Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33322d3334203d3e20323734363633.roa
File:                     323830343a393163343a3a2f33322d3334203d3e20323734363633.roa (raw, json)
Hash identifier:          DzXoKN90TEbmZHp7lep35WAuVFya+QaCwW4GA2hGOp0=
Subject key identifier:   75:0F:74:76:65:17:03:EC:98:50:31:0D:63:28:C2:93:99:99:D7:B0
Certificate issuer:       /CN=EE5162109996F083F7332C943F0C8002D31A0634
Certificate serial:       5FCB1DAEABE476881255588B26BD4C17C0EF8283
Authority key identifier: EE:51:62:10:99:96:F0:83:F7:33:2C:94:3F:0C:80:02:D3:1A:06:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5162109996F083F7332C943F0C8002D31A0634.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33322d3334203d3e20323734363633.roa
Signing time:             Mon 11 Aug 2025 14:53:56 +0000
ROA not before:           Mon 11 Aug 2025 14:48:56 +0000
ROA not after:            Mon 10 Aug 2026 14:53:56 +0000
asID:                     274663
IP address blocks:        2804:91c4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/EE5162109996F083F7332C943F0C8002D31A0634.crl
                          rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/EE5162109996F083F7332C943F0C8002D31A0634.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5162109996F083F7332C943F0C8002D31A0634.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 07:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cb:1d:ae:ab:e4:76:88:12:55:58:8b:26:bd:4c:17:c0:ef:82:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5162109996F083F7332C943F0C8002D31A0634
        Validity
            Not Before: Aug 11 14:48:56 2025 GMT
            Not After : Aug 10 14:53:56 2026 GMT
        Subject: CN=750F7476651703EC9850310D6328C2939999D7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:a2:c9:1e:84:78:3f:7a:86:e8:5c:ab:1e:
                    83:7c:a3:99:7e:29:26:64:45:ef:21:7c:72:ac:04:
                    88:1c:ea:6e:8a:b8:2b:a1:e4:27:c8:52:ad:79:5f:
                    ee:91:77:e7:87:17:b4:d5:d1:07:cf:93:c9:e0:f3:
                    84:90:57:cf:b5:74:bf:60:e8:81:6c:4a:18:46:fd:
                    e7:b0:78:da:35:83:5e:db:e2:c7:e0:9c:3d:69:96:
                    78:c7:34:98:2e:7c:ee:9b:73:4e:27:ea:a0:3d:28:
                    44:99:6e:bb:2e:90:b4:03:6b:4c:eb:6f:1b:6f:33:
                    d4:2b:d9:0d:b4:bd:6e:6a:73:d5:da:28:b5:0f:6d:
                    2a:5a:b2:18:4b:c2:73:5d:74:b8:ca:a8:aa:cd:8c:
                    88:6a:7d:f0:cc:22:33:6b:bd:85:a6:b4:9c:21:12:
                    3b:07:7e:1f:a4:6c:a5:4e:b1:b3:dd:b5:80:de:97:
                    b9:ef:5f:70:07:1d:bd:ef:50:e9:bf:56:12:d5:2d:
                    48:ca:39:44:45:0d:2d:7b:be:fb:72:38:c5:bb:50:
                    3d:b8:1f:68:20:14:73:10:43:ba:d3:09:88:a1:36:
                    db:13:5a:42:a6:00:27:76:1d:b1:fc:f7:27:2a:64:
                    f4:d0:23:34:d2:27:46:ae:93:39:4a:d6:72:e3:f5:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0F:74:76:65:17:03:EC:98:50:31:0D:63:28:C2:93:99:99:D7:B0
            X509v3 Authority Key Identifier:
                keyid:EE:51:62:10:99:96:F0:83:F7:33:2C:94:3F:0C:80:02:D3:1A:06:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/EE5162109996F083F7332C943F0C8002D31A0634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5162109996F083F7332C943F0C8002D31A0634.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33322d3334203d3e20323734363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:8c:82:9a:04:bc:89:8d:e7:31:cd:76:58:3c:7a:b4:02:
         90:81:1d:15:b6:7e:96:fb:6e:74:39:92:8e:fe:99:5f:7a:60:
         28:53:c8:4b:d8:1b:5a:6d:de:da:0c:fd:8a:6f:15:62:42:cc:
         64:b0:d4:c0:f2:da:17:e2:0b:f3:f1:27:ef:d3:93:ab:6c:b1:
         4a:f3:d0:c6:ea:f6:cc:40:7f:99:24:24:6d:00:0e:7a:2d:70:
         c3:46:41:56:35:cd:33:ea:86:b3:61:6a:cb:bd:33:16:c4:a5:
         60:02:f2:7c:78:bb:1d:67:10:99:c7:f6:84:6e:5b:cd:b8:ec:
         b2:e5:5d:3d:c6:e7:61:cc:b4:36:e7:0a:07:7e:e2:89:e8:45:
         41:c3:f8:79:45:67:8f:ef:53:ea:ed:d9:b8:f5:d3:1d:7c:9b:
         c2:03:84:f3:c4:4a:a5:76:8d:d1:c4:c9:ef:5b:99:de:d2:60:
         31:ad:ec:2c:aa:16:6d:45:2e:d1:ae:7f:5c:cc:6d:6d:3b:af:
         be:a5:29:50:f1:6d:3c:97:a3:04:a2:28:89:c5:27:4e:fd:b7:
         4b:22:68:98:11:d1:8a:23:39:5c:46:cd:c1:d3:7e:36:90:ad:
         72:0a:d4:4b:ca:5c:b3:d6:a7:ed:d3:55:b7:f8:1c:db:a1:f1:
         42:a1:46:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 17:54:32 2025 by rpki-client