Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa
File:                     323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa (raw, json)
Hash identifier:          ei/bbE8Uvenfhv9lCZmDbtwxemmHBkcV2CtZGnuUcyk=
Subject key identifier:   FB:A0:B7:F6:B0:01:12:37:F5:89:FD:C8:6A:CD:63:87:61:AD:6D:48
Certificate issuer:       /CN=E283C40EE803134A57D75DCB34D29EA4396601DB
Certificate serial:       3E95F01E1071DFF58C245C113C742A2101398EAA
Authority key identifier: E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa
Signing time:             Thu 02 Oct 2025 13:31:21 +0000
ROA not before:           Thu 02 Oct 2025 13:26:21 +0000
ROA not after:            Thu 01 Oct 2026 13:31:21 +0000
asID:                     270885
IP address blocks:        2804:72f0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl
                          rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:13:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:f0:1e:10:71:df:f5:8c:24:5c:11:3c:74:2a:21:01:39:8e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E283C40EE803134A57D75DCB34D29EA4396601DB
        Validity
            Not Before: Oct  2 13:26:21 2025 GMT
            Not After : Oct  1 13:31:21 2026 GMT
        Subject: CN=FBA0B7F6B0011237F589FDC86ACD638761AD6D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:bf:86:ed:ab:9b:52:e3:75:cd:fe:e9:57:
                    da:9a:06:5b:d4:5c:43:40:5f:65:2f:d7:86:af:d0:
                    0c:2e:77:e7:f8:10:ec:e2:36:1f:99:83:57:b4:9e:
                    0f:cc:97:8f:4e:4e:25:90:17:0f:d4:e0:4c:0d:6a:
                    3f:06:d7:a6:20:fb:ac:3b:c6:b7:3b:7a:88:fd:12:
                    ab:3d:f2:1e:33:52:43:61:e8:71:e0:bb:33:56:52:
                    09:1b:c4:24:a5:57:39:cd:65:e4:3f:ae:72:80:e7:
                    ed:30:8f:1c:58:da:77:67:96:23:46:b5:28:6f:2a:
                    df:ab:3b:57:de:01:ef:ab:6f:42:af:7f:34:05:be:
                    86:38:f2:47:c0:a0:c3:d2:f7:51:ba:c6:6d:42:dc:
                    58:52:24:1e:f3:45:41:b5:49:68:86:85:f6:c5:cf:
                    c1:fe:56:00:55:dd:3a:27:81:5c:36:f5:dc:c3:86:
                    53:40:d9:7a:10:47:fd:3c:34:eb:9e:26:4b:27:a8:
                    f1:e9:06:55:6f:d0:6d:9b:d8:f4:a9:54:1c:88:08:
                    6a:9d:5c:0f:d8:20:d7:2a:03:07:44:09:2b:ee:b8:
                    6a:01:5f:a8:f3:3a:90:b5:98:3e:49:f9:cc:ab:d4:
                    0e:96:03:54:ec:29:b2:0d:42:f2:33:30:10:6b:a3:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A0:B7:F6:B0:01:12:37:F5:89:FD:C8:6A:CD:63:87:61:AD:6D:48
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:0E:E8:03:13:4A:57:D7:5D:CB:34:D2:9E:A4:39:66:01:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/E283C40EE803134A57D75DCB34D29EA4396601DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E283C40EE803134A57D75DCB34D29EA4396601DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87pNC4Pcrw8MPimdGUpgWYMV8999pkeCzbWhThNrgY3B/0/323830343a373266303a383030303a3a2f33342d3334203d3e20323730383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         f7:c6:0f:37:37:49:8c:4e:7f:ce:cd:88:76:fe:34:37:19:51:
         9c:a1:4c:03:7b:d9:a6:d8:bb:c9:82:59:b4:34:da:ba:62:0b:
         2f:b1:ce:58:57:60:07:be:67:bd:65:46:09:8e:a2:96:bb:2d:
         80:28:a0:cc:35:d5:a8:c2:0e:2c:3a:d1:fc:de:1c:39:33:1c:
         c3:4d:4d:33:e9:06:3b:2b:db:da:f6:dc:d7:fc:a5:ee:f4:ac:
         2c:3f:87:87:6b:b4:d4:b7:81:4a:3a:8c:b8:f9:2c:09:74:52:
         b8:5a:cb:8a:61:a7:3f:d4:42:27:06:1d:29:59:89:52:c3:28:
         6a:03:1e:37:b3:5a:9f:95:b3:08:50:e0:fe:03:3b:e4:0d:e0:
         75:35:7d:4a:1a:1c:23:cd:9d:54:d1:25:66:04:33:10:80:72:
         2c:e8:60:69:75:a3:e5:c0:0d:08:25:b9:ab:33:93:b7:ab:a8:
         9a:06:d3:fe:7c:97:5e:88:c7:50:ec:03:4d:5f:eb:15:20:e5:
         54:8c:11:e5:15:89:73:b1:2f:34:4c:65:c0:d8:25:e6:ea:a1:
         74:5c:18:c9:3a:88:36:4e:23:5b:e3:7b:ec:bb:63:f5:22:31:
         c3:d5:05:24:bc:0e:20:a1:b1:3f:3b:a3:92:6a:0b:89:3f:db:
         4d:10:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:19:54 2025 by rpki-client