Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a633030303a3a2f33342d3334203d3e203631383332.roa
File:                     323830343a376533303a633030303a3a2f33342d3334203d3e203631383332.roa (raw, json)
Hash identifier:          3RwtGAmCnOfi/Fb7QW4DiX6YPsdtHLoBKVdQWM4VL1Y=
Subject key identifier:   22:B2:50:D1:2F:9A:30:B6:3A:92:8B:F8:2A:0A:4D:2A:46:8E:74:DE
Certificate issuer:       /CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
Certificate serial:       601472CC3E3EFF575CC47FD7E710B6D2D8D60B8B
Authority key identifier: 27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a633030303a3a2f33342d3334203d3e203631383332.roa
Signing time:             Mon 28 Jul 2025 23:10:55 +0000
ROA not before:           Mon 28 Jul 2025 23:05:55 +0000
ROA not after:            Mon 27 Jul 2026 23:10:55 +0000
asID:                     61832
IP address blocks:        2804:7e30:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl
                          rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 00:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:14:72:cc:3e:3e:ff:57:5c:c4:7f:d7:e7:10:b6:d2:d8:d6:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272D4C56DE64C83FE291166829B6E1D3581F58FF
        Validity
            Not Before: Jul 28 23:05:55 2025 GMT
            Not After : Jul 27 23:10:55 2026 GMT
        Subject: CN=22B250D12F9A30B63A928BF82A0A4D2A468E74DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:5e:0c:d0:f0:b7:74:5f:bd:73:de:86:7c:
                    96:90:81:29:91:05:69:17:6e:55:ed:b9:22:2f:50:
                    4d:db:7d:b4:26:55:af:6a:63:d5:79:46:81:c9:0b:
                    df:5f:71:28:09:c2:e8:3b:15:7e:7c:2c:e3:1d:b1:
                    30:d4:1e:e6:b7:56:af:6e:2f:02:48:d4:45:c3:55:
                    d2:eb:b3:b7:19:e6:1b:35:d1:aa:d5:f1:5c:7d:8d:
                    63:70:cf:e2:38:ee:b5:b1:f0:c8:bd:48:95:e7:d8:
                    73:f2:b5:29:18:64:06:a8:ae:c3:ce:ba:85:10:ca:
                    3c:c4:60:0e:98:7b:9f:4f:7f:9c:d4:04:ba:8d:48:
                    1b:e8:d0:e4:03:0f:dd:b0:04:c4:ab:2a:22:d2:c8:
                    f8:5f:eb:b1:6f:69:84:01:cc:16:16:f3:8d:2a:4a:
                    29:ff:c1:de:7f:0d:e8:7d:7b:15:56:85:05:3f:7e:
                    b0:98:3a:d4:75:92:61:19:5d:0c:ca:ef:b5:92:28:
                    93:77:6d:83:f0:4e:ce:64:ba:98:61:4e:18:38:d7:
                    5d:68:ca:c9:21:f3:41:02:34:b0:76:c2:d2:b4:9c:
                    52:9f:2c:ff:45:1b:f7:d3:97:ae:f6:79:f3:dd:09:
                    19:01:38:49:1d:04:30:be:b2:f7:a9:e3:e1:68:dd:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B2:50:D1:2F:9A:30:B6:3A:92:8B:F8:2A:0A:4D:2A:46:8E:74:DE
            X509v3 Authority Key Identifier:
                keyid:27:2D:4C:56:DE:64:C8:3F:E2:91:16:68:29:B6:E1:D3:58:1F:58:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/272D4C56DE64C83FE291166829B6E1D3581F58FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272D4C56DE64C83FE291166829B6E1D3581F58FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyY9XAg9uTww8e6VfriAbwX7AVNzKXjN7DVAGfks6LYF/0/323830343a376533303a633030303a3a2f33342d3334203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e30:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:49:de:49:08:ff:41:59:08:db:25:4b:00:60:18:75:a5:93:
         7f:33:32:b0:d9:92:dc:30:0e:c5:05:82:a5:ef:a9:55:23:10:
         4f:30:c8:c8:ba:16:ac:b1:da:04:3d:3b:7b:c5:21:6f:98:ab:
         9c:86:5d:53:6e:f2:20:07:08:e4:32:8b:bb:cf:e0:8f:8c:c2:
         38:a7:f8:97:33:4b:16:a5:81:6b:81:b5:fc:d5:e5:93:da:9c:
         54:5c:76:3f:e8:bc:83:1a:66:51:9c:a0:09:c8:c9:09:2a:1e:
         12:1e:f5:24:0e:32:ef:e1:a1:8c:c3:db:15:c6:e0:48:28:28:
         df:0f:cd:c3:88:99:e8:18:87:94:73:8c:c1:79:d7:f3:60:84:
         e6:75:36:28:6c:de:ab:42:0e:4a:65:25:86:94:4c:1d:0d:55:
         d9:1c:0a:ec:c3:d0:65:ba:59:df:ea:76:00:5f:69:dd:6d:6e:
         e9:99:c7:87:da:6e:d9:fa:f0:8e:f6:1b:3d:19:6b:29:6d:c1:
         16:7a:08:ae:bf:5b:b7:af:02:c8:c7:a8:de:c6:37:6d:21:77:
         4f:b8:57:0f:51:69:9e:b6:92:a6:05:04:32:f8:ad:4e:28:cc:
         d8:fe:3a:05:fa:d7:41:3e:77:99:0c:c1:0f:50:60:be:fc:04:
         d7:96:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:40 2025 by rpki-client