Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (raw, json)
Hash identifier:          WZa5RIJVI7ulRy7XNmHGGmkharWYBsvMqdMOQ2YXxvI=
Subject key identifier:   EB:92:B9:14:B0:35:EB:46:E6:8C:9A:56:E3:F1:A2:3D:E3:09:9F:7A
Certificate issuer:       /CN=9206B911EB707B51B01C514E2075DE8549D4A1EE
Certificate serial:       843D51AAFB4C8D895D5523F929A573DD43C814
Authority key identifier: 92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
Signing time:             Tue 28 Oct 2025 14:14:20 +0000
ROA not before:           Tue 28 Oct 2025 14:09:20 +0000
ROA not after:            Tue 27 Oct 2026 14:14:20 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            84:3d:51:aa:fb:4c:8d:89:5d:55:23:f9:29:a5:73:dd:43:c8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9206B911EB707B51B01C514E2075DE8549D4A1EE
        Validity
            Not Before: Oct 28 14:09:20 2025 GMT
            Not After : Oct 27 14:14:20 2026 GMT
        Subject: CN=EB92B914B035EB46E68C9A56E3F1A23DE3099F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:69:62:fe:1b:a1:2e:b9:dd:0f:bc:b4:fc:
                    13:ea:08:5c:37:1d:d8:f0:d7:a1:fa:12:fb:c5:09:
                    03:24:48:86:65:8f:87:9d:2d:01:3e:c3:85:cd:69:
                    9d:ff:08:0d:56:d3:76:48:4e:36:0c:88:0c:4e:c0:
                    ff:1d:93:f6:3c:c1:8e:84:c4:45:e5:9d:c1:91:e2:
                    ab:63:09:b9:01:31:b4:0f:31:67:fd:02:af:0e:f1:
                    a4:ca:cd:61:24:53:24:92:26:07:f4:56:58:69:ca:
                    6c:0e:87:45:40:b5:f3:cd:ec:dd:27:dc:f2:f0:bf:
                    6a:e7:11:19:ac:61:4b:41:65:ab:a3:ce:04:d5:91:
                    e4:dc:51:0a:9c:df:69:ed:c4:25:b6:46:42:5c:ef:
                    4e:7e:73:16:3f:ff:e6:95:17:7e:83:0f:56:e1:fd:
                    da:0e:2e:e0:71:fa:40:c2:c6:02:44:b1:24:51:22:
                    a5:3a:42:56:a4:d3:17:da:98:65:de:c5:46:d7:28:
                    97:e2:cc:9e:5c:0a:39:23:21:86:65:ef:f4:ee:28:
                    6f:ed:e3:6d:85:46:ee:2c:49:e3:c7:05:d7:5e:16:
                    76:5c:35:15:4e:a6:a9:e4:c5:07:f3:3a:be:bb:2a:
                    ab:3a:0f:2f:37:26:e6:2c:60:7b:3e:d0:0b:eb:43:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:92:B9:14:B0:35:EB:46:E6:8C:9A:56:E3:F1:A2:3D:E3:09:9F:7A
            X509v3 Authority Key Identifier:
                keyid:92:06:B9:11:EB:70:7B:51:B0:1C:51:4E:20:75:DE:85:49:D4:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/9206B911EB707B51B01C514E2075DE8549D4A1EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9206B911EB707B51B01C514E2075DE8549D4A1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:54:d3:8b:4a:9e:93:49:1c:2c:71:42:82:74:14:d4:48:
         5f:7b:05:04:fc:8e:e0:9f:88:ec:e8:40:66:00:a5:af:a2:85:
         83:6f:cb:b8:a4:65:5c:19:19:44:51:06:b7:23:25:36:23:3f:
         17:f5:f9:da:30:ea:45:85:83:b1:14:7c:ef:bb:cc:46:ab:6c:
         ec:ba:8c:a0:40:62:eb:69:5c:d8:1f:fb:a3:26:4a:c9:c5:47:
         73:d4:58:8c:b6:87:49:05:46:8b:81:79:37:6a:f2:f4:b1:67:
         5a:d8:80:fc:ce:36:80:0e:14:24:14:d9:04:83:8a:4b:ef:fe:
         66:91:16:2a:c2:f9:fc:cd:33:ca:92:f9:af:74:60:9a:b2:5c:
         79:3d:a2:3b:d4:05:7c:33:9b:a4:7d:84:69:5c:12:65:0c:d7:
         51:9c:d0:d8:8b:ba:2e:05:40:79:03:0a:82:62:c9:3d:1e:8a:
         ee:e4:5a:0d:a0:ba:b3:0b:fd:a8:4e:21:07:d1:26:6c:b5:e4:
         4d:40:ce:48:11:5f:e0:69:2a:19:3c:2c:02:ad:b9:74:1b:4a:
         a8:e3:65:19:48:aa:fc:e1:87:f1:a0:e3:43:a5:59:11:86:d8:
         79:21:d5:ef:ff:01:a3:00:70:96:b3:b0:d8:38:03:9d:de:f0:
         6f:50:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:34:53 2025 by rpki-client