Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33322d3332203d3e20323730383738.roa (raw, json)
Hash identifier:          j+93DMfi8Wtmu5QMvmKDk6VVbcJzya6/502jhRGY4zY=
Subject key identifier:   9D:5E:F5:69:03:96:2F:99:C0:2C:D2:33:BF:27:F5:E6:02:0C:86:66
Certificate issuer:       /CN=F323C8A2CD672636B55EC43AB298AEB42D849558
Certificate serial:       67D0E7A2B868AD1E182456E0C8E8117FCC71BC
Authority key identifier: F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa
Signing time:             Tue 02 Sep 2025 22:20:02 +0000
ROA not before:           Tue 02 Sep 2025 22:15:02 +0000
ROA not after:            Tue 01 Sep 2026 22:20:02 +0000
asID:                     270878
IP address blocks:        2804:72d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 06:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d0:e7:a2:b8:68:ad:1e:18:24:56:e0:c8:e8:11:7f:cc:71:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F323C8A2CD672636B55EC43AB298AEB42D849558
        Validity
            Not Before: Sep  2 22:15:02 2025 GMT
            Not After : Sep  1 22:20:02 2026 GMT
        Subject: CN=9D5EF56903962F99C02CD233BF27F5E6020C8666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:24:2b:74:64:13:45:5f:f4:f4:50:a4:3f:
                    13:04:6c:b7:86:7f:85:59:a3:c1:7e:a1:96:42:ee:
                    d9:5b:9f:36:41:f0:4d:46:33:f6:46:a0:51:7c:f8:
                    8d:8b:44:60:6c:2c:a2:7a:bf:2b:eb:84:a7:19:a3:
                    c7:64:62:d0:c2:14:24:91:fd:01:ca:1a:86:ab:a9:
                    40:7b:dd:69:27:ef:67:90:ed:dd:ca:b0:6e:d3:78:
                    31:d3:97:d5:81:e7:3a:9e:5c:4e:55:79:78:19:14:
                    06:c4:ef:8f:6d:10:3b:b1:a1:d6:fa:3d:d9:89:48:
                    86:cb:68:a3:3f:0a:10:16:1a:a8:53:ef:5a:60:68:
                    7d:13:be:c4:4b:16:54:ca:4e:05:c4:a1:7b:29:75:
                    14:c2:bd:27:90:64:98:14:21:2a:62:5c:ab:71:a8:
                    26:84:c1:34:67:76:33:99:08:b7:10:31:25:ad:ee:
                    ba:95:a4:5f:4d:ab:97:2a:cc:76:47:95:38:88:11:
                    d3:c4:65:4e:1f:e2:c0:ea:97:25:40:9e:3b:b5:44:
                    c4:b7:c2:34:69:f1:1c:10:be:2a:b4:14:5c:03:e8:
                    d6:fb:cc:e4:b0:bc:27:fd:b5:a1:af:ce:c6:b1:27:
                    35:59:8b:44:fa:f4:2a:a6:0b:83:ba:76:eb:a0:12:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5E:F5:69:03:96:2F:99:C0:2C:D2:33:BF:27:F5:E6:02:0C:86:66
            X509v3 Authority Key Identifier:
                keyid:F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33322d3332203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:9c:1d:7d:bf:a6:5a:4d:d2:22:18:0f:14:b6:a1:3e:30:
         be:8b:d1:bf:2d:50:52:bf:37:b0:39:21:d7:38:b8:e5:36:d5:
         bb:e6:a9:7d:54:21:f7:7c:ab:7d:ed:ca:22:b1:9f:c1:d5:70:
         08:92:c2:e4:dd:1f:f8:50:5f:62:3c:5b:96:4f:fe:40:63:3f:
         65:50:3e:d9:d7:60:c9:9b:9c:1d:4d:24:15:9d:ed:0f:db:bc:
         9b:92:7d:89:aa:99:f6:9b:f7:8a:2a:8e:6c:3e:cc:9f:7d:29:
         59:42:3d:98:cb:19:fd:ca:3d:e0:c9:3e:56:b3:07:91:93:be:
         79:eb:27:95:23:48:67:9a:df:b7:26:6d:9f:ed:a1:84:c2:aa:
         ee:38:63:69:ba:30:ea:e8:a9:95:d5:31:67:bb:de:ef:6b:a4:
         04:3c:9f:9e:e8:3e:4d:4a:99:2c:57:63:19:f3:bc:dc:9e:d9:
         9b:68:18:0a:db:be:1f:df:f3:83:72:73:54:ff:1c:fc:eb:2f:
         01:b1:4a:b0:f8:41:56:bf:af:0f:bb:16:2e:96:61:c6:7d:cb:
         20:48:30:82:a9:7f:8f:d7:2b:25:56:e5:8f:af:27:53:39:57:
         d2:74:72:38:b5:e4:c0:07:c1:9d:93:f7:f7:3f:80:e9:55:f5:
         5d:a2:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:22:26 2025 by rpki-client