Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33322d3332203d3e20323639313037.roa (raw, json)
Hash identifier:          OvRt4FurpvDdnf7fky1F7Uny7LNj8LUOb5AdWjE7Dbo=
Subject key identifier:   9E:2B:10:4D:67:E9:F1:BF:8D:F9:13:5B:40:F6:45:D6:89:51:EC:9B
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       63FAE7E0CA605F78EDDD1518C41DBE0596B958E7
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa
Signing time:             Mon 14 Jul 2025 21:00:01 +0000
ROA not before:           Mon 14 Jul 2025 20:55:01 +0000
ROA not after:            Mon 13 Jul 2026 21:00:01 +0000
asID:                     269107
IP address blocks:        2804:5f88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:e7:e0:ca:60:5f:78:ed:dd:15:18:c4:1d:be:05:96:b9:58:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jul 14 20:55:01 2025 GMT
            Not After : Jul 13 21:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:e8:f5:75:c0:96:30:42:7b:c7:bc:c8:21:
                    f3:38:bf:68:dc:cb:70:1d:d9:9b:95:38:bc:43:99:
                    78:ed:27:ee:fd:9f:47:32:6e:45:97:61:44:61:52:
                    09:d5:94:06:0a:01:e2:95:41:7a:32:4b:9c:ba:c0:
                    40:bc:af:5b:e7:d4:3b:e7:7b:f6:6a:b8:03:30:41:
                    19:9d:b3:10:c3:60:84:cc:5b:11:39:db:2b:5c:1d:
                    2f:69:5a:80:10:fe:97:c6:b4:95:d6:57:5b:23:ae:
                    f0:da:ff:88:a8:8c:b1:f2:52:57:c6:69:bf:d1:5b:
                    83:77:43:bf:72:8e:eb:fe:c1:51:63:9a:00:cd:3b:
                    c3:af:33:f3:ce:f1:42:31:c3:b1:83:f0:32:10:90:
                    0a:69:39:ca:5a:9c:61:f9:a3:59:2c:18:9d:87:29:
                    3c:c3:5c:c5:1b:3d:29:c3:a3:42:6e:2d:d0:bf:a0:
                    53:11:ea:94:f6:5e:ac:17:8f:e0:69:f8:0b:37:a1:
                    d5:70:9e:6f:f0:47:91:f4:4d:50:dd:bd:2a:e3:ce:
                    3b:d8:e8:d0:ec:5e:aa:77:ca:5b:f1:f1:14:e2:0f:
                    da:5a:79:3a:a4:24:48:fe:fc:ad:3c:2a:75:05:1d:
                    a1:17:c9:51:64:6d:6c:35:a6:3c:07:00:38:0b:a6:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2B:10:4D:67:E9:F1:BF:8D:F9:13:5B:40:F6:45:D6:89:51:EC:9B
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33322d3332203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:e7:92:03:0e:02:04:cd:50:52:3a:89:6d:aa:ce:b0:73:
         22:cb:92:2e:29:65:68:7e:69:88:c5:b3:df:24:34:2e:d0:0b:
         70:6a:7b:90:2e:8a:df:b0:d4:ac:4b:e8:be:09:36:49:02:a8:
         2d:8a:fa:54:1c:50:1c:e7:d0:77:f2:64:f5:cd:65:42:26:73:
         bb:eb:90:7f:8b:01:73:0f:90:93:b1:a8:fa:29:d3:65:0d:46:
         37:a5:13:ae:64:bc:43:17:6e:4d:78:04:4a:ef:98:21:39:25:
         dd:09:1b:8f:c4:7e:ea:ed:a6:d7:35:71:c1:90:69:71:34:ec:
         12:fe:12:84:ce:2b:2b:47:f2:10:4f:9d:86:5a:6d:9b:55:0d:
         35:23:46:60:bb:d7:a2:d1:ac:88:d7:ef:f7:c0:05:ea:b9:5f:
         75:7b:90:54:0d:a5:65:78:96:e2:74:88:d6:ef:a1:49:51:75:
         b9:b2:5e:a2:b1:f9:1b:84:9d:6d:b1:49:50:c6:e8:f1:de:3e:
         ac:2b:66:3a:e1:f0:a7:ce:e5:ae:fe:3b:5d:e8:d8:e8:51:7e:
         46:e4:2a:d5:87:c8:59:6d:d6:d6:4d:ef:78:1f:8c:4a:60:c4:
         bb:f6:b5:c0:0b:3e:09:86:71:23:42:77:2a:71:b6:32:59:99:
         ed:9e:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:06 2025 by rpki-client