Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a633030303a3a2f33342d3334203d3e20323733343637.roa
File:                     323830343a386631383a633030303a3a2f33342d3334203d3e20323733343637.roa (raw, json)
Hash identifier:          QpH4tEpZryI5HRB0x2STAPeSHq4UXloSIwr7wYyAKSY=
Subject key identifier:   57:CD:2F:53:4C:33:BD:24:0A:9E:BC:9B:99:A2:24:B4:DD:AC:F2:4D
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       6CBECE497C42ED33AB9037E276FB75B17AC44DEC
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a633030303a3a2f33342d3334203d3e20323733343637.roa
Signing time:             Fri 03 Oct 2025 18:20:03 +0000
ROA not before:           Fri 03 Oct 2025 18:15:03 +0000
ROA not after:            Fri 02 Oct 2026 18:20:03 +0000
asID:                     273467
IP address blocks:        2804:8f18:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:be:ce:49:7c:42:ed:33:ab:90:37:e2:76:fb:75:b1:7a:c4:4d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Oct  3 18:15:03 2025 GMT
            Not After : Oct  2 18:20:03 2026 GMT
        Subject: CN=57CD2F534C33BD240A9EBC9B99A224B4DDACF24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:08:96:e6:5f:d3:8a:18:df:0d:99:31:bf:
                    1c:82:a6:61:66:c5:ee:94:90:9a:d6:73:07:0e:58:
                    5e:76:e6:76:be:57:0d:b3:ba:af:50:24:3e:21:e7:
                    5e:d5:e4:e8:dd:c6:92:df:00:3b:08:1a:1c:43:74:
                    30:71:88:d9:60:3e:6f:d3:3e:4f:a8:d6:ce:6b:7d:
                    1d:de:b3:45:39:5e:26:cc:a5:64:e5:02:4c:3f:7e:
                    47:8b:e2:1a:57:99:b0:9d:61:ca:c6:63:81:42:ad:
                    3e:7a:e7:36:d9:09:8a:a3:97:6e:95:ba:b7:fc:be:
                    06:73:c4:5d:80:09:34:3b:c8:0f:13:3f:b5:5b:a4:
                    1e:9b:a3:1b:b7:44:49:e2:a0:b4:c8:df:90:c6:76:
                    15:8f:ff:61:ca:bc:d7:05:a0:12:b6:bd:55:70:cb:
                    3b:8d:91:70:53:d4:b0:6f:ec:e8:07:26:7f:55:99:
                    26:31:df:57:51:51:44:10:36:7b:4f:ec:36:ae:39:
                    9e:66:3b:a4:19:c6:98:05:89:34:3e:5f:04:b0:d5:
                    4e:39:04:f8:87:b1:4d:69:50:7f:06:08:dd:c4:ae:
                    0e:10:db:0d:db:0b:cc:9f:ca:36:77:0e:22:8a:b2:
                    99:eb:5e:31:09:83:d6:b9:70:d0:7a:5e:7a:22:76:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CD:2F:53:4C:33:BD:24:0A:9E:BC:9B:99:A2:24:B4:DD:AC:F2:4D
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a633030303a3a2f33342d3334203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:31:14:43:4a:e5:2e:14:12:bd:05:ca:93:92:4a:0c:7d:
         8f:2b:9a:74:27:a4:35:71:04:48:aa:e2:9f:8d:cd:21:06:78:
         5e:c6:ee:d6:81:76:07:a6:55:bd:02:57:9f:01:79:b0:a5:d8:
         20:3c:53:22:b8:20:9b:28:1a:99:c0:cc:55:65:42:4b:a8:81:
         be:8e:0e:31:be:7a:a0:0a:24:d2:42:1a:c3:4a:30:8a:68:f3:
         39:22:94:44:cf:58:b9:45:f0:2f:e9:aa:60:7f:93:00:fb:d1:
         93:8b:5b:e0:8e:25:a9:db:13:96:64:4c:5f:84:92:f0:32:1b:
         59:27:2b:eb:6c:03:31:6c:31:2d:ba:5a:30:b7:5b:a9:a9:54:
         11:24:9d:10:f0:50:da:e1:d6:94:55:06:a9:d2:6c:ff:c0:2e:
         b4:0e:60:22:a3:0e:25:80:77:0a:e9:0d:c2:c1:27:fb:63:f8:
         0d:d6:f5:fe:c4:63:e5:57:71:ad:13:ec:95:3b:ee:2d:40:0c:
         87:b0:20:18:2c:e4:f3:85:c1:fc:c1:24:80:8a:ea:6f:73:1c:
         07:8b:9a:92:88:12:11:4c:2b:70:2f:0c:37:5e:77:13:0f:96:
         fa:c2:ce:bd:c5:99:e7:0b:59:4d:fc:51:4d:57:b4:0b:58:11:
         f3:3d:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:02:58 2025 by rpki-client