Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
File:                     323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa (raw, json)
Hash identifier:          JyY4x4XtUSmoCn6yuZ7p22orsJ13WCdvIld7Qn1DvJk=
Subject key identifier:   D3:76:C9:7D:FE:4A:51:CA:7B:2D:1D:66:D4:5D:44:18:90:E4:2B:D0
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       4BBCBCE50727570525EE648E7CFA1227C492AFB6
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
Signing time:             Tue 14 Oct 2025 14:09:21 +0000
ROA not before:           Tue 14 Oct 2025 14:04:21 +0000
ROA not after:            Tue 13 Oct 2026 14:09:21 +0000
asID:                     273467
IP address blocks:        2804:8f18:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:bc:e5:07:27:57:05:25:ee:64:8e:7c:fa:12:27:c4:92:af:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Oct 14 14:04:21 2025 GMT
            Not After : Oct 13 14:09:21 2026 GMT
        Subject: CN=D376C97DFE4A51CA7B2D1D66D45D441890E42BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:3e:b8:0d:d8:84:42:83:67:e9:d8:dd:d7:
                    2a:2c:8f:77:4f:a4:01:7d:ee:0a:7b:7e:e5:f1:11:
                    fd:29:62:53:cd:ff:88:a9:b1:ea:7c:3d:25:c8:e9:
                    35:6f:30:bd:f1:24:c2:65:39:c3:6e:f6:69:bb:b8:
                    2c:a0:b2:d4:52:2f:65:81:50:39:dd:16:f6:9b:e1:
                    b4:52:33:f9:1c:be:26:e0:54:d3:68:bb:b5:36:2f:
                    ab:7d:9e:7b:65:bf:17:01:b8:bc:71:2c:5f:d7:d5:
                    4c:ce:23:14:55:5b:bb:e0:09:ec:79:5e:78:94:ba:
                    31:af:57:a8:84:d7:12:f1:04:d7:b2:fe:4b:89:6e:
                    b5:0b:09:5f:84:fd:fc:3f:f0:99:3a:b7:7e:5c:d0:
                    db:a1:10:6f:92:1f:9d:89:10:43:d7:61:2f:07:1b:
                    fa:24:e3:53:69:15:ec:5f:e7:40:35:4d:9c:e5:da:
                    79:35:3c:37:f4:1f:36:a6:67:ad:a2:bb:77:ae:c4:
                    44:61:76:04:c3:4a:2d:fb:b4:49:7f:24:7b:da:2d:
                    a6:e1:e2:0c:bd:3d:ce:9d:0a:6b:f7:d7:fe:5c:a8:
                    e2:89:ec:2b:e1:92:b6:9e:27:2e:0e:bf:7d:1f:bf:
                    60:d2:41:68:58:24:ac:0c:8d:4a:df:b1:69:d2:fe:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:76:C9:7D:FE:4A:51:CA:7B:2D:1D:66:D4:5D:44:18:90:E4:2B:D0
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         21:72:43:60:7d:8b:d8:7d:53:72:a1:63:65:86:a0:04:66:01:
         60:36:fe:08:3d:d1:1e:82:97:56:5d:97:38:fd:2d:c6:70:06:
         1f:93:f2:4e:0f:50:4a:f2:a5:fb:1c:4e:13:71:ea:3b:f4:f0:
         89:1d:bd:7c:da:4c:77:e4:da:8d:bc:5a:38:4d:f0:cb:8f:a3:
         bb:2c:89:7a:61:6c:0a:57:29:7e:66:91:bd:b6:be:e5:60:dc:
         89:88:28:fd:1a:cf:d6:1d:c9:3a:d5:7d:a0:fb:e3:98:a4:12:
         0c:57:15:fa:04:ae:19:b5:28:45:74:79:d3:62:ea:01:24:a8:
         42:7c:7e:be:60:2f:23:fe:50:da:ce:00:10:e4:ea:3d:7e:13:
         a3:40:b5:d5:94:c3:21:08:83:b2:e6:4c:0e:ed:58:75:72:2f:
         71:b1:45:96:ae:1c:5d:53:9d:88:2a:a5:1e:7b:0a:59:24:9d:
         ce:8b:ff:b9:59:f4:2c:77:fe:9f:0e:22:22:22:dc:fe:d6:64:
         a4:d3:23:ad:e0:47:4d:e6:6f:58:e1:57:30:54:95:3b:57:5c:
         87:0d:6f:8c:bc:55:e1:01:b1:d6:a2:c8:7b:87:83:db:4b:aa:
         77:c6:dc:b7:96:16:e4:f5:ca:75:48:f8:bc:f2:dd:f4:b5:0a:
         bb:ea:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:47 2025 by rpki-client