Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
File:                     323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (raw, json)
Hash identifier:          Z8hcM4Fs7TkbVISQhGVObSaac8C7SQ91HxK3mbC1W9Q=
Subject key identifier:   14:35:56:95:5D:CB:D9:B1:DD:07:74:6A:98:A8:5B:BD:42:94:A7:3E
Certificate issuer:       /CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
Certificate serial:       178702B9F264C5A2C84B8F369DC7FE67A25BD7B5
Authority key identifier: 22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
Signing time:             Wed 16 Jul 2025 13:51:55 +0000
ROA not before:           Wed 16 Jul 2025 13:46:55 +0000
ROA not after:            Wed 15 Jul 2026 13:51:55 +0000
asID:                     263165
IP address blocks:        2804:17b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 00:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:02:b9:f2:64:c5:a2:c8:4b:8f:36:9d:c7:fe:67:a2:5b:d7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF
        Validity
            Not Before: Jul 16 13:46:55 2025 GMT
            Not After : Jul 15 13:51:55 2026 GMT
        Subject: CN=143556955DCBD9B1DD07746A98A85BBD4294A73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:c7:d3:a5:07:4a:4c:0f:2a:5b:15:11:db:
                    95:f7:3d:72:65:51:66:9f:83:61:9a:74:e1:5f:47:
                    fc:47:67:ad:28:1b:16:2d:13:44:23:a2:36:6f:41:
                    ab:17:40:ba:0b:4a:77:74:8a:3b:ee:ab:12:c6:ae:
                    7a:91:25:d6:ae:2b:5d:99:2d:08:85:f7:77:59:19:
                    dc:7d:61:91:ef:ea:74:f2:d3:40:bf:a7:52:94:5a:
                    b1:06:6c:f3:18:d2:52:97:cd:ad:6e:06:23:15:97:
                    bf:77:a5:8a:80:90:94:2b:f2:05:33:16:97:d2:14:
                    10:d6:2d:3c:58:bd:07:6a:57:15:56:e0:27:1f:9c:
                    39:99:af:e4:d3:59:3b:f0:5a:87:f5:3a:2d:51:bc:
                    22:78:3f:e0:23:f2:b7:41:07:85:e5:6a:5b:72:2b:
                    40:97:79:2a:0e:34:69:01:39:f3:09:d3:39:b6:03:
                    97:f0:79:91:78:25:f4:72:29:b4:55:30:44:78:e4:
                    d9:c7:2c:c6:b3:57:1d:52:42:c3:fd:a2:03:fb:e9:
                    7c:fd:6d:03:a9:9f:41:92:e5:f2:8c:d9:79:6e:ab:
                    2a:35:15:fa:73:46:44:85:cb:de:99:5a:ec:ab:c0:
                    b0:9e:d7:fa:42:33:8a:ff:de:e2:b6:dc:04:8e:47:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:56:95:5D:CB:D9:B1:DD:07:74:6A:98:A8:5B:BD:42:94:A7:3E
            X509v3 Authority Key Identifier:
                keyid:22:9B:D9:74:F9:36:9B:C3:EF:DE:31:82:C8:B3:AA:2D:D6:CD:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/229BD974F9369BC3EFDE3182C8B3AA2DD6CDA4BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:96:60:2f:bc:e2:44:93:0d:f5:b0:a5:c3:81:5c:76:94:
         2b:a3:e9:93:a2:1c:81:be:12:69:59:ad:39:99:45:2a:93:4f:
         91:74:28:3a:48:57:48:4e:44:ef:48:de:06:e4:c3:2e:7f:a5:
         cb:c7:9d:99:0d:a8:18:3e:03:78:b9:90:a1:11:9d:fd:6e:f8:
         6f:98:e9:fb:6c:6e:7b:47:c4:9b:b8:e8:92:cc:3a:73:cc:63:
         13:71:c2:11:8b:e8:22:95:35:55:a5:75:fa:ff:f5:73:e7:34:
         38:30:3b:b8:47:86:f4:c1:2d:ef:ae:c3:5e:e0:0d:c5:8a:fb:
         da:5c:23:3a:75:9b:04:e1:cb:74:64:fa:f4:9d:90:1f:7e:44:
         90:41:e2:97:af:68:9c:ad:3e:c0:c3:3d:bd:d8:55:de:c1:24:
         64:80:88:cf:e6:9a:48:3e:56:64:ff:45:fe:21:1f:a7:a7:1c:
         16:79:d0:31:ca:74:6d:34:10:53:65:22:fc:0b:86:77:4d:05:
         22:dd:09:05:1b:22:db:e6:45:2a:c0:67:c0:71:1c:89:8d:4b:
         de:15:61:b5:52:63:32:8e:22:c3:24:4c:6d:ca:ff:64:5c:df:
         ea:d5:d9:df:b2:c8:a4:b1:66:64:01:d5:e2:50:4b:53:bf:47:
         cc:36:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:20:40 2025 by rpki-client