Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
File:                     323830343a326537303a3a2f33322d313238203d3e20323635333436.roa (raw, json)
Hash identifier:          X4h/zV3d0zSH/iulrkVayPAgtQo8qGd+6I50vLUxQEQ=
Subject key identifier:   E0:B6:76:18:87:0E:2B:EB:95:2E:3C:10:B2:36:FC:CE:F6:D2:DF:63
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       7E8EC90C116992B699A9FD2A366DBECC81911DE9
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa
Signing time:             Fri 01 Aug 2025 17:30:01 +0000
ROA not before:           Fri 01 Aug 2025 17:25:01 +0000
ROA not after:            Fri 31 Jul 2026 17:30:01 +0000
asID:                     265346
IP address blocks:        2804:2e70::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 06:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8e:c9:0c:11:69:92:b6:99:a9:fd:2a:36:6d:be:cc:81:91:1d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Aug  1 17:25:01 2025 GMT
            Not After : Jul 31 17:30:01 2026 GMT
        Subject: CN=E0B67618870E2BEB952E3C10B236FCCEF6D2DF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:77:9b:27:b9:34:6e:00:96:0a:be:de:65:
                    c0:ac:6c:7b:7f:bd:78:12:f2:36:c6:e8:ad:90:db:
                    d6:01:f6:38:b3:6a:6c:84:72:d4:3d:19:b3:47:17:
                    a3:c9:d5:a0:bf:3e:43:40:a7:52:f7:e3:3e:b6:32:
                    42:14:32:a6:d4:c5:00:7f:bc:3e:1d:61:17:df:25:
                    23:c8:4c:13:a2:6d:2c:18:47:4c:1b:a1:8e:68:6c:
                    b4:3b:57:a5:cb:c8:cc:cc:d1:0d:8e:32:d0:76:b5:
                    29:bc:2b:cb:2a:9b:92:d7:87:70:24:bc:2c:6b:cd:
                    d6:17:75:fd:6b:d4:c2:5f:09:cf:dc:5c:63:89:e7:
                    29:bb:c9:d1:a8:fa:48:ae:0a:47:5f:ac:47:9c:58:
                    c0:ee:de:84:74:a9:d5:6f:df:c7:57:59:24:3a:c3:
                    62:d7:1f:6e:d8:fe:7c:43:be:da:9f:84:68:2c:95:
                    d0:42:83:dc:b7:ce:84:b2:83:eb:c6:84:93:b9:95:
                    0e:8a:ae:e8:e2:22:85:d4:83:a6:da:2c:f3:36:8f:
                    9c:f1:3f:c9:63:ec:b6:41:fa:43:9b:8e:26:da:09:
                    20:ef:b4:61:0f:3d:1a:9d:a8:27:7e:f0:81:3a:70:
                    e5:13:1a:43:df:1d:ab:42:5a:22:6f:77:4b:f0:4b:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:76:18:87:0E:2B:EB:95:2E:3C:10:B2:36:FC:CE:F6:D2:DF:63
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/323830343a326537303a3a2f33322d313238203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:c1:d2:8f:3e:f6:9f:aa:ff:21:ec:81:53:22:ce:bd:f0:
         b2:fe:88:1d:63:c6:79:53:b1:46:53:18:a7:99:7f:2f:f8:79:
         aa:2a:cd:e5:22:7f:48:62:88:c2:8f:e1:26:a7:a5:3d:8f:63:
         b7:8e:81:25:ad:f3:fb:22:6a:5c:ec:14:3c:99:a8:f0:79:2a:
         8e:ff:13:47:0a:d2:01:65:f8:6d:0a:27:47:b3:cd:6e:8b:5f:
         fd:83:32:33:c4:3c:40:a0:59:7d:8d:b4:44:a4:84:ca:a9:d4:
         d0:c3:bb:0f:1f:df:b9:9a:69:0c:b5:bd:52:c1:a0:9e:bf:3f:
         be:f9:95:8c:90:1e:7a:80:c2:6b:d2:be:3d:b1:7c:4c:54:fc:
         6c:53:f2:93:5e:3a:3f:46:91:9c:65:ca:62:25:a8:1b:b4:6f:
         6e:94:81:d8:58:9f:b0:a5:c0:ba:be:94:c9:f4:7f:dd:14:9d:
         a8:83:98:68:d3:1d:a8:13:a0:36:e7:47:7c:ee:a9:93:cc:ae:
         88:48:75:75:7a:8a:ea:95:68:b9:23:78:77:73:12:ca:8d:51:
         bc:c6:c8:e7:0a:b1:9b:67:c1:30:70:27:fb:eb:53:8f:77:70:
         b4:11:98:bb:05:9c:bc:b4:bb:c3:58:4b:c5:66:09:77:a6:e7:
         b4:e0:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:58 2025 by rpki-client