Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
File:                     323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa (raw, json)
Hash identifier:          wES7m3Ar0mtQ+s59C5u1QQZaP72ZOGrM4FgQ3cIIPJY=
Subject key identifier:   F6:D9:9A:F3:7D:5F:72:95:FF:B2:30:9C:96:85:CB:60:D6:6F:DF:26
Certificate issuer:       /CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
Certificate serial:       1BDFB1137AA37927881281E562876BDF98046E5E
Authority key identifier: E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa
Signing time:             Thu 17 Jul 2025 20:23:58 +0000
ROA not before:           Thu 17 Jul 2025 20:18:58 +0000
ROA not after:            Thu 16 Jul 2026 20:23:58 +0000
asID:                     267668
IP address blocks:        2804:4508:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 00:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:b1:13:7a:a3:79:27:88:12:81:e5:62:87:6b:df:98:04:6e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F0A2152F1A8E4D5B309774272DB70D8BDE05D
        Validity
            Not Before: Jul 17 20:18:58 2025 GMT
            Not After : Jul 16 20:23:58 2026 GMT
        Subject: CN=F6D99AF37D5F7295FFB2309C9685CB60D66FDF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c3:1c:50:8f:12:7a:8d:6a:7a:41:de:aa:e0:
                    75:5e:69:42:51:38:03:4f:f1:23:a6:e4:58:ef:80:
                    0c:b9:0c:ac:37:7b:53:ea:9f:14:b2:d1:ec:1d:36:
                    71:a4:94:28:07:f5:1f:59:5c:95:3e:ff:60:99:5a:
                    22:b9:f5:75:be:d1:98:9e:3b:ec:93:51:8c:1e:99:
                    0d:d9:18:7e:3b:c8:a3:bb:80:c8:69:79:6c:35:17:
                    11:5d:96:38:e9:50:ed:4c:e7:a8:c9:c9:05:90:47:
                    db:5d:51:d9:b9:e3:a0:2e:cc:9f:a5:20:80:0d:8d:
                    22:d8:eb:52:af:77:58:ed:b2:4a:89:65:02:20:5d:
                    44:81:1b:06:dd:c0:02:0e:0e:6d:4a:d5:0c:4b:d3:
                    08:14:b7:d9:8a:e7:54:fb:f8:1a:0a:90:0f:33:f6:
                    6c:a1:a8:f9:f0:3c:d7:7c:ab:f8:61:bf:d0:3a:d1:
                    b0:19:c0:a5:69:73:8c:6f:1b:ff:b6:e0:fc:41:c3:
                    bd:5c:fa:52:c7:de:2f:e9:1f:d3:9c:13:f7:8d:3a:
                    4e:80:c8:ee:8f:ea:93:5c:7f:3a:77:3c:97:63:fa:
                    38:36:d5:66:9b:65:f1:ae:5b:73:a4:a9:0d:b2:a9:
                    96:5e:33:02:54:c5:b4:d1:1b:14:c5:4d:2e:2f:43:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D9:9A:F3:7D:5F:72:95:FF:B2:30:9C:96:85:CB:60:D6:6F:DF:26
            X509v3 Authority Key Identifier:
                keyid:E7:8F:0A:21:52:F1:A8:E4:D5:B3:09:77:42:72:DB:70:D8:BD:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F0A2152F1A8E4D5B309774272DB70D8BDE05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/1/323830343a343530383a383030303a3a2f33332d3333203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         cc:55:21:c4:7b:99:7a:5a:92:72:b2:d7:c9:2a:a2:6d:75:fd:
         76:e2:c0:cb:42:15:6f:f8:6d:cf:71:89:e3:1a:f1:3e:ea:0a:
         ee:b7:fe:59:12:d3:93:58:42:e9:7a:e0:5f:6c:f1:c2:1f:29:
         f0:81:db:4a:0c:57:24:0d:9d:ed:e4:96:f0:5d:57:f6:af:f2:
         c1:cf:df:ae:08:62:f3:10:c9:86:e4:94:c9:18:99:d0:f7:83:
         76:07:ab:9d:57:a7:53:45:cd:cd:be:6e:c6:1b:19:60:0a:1f:
         c4:2c:c9:88:ac:59:fe:f7:4c:fe:1e:34:11:99:d7:7e:2b:48:
         eb:37:7a:72:38:a0:e9:2c:23:36:a2:25:52:41:a4:61:47:47:
         21:0b:98:54:dc:52:41:87:bd:0b:ea:e6:80:a5:f2:88:a8:0a:
         5d:89:83:bb:6a:4b:66:d3:7e:2a:45:f0:c3:81:a5:e2:7c:1a:
         ab:b9:47:1f:2c:9c:09:47:a0:54:fd:98:ab:d1:5f:8e:21:61:
         64:91:63:6a:80:f3:ab:eb:2b:6c:d4:bb:8b:5b:25:36:d6:fc:
         d5:d9:f8:d5:7a:53:2f:60:3b:d5:e2:a3:76:96:3f:0b:e4:52:
         7c:d4:f1:97:f3:8e:2c:ce:02:e7:87:ce:4f:66:50:7f:1c:81:
         1f:79:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:33:51 2025 by rpki-client