Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
File:                     323830343a356638383a3a2f33332d3333203d3e20323639313037.roa (raw, json)
Hash identifier:          jLxGFIP7DWza112UrE/uHv2o5zJu1Nt3xLTQ8QYLovY=
Subject key identifier:   4B:F2:1F:5E:7B:09:88:C2:68:08:77:3F:0F:DB:04:30:81:5B:37:53
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       79D4C85D892986728FCBA6A3147A00DFE695FCFB
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa
Signing time:             Mon 14 Jul 2025 21:00:02 +0000
ROA not before:           Mon 14 Jul 2025 20:55:02 +0000
ROA not after:            Mon 13 Jul 2026 21:00:02 +0000
asID:                     269107
IP address blocks:        2804:5f88::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 21:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:c8:5d:89:29:86:72:8f:cb:a6:a3:14:7a:00:df:e6:95:fc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Jul 14 20:55:02 2025 GMT
            Not After : Jul 13 21:00:02 2026 GMT
        Subject: CN=3082010A0282010100AEA4B6E9696FE6315A49495E8F6ED0C5054EEF1CAD7674AB45C27BFA4A870B832487B0FBCFD069E160CC659D1C079F62F467B24F3DC4EE09EE8CF409C0978265FB00528B9B1CEB3CF215B5820C362598C95E7DEAE63DCE736953C66B6623BCDB3EDEB0BB78353836EC10C181F4B2BF3F83DB199466B4ED2C3EB3C6DACC9818EFC16A9EDBDCF49852318DB3C9D2EBAC88F5C0D089383F8EA0282D959FFE76811FB7A07F56910112FE118E8EE688955853E7379EA3810BF66971635DF53453B126F34BBCD9E1CF20581BDBF58613BD9A1F11177633047A139C72E466F727BA181C1977F94DB788FEBE20C09A1919056B05DEA80D8213C1C585BFD9961C9A17D0B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:b6:e9:69:6f:e6:31:5a:49:49:5e:8f:6e:
                    d0:c5:05:4e:ef:1c:ad:76:74:ab:45:c2:7b:fa:4a:
                    87:0b:83:24:87:b0:fb:cf:d0:69:e1:60:cc:65:9d:
                    1c:07:9f:62:f4:67:b2:4f:3d:c4:ee:09:ee:8c:f4:
                    09:c0:97:82:65:fb:00:52:8b:9b:1c:eb:3c:f2:15:
                    b5:82:0c:36:25:98:c9:5e:7d:ea:e6:3d:ce:73:69:
                    53:c6:6b:66:23:bc:db:3e:de:b0:bb:78:35:38:36:
                    ec:10:c1:81:f4:b2:bf:3f:83:db:19:94:66:b4:ed:
                    2c:3e:b3:c6:da:cc:98:18:ef:c1:6a:9e:db:dc:f4:
                    98:52:31:8d:b3:c9:d2:eb:ac:88:f5:c0:d0:89:38:
                    3f:8e:a0:28:2d:95:9f:fe:76:81:1f:b7:a0:7f:56:
                    91:01:12:fe:11:8e:8e:e6:88:95:58:53:e7:37:9e:
                    a3:81:0b:f6:69:71:63:5d:f5:34:53:b1:26:f3:4b:
                    bc:d9:e1:cf:20:58:1b:db:f5:86:13:bd:9a:1f:11:
                    17:76:33:04:7a:13:9c:72:e4:66:f7:27:ba:18:1c:
                    19:77:f9:4d:b7:88:fe:be:20:c0:9a:19:19:05:6b:
                    05:de:a8:0d:82:13:c1:c5:85:bf:d9:96:1c:9a:17:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:1F:5E:7B:09:88:C2:68:08:77:3F:0F:DB:04:30:81:5B:37:53
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a3a2f33332d3333203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:91:a4:81:03:a9:81:33:2a:b5:71:91:9f:79:aa:d4:08:
         0f:33:ee:29:b3:95:79:bd:09:b6:f8:70:8e:6c:21:8d:4f:97:
         ad:c2:e7:f3:1b:97:f3:a3:e9:8b:76:28:92:4e:18:d4:26:44:
         c2:8b:ec:52:a2:41:21:aa:53:02:99:72:5e:14:f6:48:73:ff:
         84:1b:60:54:1d:2d:1e:5a:40:87:21:6c:19:96:c3:27:41:71:
         1b:d1:24:94:c8:4d:2c:ea:dc:84:fb:0d:ba:df:d8:ad:38:a2:
         38:07:98:60:07:7e:fb:0c:1e:4c:e4:53:c9:12:91:78:de:57:
         dd:a8:15:50:e1:ca:26:db:bf:b4:e4:d0:6d:0f:8c:b8:20:9f:
         11:41:1b:b5:51:0f:a7:f7:eb:89:90:ef:7d:30:ff:3e:12:02:
         40:dd:6a:93:98:a7:bd:1a:1c:a8:a4:91:79:2c:88:58:c8:6b:
         58:77:0d:f7:b5:2b:4a:39:e5:d3:16:e8:a4:53:f0:a9:83:01:
         bc:7a:15:3c:f0:03:48:ed:ff:0a:32:de:5f:ee:af:8f:6d:8c:
         f6:59:ab:18:f5:e4:55:1b:8b:b9:ef:23:52:43:23:2f:d5:c8:
         ea:42:94:eb:8c:ed:c2:b0:30:b2:34:59:47:ff:de:01:aa:57:
         67:90:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:52 2025 by rpki-client