:a3:fa:a3:ce:99:fc:7b:1c:
         b7:54:ad:f5:44:f2:22:65:d9:ec:36:4c:cf:54:19:ad:c8:73:
         0f:7d:3f:bf:bf:16:9b:23:2e:ad:dd:be:d6:8e:c1:a0:f7:e0:
         62:90:c3:80:4c:7b:46:3b:86:cf:61:e8:c1:a6:ad:86:b9:c5:
         ec:94:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:48 2025 by rpki-client