Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33322d3332203d3e20323638373837.roa
File:                     323830343a356161383a3a2f33322d3332203d3e20323638373837.roa (raw, json)
Hash identifier:          AvpRD/IqKUTecUHDHZ0Vh4I2ydMDEuKQooVVbsS+sgk=
Subject key identifier:   AE:0D:AB:F0:DE:D6:6A:3A:A8:5E:23:65:A7:02:A7:CC:D9:26:49:61
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       0F15A100570A946240290494F6F4DF4C5FCF2D1D
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33322d3332203d3e20323638373837.roa
Signing time:             Tue 22 Jul 2025 17:40:33 +0000
ROA not before:           Tue 22 Jul 2025 17:35:33 +0000
ROA not after:            Tue 21 Jul 2026 17:40:33 +0000
asID:                     268787
IP address blocks:        2804:5aa8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:a1:00:57:0a:94:62:40:29:04:94:f6:f4:df:4c:5f:cf:2d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Jul 22 17:35:33 2025 GMT
            Not After : Jul 21 17:40:33 2026 GMT
        Subject: CN=AE0DABF0DED66A3AA85E2365A702A7CCD9264961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:0f:b1:5b:ca:7f:b6:bd:59:35:19:19:00:
                    52:9e:2f:1f:e2:a1:46:93:c7:59:96:69:39:e4:55:
                    95:df:7f:3d:08:ac:b7:bf:80:e2:ee:c5:13:20:2c:
                    a9:3d:e7:72:72:82:39:24:ce:2e:81:38:cb:2a:34:
                    39:5a:aa:77:bf:21:b3:6d:cf:35:a6:ff:0d:96:5a:
                    7d:60:7e:9f:2a:28:af:d2:69:fa:e7:75:0f:71:df:
                    1b:05:7a:fe:70:88:3a:6a:f7:5b:4b:48:53:a8:ab:
                    1c:8a:14:1b:36:49:a6:c8:c1:32:83:de:25:d3:3f:
                    5d:bc:7d:6e:8d:ad:52:ba:40:17:69:8d:10:4c:db:
                    5a:0b:a3:29:e8:a3:90:c3:21:27:89:e8:58:8f:4b:
                    02:6a:16:13:7e:c2:02:05:3a:74:35:a2:91:44:e8:
                    4f:57:2c:ac:c4:40:ed:2c:d9:54:5a:36:e1:a3:49:
                    3c:1c:ed:2f:17:3a:8e:20:d7:ed:70:42:82:c9:af:
                    77:81:d5:2b:92:a0:c0:6c:82:fa:96:2d:55:b6:68:
                    24:78:7c:ca:c9:53:3d:52:76:40:ee:c4:71:9d:60:
                    92:1f:82:1b:78:bd:c6:1f:66:29:df:12:1f:cc:5f:
                    86:bf:f2:6a:f2:3d:f6:80:bd:75:23:d6:96:9d:c3:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0D:AB:F0:DE:D6:6A:3A:A8:5E:23:65:A7:02:A7:CC:D9:26:49:61
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33322d3332203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:b4:df:ef:31:34:af:3c:bd:eb:12:90:b4:0f:60:31:5f:fa:
         ab:07:71:af:1c:fb:52:f0:68:c0:08:08:fb:e2:a1:2b:fd:21:
         67:a0:d8:05:9f:3d:cd:3f:1d:07:14:4b:89:68:2b:23:2b:43:
         5a:80:4a:ac:03:cd:09:6e:93:1d:06:be:2c:37:84:24:20:7d:
         ad:54:02:77:69:b1:0d:d9:43:24:9e:85:79:de:c2:6c:3f:a0:
         b1:f6:c6:b1:24:76:55:ce:80:75:ec:24:5d:b3:f0:75:d7:9b:
         d8:53:77:12:6a:2f:48:ff:38:b6:4e:0d:5f:a9:61:9c:ec:27:
         e0:27:12:19:b5:5a:73:40:12:74:0e:86:cd:aa:df:3a:1d:e3:
         f3:3a:1a:c5:d4:ac:08:e3:46:11:27:e9:c0:39:d3:34:83:98:
         fc:ee:ca:0b:02:08:07:0e:91:16:7a:1b:33:12:79:fb:1d:46:
         06:f8:3d:b8:e1:61:c6:ac:b1:7b:bb:7b:bb:2b:51:e6:ac:54:
         bb:be:8e:50:03:b3:b1:96:df:bd:94:68:87:dd:ba:30:f5:62:
         88:22:8c:b8:91:b9:db:b5:72:f2:c5:df:41:84:3a:57:bc:4e:
         d3:12:eb:57:3c:7f:3f:e0:de:33:f9:97:a7:f5:e2:23:4c:3d:
         01:ef:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:55 2025 by rpki-client