Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa
File:                     323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa (raw, json)
Hash identifier:          F6ERfhTXWBM0dDB60XVnKCY0Uc7qDUrw0hxc3Y5NxPE=
Subject key identifier:   73:AB:0C:F4:1D:37:09:8A:91:A9:FC:EA:77:74:50:49:2D:CD:29:4C
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       5DF29F928F381256CD0E9657C22BC7591F50BB60
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa
Signing time:             Tue 22 Jul 2025 17:40:33 +0000
ROA not before:           Tue 22 Jul 2025 17:35:33 +0000
ROA not after:            Tue 21 Jul 2026 17:40:33 +0000
asID:                     268787
IP address blocks:        2804:5aa8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f2:9f:92:8f:38:12:56:cd:0e:96:57:c2:2b:c7:59:1f:50:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Jul 22 17:35:33 2025 GMT
            Not After : Jul 21 17:40:33 2026 GMT
        Subject: CN=73AB0CF41D37098A91A9FCEA777450492DCD294C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:56:6a:2c:d9:01:67:22:1e:30:5d:7b:ea:
                    be:29:7c:07:58:22:37:ba:17:0b:14:c3:4b:45:0e:
                    90:4e:b5:a7:b6:7f:15:35:df:fc:31:3c:3a:67:36:
                    84:9a:03:17:65:b6:8d:fd:fc:eb:3b:c7:60:44:a4:
                    37:a8:c7:58:e6:5f:d3:d7:08:82:5a:e3:ac:7f:ec:
                    df:6a:00:3f:12:fb:62:80:51:13:b2:94:29:b4:3a:
                    fc:32:fe:8a:b5:a2:3a:97:ee:40:d5:24:b7:a0:3b:
                    30:fc:8b:dd:5b:15:7a:f4:0f:2f:7f:a3:3c:e5:6d:
                    c0:77:1e:83:f9:32:d4:98:0f:54:4a:ce:a7:8d:0f:
                    1a:67:74:ec:e2:fe:ea:47:1b:6f:d6:5c:08:0b:4b:
                    b8:84:76:ec:82:b7:1a:43:58:fa:9f:b3:50:89:18:
                    9c:fb:79:81:42:e5:c3:59:8c:ac:ec:ee:7f:5b:10:
                    30:bb:66:89:af:37:8a:64:eb:24:f6:f8:4c:e0:42:
                    d8:3e:1a:78:d8:4c:55:cf:26:eb:15:4a:e7:09:b1:
                    84:e3:89:66:57:57:4a:8e:38:23:a0:56:60:67:cd:
                    0e:47:50:b7:d9:92:36:f6:8d:75:27:96:92:f7:c1:
                    1b:05:3a:70:16:c5:aa:19:2d:53:ab:57:d3:9a:9d:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:0C:F4:1D:37:09:8A:91:A9:FC:EA:77:74:50:49:2D:CD:29:4C
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a383030303a3a2f33332d3333203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c1:48:99:ea:6f:ac:05:a3:72:f3:27:81:b3:1e:cd:86:9b:0e:
         85:81:eb:b4:9e:d0:16:79:20:6a:33:7f:27:0f:e9:c5:dd:24:
         19:08:b5:b8:68:f4:96:b7:06:39:a1:34:c2:62:19:d7:d9:9b:
         d0:7e:de:2d:26:8e:b7:dc:ac:07:3e:01:13:55:32:03:1b:30:
         54:0b:12:a3:7d:6c:ac:55:a9:84:1d:da:b9:49:fe:ab:b7:1b:
         74:b4:2e:b2:c8:9f:2b:42:e6:be:4b:2e:b7:7a:98:29:3b:4a:
         7c:36:b8:40:1e:0f:e4:4b:ea:f1:f5:9d:dc:45:99:26:62:25:
         4e:63:af:c8:68:ba:d0:cb:21:c9:da:ab:e9:ef:8f:a8:f7:b6:
         fa:42:3b:6a:a4:b2:51:22:02:43:d1:f8:c9:d5:a4:f8:ac:e1:
         bf:0f:bf:63:d3:77:0c:df:07:48:f1:51:cd:86:0a:54:5f:ca:
         e5:e3:45:9d:6b:d3:be:80:1f:98:d2:8e:ff:12:9c:59:d1:b9:
         62:d7:94:43:1b:bc:3b:df:dc:89:ba:08:1d:51:43:d7:76:49:
         9b:6e:cb:7c:e3:5e:82:cd:24:6d:55:5c:b7:65:91:43:b5:93:
         9b:8c:b0:27:43:1f:19:a1:c3:c0:21:48:d6:1f:91:7e:42:52:
         98:bc:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:19:36 2025 by rpki-client