Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa
File:                     323830343a393464343a3a2f33322d3438203d3e20323734343831.roa (raw, json)
Hash identifier:          inLQeatPmyxVwLPNqXgneYOuYgV5ADdg6YTKVQdHAR8=
Subject key identifier:   EB:A0:0C:BF:9B:4F:99:3E:2A:33:79:EE:E6:FB:32:DF:1F:8E:4E:1F
Certificate issuer:       /CN=69943936583BCE4BE3D1C799C66C2573F8DE2F99
Certificate serial:       2040A5E1B00DB464F7235C953CE3E6337F1BBB16
Authority key identifier: 69:94:39:36:58:3B:CE:4B:E3:D1:C7:99:C6:6C:25:73:F8:DE:2F:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69943936583BCE4BE3D1C799C66C2573F8DE2F99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa
Signing time:             Mon 14 Jul 2025 13:00:55 +0000
ROA not before:           Mon 14 Jul 2025 12:55:55 +0000
ROA not after:            Mon 13 Jul 2026 13:00:55 +0000
asID:                     274481
IP address blocks:        2804:94d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/69943936583BCE4BE3D1C799C66C2573F8DE2F99.crl
                          rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/69943936583BCE4BE3D1C799C66C2573F8DE2F99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69943936583BCE4BE3D1C799C66C2573F8DE2F99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 07:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:40:a5:e1:b0:0d:b4:64:f7:23:5c:95:3c:e3:e6:33:7f:1b:bb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69943936583BCE4BE3D1C799C66C2573F8DE2F99
        Validity
            Not Before: Jul 14 12:55:55 2025 GMT
            Not After : Jul 13 13:00:55 2026 GMT
        Subject: CN=EBA00CBF9B4F993E2A3379EEE6FB32DF1F8E4E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:af:09:bb:18:c2:67:b6:af:f0:ba:c0:ae:
                    70:12:ff:6b:28:51:08:3d:e2:10:53:15:eb:33:2e:
                    0c:00:6c:3a:2c:cc:05:91:e5:cc:32:e9:25:97:b2:
                    58:7e:40:b8:5a:b6:e2:19:ff:84:fe:fd:8c:c2:0a:
                    9a:90:68:da:e4:de:5b:2b:96:0d:94:60:60:ec:d7:
                    69:63:02:df:a4:39:2e:fa:5c:32:f4:3a:42:66:7f:
                    96:88:46:b0:e6:3d:58:c8:29:73:ac:c5:79:3d:28:
                    7e:c2:56:c2:eb:27:59:19:52:38:e9:3f:9e:e4:f0:
                    b4:ac:49:df:02:db:b4:34:b2:76:e8:6f:11:b2:88:
                    5b:29:0e:a1:66:e7:de:47:09:f0:37:3a:c8:91:3a:
                    17:92:56:f8:25:15:84:1d:81:d4:2f:1e:f5:6f:8f:
                    05:11:cf:d0:db:e2:5e:cd:26:64:76:71:94:ce:87:
                    5c:98:87:93:5f:6c:18:74:f7:1a:3e:44:bf:6a:91:
                    d5:4f:a6:71:c4:5e:de:ce:22:e8:b4:a1:28:53:bd:
                    d7:9d:e6:bf:94:26:ab:87:55:db:62:21:d0:15:d3:
                    0e:5a:ed:b3:a2:4b:6a:33:be:79:d5:86:fc:0f:8f:
                    aa:92:0c:31:9a:ad:ae:4c:92:6b:a3:83:d2:dc:c2:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A0:0C:BF:9B:4F:99:3E:2A:33:79:EE:E6:FB:32:DF:1F:8E:4E:1F
            X509v3 Authority Key Identifier:
                keyid:69:94:39:36:58:3B:CE:4B:E3:D1:C7:99:C6:6C:25:73:F8:DE:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/69943936583BCE4BE3D1C799C66C2573F8DE2F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69943936583BCE4BE3D1C799C66C2573F8DE2F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/66aCU1rAmAVDRT3F7ek9mhShNkhmY7Lmef77Cj3G9KRD/0/323830343a393464343a3a2f33322d3438203d3e20323734343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:7d:45:71:4f:1f:c1:46:cf:df:88:0c:4a:f6:50:3f:c7:
         a8:53:19:0f:26:7e:ff:d4:6a:18:00:8b:50:db:ce:bb:15:f3:
         a3:f3:af:b7:53:5f:ab:2f:3f:2d:12:63:9c:2a:62:d3:4d:ef:
         fd:d1:d7:9b:75:3c:3d:53:fc:f0:64:0f:46:14:3b:ac:ca:ff:
         ca:06:fb:45:13:6d:9f:9f:bd:c3:2b:5c:7f:dc:76:41:b6:21:
         66:bf:7a:36:31:17:9f:db:f4:49:29:2c:1e:86:90:ec:08:35:
         aa:39:3a:84:e5:4c:20:3f:c8:2b:dd:cc:78:b2:39:30:fb:3a:
         a7:b0:0f:59:34:73:2b:16:00:1c:e4:0c:1d:95:00:3d:c8:f5:
         38:8c:14:fe:03:33:3c:74:0c:df:36:9c:33:46:ed:d8:2a:73:
         ec:38:1b:89:b7:53:77:75:e0:f2:ed:fe:68:9e:2c:29:2a:dd:
         f3:38:78:b8:97:73:7b:cd:2a:97:06:03:9c:aa:bc:92:26:7a:
         80:67:9e:e6:10:90:3b:a2:eb:74:98:69:ae:dd:23:fb:9a:07:
         7f:24:88:22:a1:00:f7:60:c8:d3:04:e0:0c:ae:83:92:8f:65:
         19:aa:42:fd:2b:8d:8b:78:23:d8:e9:68:55:f4:41:70:96:74:
         54:51:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:16 2025 by rpki-client