Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa
File:                     323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa (raw, json)
Hash identifier:          J0X4Lxkg1Ma2sq9hJBBPSpskfb6r0Q8VjiKavjo/KbY=
Subject key identifier:   DD:AD:74:83:98:32:3E:4F:8A:58:F4:9F:FA:12:ED:C0:BF:43:3E:AE
Certificate issuer:       /CN=F323C8A2CD672636B55EC43AB298AEB42D849558
Certificate serial:       27D501916431362823F098921F4CD4EEB5B711FC
Authority key identifier: F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa
Signing time:             Tue 02 Sep 2025 22:20:03 +0000
ROA not before:           Tue 02 Sep 2025 22:15:03 +0000
ROA not after:            Tue 01 Sep 2026 22:20:03 +0000
asID:                     270878
IP address blocks:        2804:72d4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 11:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d5:01:91:64:31:36:28:23:f0:98:92:1f:4c:d4:ee:b5:b7:11:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F323C8A2CD672636B55EC43AB298AEB42D849558
        Validity
            Not Before: Sep  2 22:15:03 2025 GMT
            Not After : Sep  1 22:20:03 2026 GMT
        Subject: CN=DDAD748398323E4F8A58F49FFA12EDC0BF433EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:da:a9:a7:9b:be:3c:0c:50:0e:b4:1d:8a:
                    46:71:40:c7:af:f6:82:c8:1a:d0:1f:f9:37:53:a5:
                    f1:ef:bc:bb:35:b6:f7:e1:84:30:ea:51:c6:87:7b:
                    a4:77:6c:4d:76:af:da:96:a1:25:d8:1c:d2:8e:5a:
                    b8:35:45:43:a1:d3:61:ef:45:7b:10:db:3e:6d:7d:
                    d7:fe:f3:9a:bd:1a:f6:91:51:c8:da:c5:f2:49:35:
                    cd:38:37:12:a9:f3:18:b5:1b:ad:fc:e6:d3:a1:3a:
                    23:95:07:fd:26:42:9b:d1:16:2c:7d:d6:2f:11:ed:
                    c7:1e:2c:53:72:3a:fd:11:70:d4:a1:8d:0f:73:86:
                    9f:c1:aa:52:48:f0:05:27:5f:41:7f:05:55:2b:d5:
                    ab:03:bf:ef:bd:6e:75:c3:88:f3:b1:df:f7:29:7c:
                    72:4d:8d:27:dc:9a:03:29:f0:ff:f3:29:15:cd:79:
                    44:28:99:2c:31:82:41:71:b7:96:27:17:63:c9:32:
                    d9:db:15:c6:ac:af:6e:e9:72:82:4b:d2:ad:61:de:
                    25:30:0d:24:8d:0c:c9:14:c6:cd:2b:1c:39:40:b7:
                    51:e3:8f:17:0f:8c:21:11:e5:34:e7:24:b1:12:bf:
                    05:df:b1:0d:25:86:f4:79:c4:f4:3e:cb:04:54:92:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:74:83:98:32:3E:4F:8A:58:F4:9F:FA:12:ED:C0:BF:43:3E:AE
            X509v3 Authority Key Identifier:
                keyid:F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a383030303a3a2f33332d3333203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:28:42:f4:e2:c2:86:3d:4d:d4:b8:fc:3d:eb:81:49:d5:
         9c:eb:59:4c:a4:ee:2a:cc:e8:26:e0:fe:60:ac:b2:ff:1c:cd:
         80:81:00:cd:b0:70:9d:da:22:4d:52:c6:67:48:ba:aa:d8:4f:
         dd:ce:bf:0a:99:fd:80:c3:ad:aa:55:c3:d2:9b:44:17:c8:36:
         57:9c:95:77:53:bd:21:33:f2:34:98:41:97:b1:79:f1:1f:c6:
         e8:b0:71:b5:fc:d8:0b:f8:b1:35:8c:a8:93:df:bc:1f:3f:58:
         f5:23:2a:dd:be:2d:bb:04:7b:2a:cd:f6:bf:c6:9b:b3:df:7f:
         86:5c:8e:64:e9:17:8a:cb:5f:6b:e0:51:ac:25:10:da:71:77:
         0a:b7:01:85:8f:52:f0:0e:f6:05:c9:89:b4:a0:5c:c9:a7:6e:
         90:fc:d9:ac:30:8e:3b:98:b6:0f:7b:56:18:77:83:6f:7d:2c:
         b6:2b:d1:0a:58:bc:db:17:91:5c:8f:7f:19:d3:32:3f:f9:5f:
         0d:7e:f1:75:e5:19:23:a8:9e:35:69:45:52:98:22:47:0a:fa:
         2b:c0:2d:48:be:4c:77:7c:ec:06:08:89:b0:84:02:38:58:69:
         38:18:7b:b2:1e:2d:e4:7c:25:8a:92:ff:da:46:b7:0d:24:17:
         e3:cc:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:44:58 2025 by rpki-client