Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a3a2f33332d3333203d3e20323734363835.roa
File:                     323830343a393230383a3a2f33332d3333203d3e20323734363835.roa (raw, json)
Hash identifier:          IfJqMMrrSRtRXEEduV6W4juFq/zvte6wJCyKNSC60OQ=
Subject key identifier:   EE:BC:8D:CE:20:19:9E:D2:E2:A9:14:51:AA:D1:B6:9A:F8:A8:24:7B
Certificate issuer:       /CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
Certificate serial:       436BC2F9DA946F6B576288732DF76FD87E44E8DB
Authority key identifier: E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a3a2f33332d3333203d3e20323734363835.roa
Signing time:             Mon 21 Jul 2025 16:41:52 +0000
ROA not before:           Mon 21 Jul 2025 16:36:52 +0000
ROA not after:            Mon 20 Jul 2026 16:41:52 +0000
asID:                     274685
IP address blocks:        2804:9208::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl
                          rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 03:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:c2:f9:da:94:6f:6b:57:62:88:73:2d:f7:6f:d8:7e:44:e8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
        Validity
            Not Before: Jul 21 16:36:52 2025 GMT
            Not After : Jul 20 16:41:52 2026 GMT
        Subject: CN=EEBC8DCE20199ED2E2A91451AAD1B69AF8A8247B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:3c:45:7b:c6:f9:02:d2:de:33:33:0d:34:
                    22:bf:7c:dd:ad:f4:a0:24:86:8c:fd:d9:83:a3:bd:
                    51:ee:f7:41:a0:89:7c:f8:f9:be:d8:2a:0c:de:e0:
                    64:0e:2a:a6:4e:1d:82:78:4d:ea:4e:1c:bb:d1:b1:
                    c3:10:d1:f1:b0:f2:44:53:20:77:4b:ae:ac:ba:bb:
                    2f:61:ba:58:db:a5:72:17:7d:82:f7:88:b9:59:ac:
                    3e:7d:e5:5e:31:5e:ff:86:c2:ea:df:20:b1:d7:41:
                    7c:1b:23:bf:b6:99:e9:3a:bd:3b:44:d3:21:10:8f:
                    00:92:8b:6b:f3:88:ef:dc:d8:e4:de:1c:e3:f4:43:
                    b0:fc:38:59:c7:03:2f:4e:da:a8:f6:22:fc:0d:73:
                    40:56:e8:af:14:51:64:d7:f0:80:c2:a4:53:fa:e3:
                    77:86:a0:f2:86:f8:3f:99:39:3d:c0:bb:08:1e:ec:
                    7f:e3:3b:d7:93:62:12:cf:1d:d1:00:6e:c3:46:a6:
                    be:54:7a:ac:8d:9e:19:23:8d:02:00:c1:dd:00:33:
                    d2:6f:38:d9:35:2f:e6:00:b0:62:c9:33:fd:9c:f0:
                    ea:29:9b:2f:73:8d:15:de:e3:02:be:5c:00:f7:60:
                    a9:88:80:44:eb:aa:9f:26:99:cb:d7:ec:82:16:23:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BC:8D:CE:20:19:9E:D2:E2:A9:14:51:AA:D1:B6:9A:F8:A8:24:7B
            X509v3 Authority Key Identifier:
                keyid:E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a3a2f33332d3333203d3e20323734363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9208::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:fa:e8:57:60:21:c9:e9:5e:64:b1:b6:f6:42:89:1c:84:
         4a:67:c6:02:8d:f7:51:22:ed:8c:70:b1:f2:68:f5:34:35:a5:
         20:99:5c:a9:61:f3:a9:83:c5:a1:76:59:2f:8e:e2:7a:5d:1e:
         cd:6a:d0:a5:9c:d5:cb:94:bb:f9:f4:1d:41:32:4d:63:05:2f:
         89:f9:d5:23:7b:03:41:47:b0:1b:f1:82:8b:99:8f:fa:1b:d0:
         25:1d:16:9f:7c:65:0e:2e:6c:2f:6a:07:35:0b:1f:85:4a:2e:
         1f:1a:d3:62:55:d3:3f:4a:82:f9:04:bd:32:cb:62:1b:69:eb:
         80:f3:52:02:99:94:ff:e8:02:52:3f:ce:a1:cf:f8:66:16:dc:
         5d:05:7d:e7:7f:18:28:66:c7:94:16:6c:ba:33:1a:bc:cd:a5:
         82:a5:a3:dc:87:22:ff:96:4b:89:88:25:f5:52:1b:bb:a9:b4:
         3f:f4:eb:d3:26:22:b5:22:23:7b:1e:5b:07:7b:d9:b7:3d:75:
         55:2b:cf:97:90:aa:cf:9b:18:2c:8a:b3:e3:0c:db:b4:4a:26:
         8d:8d:73:18:46:44:37:ec:0e:bc:93:44:66:7e:e7:e2:59:ba:
         d7:b8:1a:7c:ce:e1:01:44:21:9e:23:3c:dd:fc:59:3e:ae:d1:
         d2:05:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:38:35 2025 by rpki-client