Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa
File:                     323830343a386564303a3a2f33322d3332203d3e20323733343438.roa (raw, json)
Hash identifier:          s0ZvSvrnVrmC96gLm0IBSkqbohSbSvmXTyU7jKi6IRs=
Subject key identifier:   02:9A:70:C7:B5:4D:CB:D2:BA:42:57:CE:8B:C9:CC:B4:81:58:42:3F
Certificate issuer:       /CN=41572075398FE174182DAFC548613D62A0D77684
Certificate serial:       188A67E4FD748A03DFE1D914FC81056C6A7EE0DE
Authority key identifier: 41:57:20:75:39:8F:E1:74:18:2D:AF:C5:48:61:3D:62:A0:D7:76:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa
Signing time:             Tue 04 Nov 2025 12:17:55 +0000
ROA not before:           Tue 04 Nov 2025 12:12:55 +0000
ROA not after:            Tue 03 Nov 2026 12:17:55 +0000
asID:                     273448
IP address blocks:        2804:8ed0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.crl
                          rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 05:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8a:67:e4:fd:74:8a:03:df:e1:d9:14:fc:81:05:6c:6a:7e:e0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41572075398FE174182DAFC548613D62A0D77684
        Validity
            Not Before: Nov  4 12:12:55 2025 GMT
            Not After : Nov  3 12:17:55 2026 GMT
        Subject: CN=029A70C7B54DCBD2BA4257CE8BC9CCB48158423F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:8a:9c:52:00:d8:c9:aa:ee:d9:63:e5:21:
                    d0:bb:41:ea:ca:d6:47:a8:ae:fc:e7:da:f4:74:20:
                    d1:a7:fb:7a:53:8f:44:7f:7e:7b:60:d0:b1:d8:43:
                    21:67:4e:8b:12:e0:13:80:a1:99:59:6a:93:d9:26:
                    18:6e:8f:e2:85:24:f3:1f:9b:30:43:c9:1c:89:3f:
                    56:58:fb:2f:ba:75:27:32:1b:22:9e:65:8f:d1:ba:
                    2d:3c:7b:db:18:26:39:f4:63:94:3c:f2:cf:52:64:
                    a0:eb:92:fa:6c:9e:ab:a6:d9:92:e7:dc:e5:90:5b:
                    34:e0:66:23:8a:6a:aa:e2:f1:89:43:e8:4a:1a:40:
                    56:4d:4d:8c:d5:9b:1a:ed:cb:c5:f6:99:88:3b:4b:
                    6a:0e:08:88:62:4b:18:3c:2a:e8:2f:af:8e:35:e6:
                    af:7f:6f:c3:4f:12:db:dc:96:23:a6:ba:4c:e2:1e:
                    96:5b:ce:f0:45:41:17:99:be:23:65:d7:f3:30:21:
                    58:b3:d5:51:f6:f0:27:6d:d1:92:2c:cb:db:b0:e5:
                    fb:65:d9:f6:f6:9f:f1:03:e2:73:01:f1:00:d3:1d:
                    2e:bb:42:c5:6c:ef:84:a5:79:eb:33:d5:c2:57:a7:
                    48:02:ca:e5:01:7a:34:54:a6:11:53:a0:2e:34:f3:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:70:C7:B5:4D:CB:D2:BA:42:57:CE:8B:C9:CC:B4:81:58:42:3F
            X509v3 Authority Key Identifier:
                keyid:41:57:20:75:39:8F:E1:74:18:2D:AF:C5:48:61:3D:62:A0:D7:76:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/41572075398FE174182DAFC548613D62A0D77684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41572075398FE174182DAFC548613D62A0D77684.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew75CjQS4U9Dr7bAHTmNxYvDQZWK2htiBm5swRz46WsQ/0/323830343a386564303a3a2f33322d3332203d3e20323733343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ed0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:e4:67:28:59:40:63:6a:9a:36:c9:da:dd:35:3f:30:d4:08:
         8b:0a:cd:88:2f:39:92:bc:26:84:fd:df:5d:89:e7:07:06:6f:
         d6:dd:ac:c0:f0:b5:a2:6d:41:6f:9c:47:d7:4d:db:95:bb:0a:
         de:7d:5a:9e:9e:46:ad:43:df:6a:71:06:65:ea:93:e9:34:83:
         35:e9:1e:68:be:5f:2f:44:61:c5:2b:d5:b8:3e:b9:ae:9f:27:
         6c:77:cc:3a:2a:58:a6:96:e8:22:7d:95:16:34:47:df:55:7d:
         e1:87:b5:da:0a:48:01:c8:ee:68:89:58:4d:95:21:a0:9f:e4:
         64:31:4e:b7:ca:56:2a:71:18:86:5d:b6:2c:3f:28:c1:d3:e9:
         45:aa:bd:64:1d:a1:9d:e2:9d:a2:8a:36:64:53:84:76:39:a6:
         33:03:1f:e8:fd:45:5c:df:5e:3a:2e:da:5a:53:d8:45:41:7e:
         4b:11:7e:43:87:8c:f9:4e:b9:b2:e1:61:9f:b0:4b:f2:b3:4a:
         28:45:02:29:fc:90:86:e3:be:13:99:b8:b5:4a:0b:b4:ca:bf:
         07:f0:fb:ca:ac:cf:90:08:9c:0d:8d:be:8c:a6:c4:5c:dd:bc:
         33:c5:95:5d:5d:6f:6f:7a:7f:94:05:ea:cd:c3:aa:50:a2:8e:
         73:bc:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:01:10 2025 by rpki-client