Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33322d3334203d3e20323638303738.roa
File:                     323830343a353761383a3a2f33322d3334203d3e20323638303738.roa (raw, json)
Hash identifier:          h2hguY2KXrSQC7kBwhrHvht0C52/pbxNOoPVEGKNcCc=
Subject key identifier:   95:97:D3:A0:DE:3D:EE:D7:DD:D6:F1:A8:15:96:F4:B9:7B:99:D8:64
Certificate issuer:       /CN=67F27968B2623AE45716B41A7C397D600B3D2686
Certificate serial:       6DEF9E7F6A68CCC87BB7F30C7FEF3CF4A8DBFE99
Authority key identifier: 67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33322d3334203d3e20323638303738.roa
Signing time:             Wed 27 Aug 2025 18:26:31 +0000
ROA not before:           Wed 27 Aug 2025 18:21:31 +0000
ROA not after:            Wed 26 Aug 2026 18:26:31 +0000
asID:                     268078
IP address blocks:        2804:57a8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.crl
                          rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ef:9e:7f:6a:68:cc:c8:7b:b7:f3:0c:7f:ef:3c:f4:a8:db:fe:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67F27968B2623AE45716B41A7C397D600B3D2686
        Validity
            Not Before: Aug 27 18:21:31 2025 GMT
            Not After : Aug 26 18:26:31 2026 GMT
        Subject: CN=9597D3A0DE3DEED7DDD6F1A81596F4B97B99D864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:51:2f:22:6b:a6:27:1a:e5:bd:81:c2:1c:a3:
                    5d:e0:51:08:e7:bf:48:23:f4:8d:92:51:31:1e:80:
                    56:60:22:d8:8e:38:80:4a:29:ed:a8:c1:cd:6d:ac:
                    0a:d3:a4:dc:98:a2:82:65:9c:21:1c:5c:33:fa:c8:
                    62:2d:0e:8d:55:f2:3e:b8:c8:dd:42:64:e7:21:df:
                    94:8f:a9:9c:a7:68:48:76:04:b8:a4:ee:a5:f2:b9:
                    54:ae:db:13:4d:02:52:db:98:39:c8:d3:c4:6b:76:
                    e0:e8:ca:1a:1b:d2:ed:79:13:65:66:61:86:f9:2f:
                    3b:09:34:03:b2:cf:d1:eb:4c:18:e5:bc:3a:be:ca:
                    bd:8d:f0:0c:17:cd:c0:9f:f1:93:4e:d1:e9:5f:39:
                    c9:f9:4f:6a:f3:7d:5f:25:03:d8:e2:66:d9:0a:db:
                    66:2d:aa:9c:a5:b9:c1:39:7b:a5:3d:f2:05:53:46:
                    6e:4c:1f:a0:00:0f:9e:5b:ee:89:54:7e:4c:3d:23:
                    a2:bd:3f:03:a1:cc:5e:2b:0b:f1:35:a9:25:67:fd:
                    7e:10:d3:c0:47:93:42:3a:2d:c1:9f:6c:dd:af:58:
                    e6:87:75:03:14:03:fe:c4:fd:45:e1:b8:d3:15:cf:
                    2a:be:1e:1d:bc:ad:73:73:2b:1a:4b:43:a3:d9:f6:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:97:D3:A0:DE:3D:EE:D7:DD:D6:F1:A8:15:96:F4:B9:7B:99:D8:64
            X509v3 Authority Key Identifier:
                keyid:67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/323830343a353761383a3a2f33322d3334203d3e20323638303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:71:2f:4f:8b:cd:ec:0c:77:32:65:e6:5a:15:9b:45:8a:16:
         fd:9c:2b:0d:8c:48:23:23:19:fd:24:68:37:e1:e9:bb:e9:35:
         21:a0:63:37:99:e3:ba:63:5f:cf:97:bd:e0:7e:bf:8c:1e:47:
         5e:48:03:fc:ff:c0:96:42:bb:bf:e8:f0:0b:51:ea:68:bf:6f:
         22:ba:f6:07:69:5c:fc:f6:53:21:d3:d1:68:ec:6f:14:8c:eb:
         cc:fd:55:1b:f2:cb:a6:cc:54:26:02:76:8c:5f:35:71:5a:f4:
         34:98:b4:bf:a5:c3:7e:10:f9:8d:60:7b:4a:5f:86:d6:bc:91:
         a7:1d:64:93:22:e9:18:c8:0c:1e:bf:1e:4f:d2:85:91:26:26:
         29:d1:e5:43:32:0b:85:44:11:49:87:db:1f:b4:87:c8:d2:5b:
         70:e9:19:c4:a7:81:d6:c1:c0:92:b5:92:80:98:79:2b:19:0f:
         d9:bc:f0:db:dd:99:d5:ac:34:37:2a:4d:db:78:1f:c5:cb:e2:
         c4:24:e1:d4:8e:91:2d:90:6d:13:5c:ae:1e:4f:48:36:b1:42:
         90:04:f0:b0:04:cb:14:70:69:45:f0:a0:3b:6c:6f:a5:d0:64:
         53:82:c6:43:ea:68:22:81:a1:f3:3a:15:2c:9e:5c:18:d0:15:
         ca:2a:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:45:06 2025 by rpki-client