Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a3a2f33322d3332203d3e20323638343831.roa
File:                     323830343a353164633a3a2f33322d3332203d3e20323638343831.roa (raw, json)
Hash identifier:          00QJ3I42dYVzvaWXpwRL8Df1ywFPGLfwTFDA3Fg4JDI=
Subject key identifier:   8D:E4:D9:3E:C9:D1:D7:ED:7D:25:5C:C4:10:6D:A5:A4:5E:66:02:B3
Certificate issuer:       /CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
Certificate serial:       3BE9E8843B881C78879D8AD331799A9E39E99E
Authority key identifier: 85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a3a2f33322d3332203d3e20323638343831.roa
Signing time:             Fri 11 Jul 2025 14:14:40 +0000
ROA not before:           Fri 11 Jul 2025 14:09:40 +0000
ROA not after:            Fri 10 Jul 2026 14:14:40 +0000
asID:                     268481
IP address blocks:        2804:51dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl
                          rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e9:e8:84:3b:88:1c:78:87:9d:8a:d3:31:79:9a:9e:39:e9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85154D17EB56420277A0D6D3168ECEB7B88CD654
        Validity
            Not Before: Jul 11 14:09:40 2025 GMT
            Not After : Jul 10 14:14:40 2026 GMT
        Subject: CN=8DE4D93EC9D1D7ED7D255CC4106DA5A45E6602B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:86:1a:33:0b:dc:26:03:41:2c:e4:e0:54:
                    66:96:a4:a0:7a:3d:0d:be:ae:fc:63:11:5c:d9:cf:
                    50:d9:6a:65:08:d7:3a:96:6a:05:b8:d1:28:82:f0:
                    41:45:e1:5f:6a:47:50:d3:7e:96:d8:bb:ba:c6:77:
                    d0:b6:43:e2:10:98:f6:f7:28:6b:ab:74:22:93:3e:
                    ae:00:74:bc:ea:1d:60:85:ea:27:81:d0:4e:c6:fc:
                    50:8f:a1:35:69:95:8a:84:d4:b8:01:8a:a0:db:55:
                    95:f4:b3:4b:c5:ba:e0:20:e6:77:cf:f1:3e:16:0b:
                    bc:f5:1c:3e:bf:f4:0c:f1:04:33:57:fb:ed:31:61:
                    ea:b4:28:a7:be:0e:cc:fb:35:04:0e:a5:08:65:62:
                    94:95:af:da:5e:aa:45:3f:5d:62:f0:98:e0:17:3b:
                    3d:09:cb:22:10:b5:22:ca:6f:c4:7b:7f:11:a9:a8:
                    92:9c:dc:91:68:08:3f:d1:7c:54:28:76:c7:ab:b4:
                    e6:49:80:81:9d:1e:66:02:88:95:8b:e1:0b:a6:b0:
                    64:93:fa:fd:8f:63:37:d8:6d:f4:7e:76:68:68:7d:
                    bc:ce:72:a8:38:64:fd:a9:ef:e9:c9:d3:bd:b4:5c:
                    0e:d1:97:b5:24:61:3d:0e:72:c5:e4:3c:2e:d7:ee:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:D9:3E:C9:D1:D7:ED:7D:25:5C:C4:10:6D:A5:A4:5E:66:02:B3
            X509v3 Authority Key Identifier:
                keyid:85:15:4D:17:EB:56:42:02:77:A0:D6:D3:16:8E:CE:B7:B8:8C:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/85154D17EB56420277A0D6D3168ECEB7B88CD654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85154D17EB56420277A0D6D3168ECEB7B88CD654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu5pVLT3Swaqv3Vujd5r2hJqsAeFnvYfiesU8FSCe4HP/0/323830343a353164633a3a2f33322d3332203d3e20323638343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:a7:ad:2c:2e:59:e6:20:eb:bc:4d:ea:85:e4:02:88:a1:c9:
         41:2f:a8:c8:34:1d:60:c2:37:d1:30:11:28:f3:6f:69:8d:11:
         5d:9d:e2:70:b4:df:51:9b:71:d2:78:39:c4:8a:a6:8f:d9:72:
         04:72:c0:fb:51:d9:f0:fb:d2:b7:3c:79:e5:ac:90:3a:71:ff:
         93:cf:06:74:7c:a5:b0:41:fb:18:48:af:8a:8d:29:25:c1:6e:
         51:1a:fa:66:20:4b:5d:f7:0b:96:2b:c2:62:17:d8:9f:6f:15:
         19:9e:70:38:06:56:9e:57:7e:f7:b0:e9:d2:b4:0f:5c:5d:29:
         be:32:80:38:17:73:b4:47:44:02:8b:77:fa:87:31:d3:68:01:
         40:ae:36:af:4a:b4:34:b7:93:d2:75:6d:c7:ff:9f:27:71:31:
         6b:e1:5b:07:ba:ee:4f:54:8f:30:03:29:f3:49:b5:c7:a1:f4:
         44:33:18:fd:66:04:cc:56:f1:6b:aa:f4:42:68:fd:ae:88:16:
         e1:fa:2c:40:bb:99:34:3c:10:46:a7:52:e0:7e:c9:17:8b:c1:
         f5:90:5d:a1:52:de:18:4e:36:b8:c6:c0:33:ce:fb:03:ed:ca:
         7b:46:1c:8e:be:e8:87:6f:2c:d2:4f:a2:5f:d1:be:57:72:a8:
         03:5a:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:04:22 2025 by rpki-client