Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa
File:                     323830343a356161383a3a2f33332d3333203d3e20323638373837.roa (raw, json)
Hash identifier:          Fepd5mopX2/y9xvcKIY/FTdayfavykVO4/pitAOQclc=
Subject key identifier:   39:57:11:A2:C2:E8:10:96:AB:EA:43:30:A3:D3:13:29:EA:9E:AE:FD
Certificate issuer:       /CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
Certificate serial:       0ADD798812E98AC9D4520E3927AA504DD03668D9
Authority key identifier: E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa
Signing time:             Tue 22 Jul 2025 17:40:33 +0000
ROA not before:           Tue 22 Jul 2025 17:35:33 +0000
ROA not after:            Tue 21 Jul 2026 17:40:33 +0000
asID:                     268787
IP address blocks:        2804:5aa8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl
                          rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 22:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dd:79:88:12:e9:8a:c9:d4:52:0e:39:27:aa:50:4d:d0:36:68:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4
        Validity
            Not Before: Jul 22 17:35:33 2025 GMT
            Not After : Jul 21 17:40:33 2026 GMT
        Subject: CN=395711A2C2E81096ABEA4330A3D31329EA9EAEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:5d:35:e5:92:9c:f2:09:4a:3f:63:5c:c7:
                    bb:09:4c:73:52:50:5f:d7:62:a5:0c:00:41:34:27:
                    ca:54:84:2e:ce:41:12:53:90:86:ef:0b:cf:8d:11:
                    3f:a6:c1:ec:6b:28:da:9e:e9:41:8f:bb:89:a8:ce:
                    f0:41:2b:40:84:79:fa:2c:46:91:93:4e:cb:fd:2f:
                    ac:b2:ba:15:fd:74:e5:46:49:fd:f9:9a:1b:9d:c3:
                    cf:66:1a:3e:38:d6:23:84:30:1c:29:75:01:36:a0:
                    68:79:7b:c3:c3:95:30:d1:f6:04:10:08:1d:2e:60:
                    16:a3:b2:0b:8d:5e:78:cb:ff:df:27:90:91:e9:3c:
                    22:d8:cc:22:76:7d:b2:f7:bc:41:7a:56:a1:3a:b4:
                    83:88:dc:c1:d5:1e:bb:14:72:a7:e7:b6:4a:df:20:
                    49:0f:f0:88:a1:61:10:78:a6:c6:d9:4c:ab:d6:c1:
                    c5:e7:72:e0:b0:07:37:0e:a7:92:61:b9:88:b1:50:
                    d9:5a:81:76:e3:3f:c2:76:f7:b0:b3:f0:57:7b:6a:
                    1e:3c:b2:54:be:0d:ee:6f:14:aa:71:20:2c:fb:05:
                    f6:11:c8:78:0c:35:9b:5d:8f:58:45:cf:09:94:7b:
                    7f:09:3f:f4:a3:f4:5b:55:c9:1d:c7:e9:d7:d0:ce:
                    5b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:11:A2:C2:E8:10:96:AB:EA:43:30:A3:D3:13:29:EA:9E:AE:FD
            X509v3 Authority Key Identifier:
                keyid:E5:16:A2:D9:41:B6:2A:BE:AE:8B:B7:B1:59:4A:0D:1B:AF:47:58:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E516A2D941B62ABEAE8BB7B1594A0D1BAF4758B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYNT8FnvoLH7gXS3z58eW8ZXTkuV5owtmxuivMQmonPY/1/323830343a356161383a3a2f33332d3333203d3e20323638373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa8::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:56:25:e1:96:7f:5a:42:74:dc:9f:91:00:32:23:a6:ec:34:
         57:63:ea:9e:f6:8d:13:66:b2:fa:3d:52:69:1b:ef:3b:fe:37:
         18:0c:4f:35:1b:3d:94:1c:f0:13:6d:8b:db:f6:c3:f1:32:65:
         f0:29:b8:96:a8:4b:a0:b2:1a:ad:c8:fd:13:47:c5:9a:17:cb:
         41:4f:b7:f0:cd:11:1d:09:7f:6e:d3:98:58:76:f9:4c:62:57:
         74:22:c7:22:27:d5:a2:41:1b:d8:c5:bd:30:ad:90:a2:60:92:
         86:ff:0a:87:0a:ed:be:5b:b2:b7:25:9f:3e:2c:64:b7:cc:a6:
         22:7d:19:c0:64:79:c7:7e:ea:c2:a5:9c:27:46:01:02:e5:4a:
         10:a2:c7:ed:e8:57:1d:4a:4e:18:a5:4b:73:4c:f4:5c:73:66:
         1e:71:df:a0:a1:65:cc:94:4b:02:25:53:2f:fa:d8:28:e7:e2:
         3e:bd:13:7a:49:88:bf:9a:26:ef:6e:ed:52:46:09:c6:2d:a9:
         b1:de:3d:36:98:57:a8:54:9c:0a:c2:54:57:d7:2e:2f:5a:ca:
         c4:e8:c2:4f:db:25:87:69:cf:41:b6:32:9c:95:bb:ed:2c:b0:
         2e:88:64:67:ec:a2:a9:98:ff:07:77:4e:4e:5c:b3:9f:f0:39:
         37:22:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:54:03 2025 by rpki-client