Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa
File:                     323830343a3837383a3a2f33322d3434203d3e20323632333734.roa (raw, json)
Hash identifier:          9Dq+ESk7qJpc9J5Drs5Ga5hnUi1YKQ5wXr9Vd+jr/9E=
Subject key identifier:   BC:30:6B:2B:3F:63:9D:18:E9:E8:2C:7D:9F:19:5C:E9:09:F2:A7:67
Certificate issuer:       /CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
Certificate serial:       1EEAE851BEAD2065587D580FC4CC7EA5CE0B7113
Authority key identifier: 45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa
Signing time:             Thu 09 Oct 2025 12:17:42 +0000
ROA not before:           Thu 09 Oct 2025 12:12:42 +0000
ROA not after:            Thu 08 Oct 2026 12:17:42 +0000
asID:                     262374
IP address blocks:        2804:878::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ea:e8:51:be:ad:20:65:58:7d:58:0f:c4:cc:7e:a5:ce:0b:71:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC02B21B3D12F3F8A7B3E6101148947852DCC
        Validity
            Not Before: Oct  9 12:12:42 2025 GMT
            Not After : Oct  8 12:17:42 2026 GMT
        Subject: CN=BC306B2B3F639D18E9E82C7D9F195CE909F2A767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:6a:cc:9c:4d:c4:8d:3e:a1:1d:a1:a0:b5:
                    b5:6f:32:9a:4c:9e:9f:6c:a2:af:42:3b:bd:e8:63:
                    c8:10:92:b4:2a:9a:a4:74:76:96:02:dc:e4:53:06:
                    fb:a5:9d:a4:52:f2:ed:ad:02:e5:1e:d8:4c:1a:8a:
                    fa:4b:7a:ef:43:a1:ef:63:00:32:92:2a:c5:13:cc:
                    ad:20:da:95:5d:77:c4:bb:9a:61:c8:91:72:3f:19:
                    86:8d:03:b4:1f:70:71:21:c0:6d:2a:a1:ac:13:7c:
                    ac:f7:59:9a:e4:75:a3:f6:59:4a:50:37:ad:6f:c7:
                    58:68:cd:c3:60:db:ae:06:c4:79:c8:eb:8a:f4:62:
                    59:b0:f4:1f:ba:5f:c4:8b:d0:b6:f7:4b:5f:6a:33:
                    ef:91:b7:81:ae:4f:ea:ae:87:74:55:87:9b:00:2b:
                    dd:6f:7c:e1:f4:11:2f:c5:0c:14:bd:5d:64:79:60:
                    38:20:4b:9e:b9:06:86:a6:a6:81:09:1c:b2:fe:dd:
                    41:7c:54:26:45:95:6e:7e:f6:0c:a2:12:18:38:d5:
                    e9:ab:00:bb:53:82:50:e2:4a:0e:d3:1f:55:fe:ff:
                    16:bb:43:f4:eb:c3:26:a8:87:2c:30:21:7e:13:a6:
                    d9:3f:03:c2:ff:db:51:89:bd:28:4d:bd:6c:2e:36:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:30:6B:2B:3F:63:9D:18:E9:E8:2C:7D:9F:19:5C:E9:09:F2:A7:67
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:2B:21:B3:D1:2F:3F:8A:7B:3E:61:01:14:89:47:85:2D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/450AC02B21B3D12F3F8A7B3E6101148947852DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/450AC02B21B3D12F3F8A7B3E6101148947852DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/323830343a3837383a3a2f33322d3434203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:878::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:89:10:c9:f6:0e:b6:4e:73:26:b6:ea:3e:45:6e:54:03:
         95:e1:6d:34:b1:85:6e:83:07:cc:fa:14:0c:5f:91:4a:26:9b:
         a0:c9:83:9f:b6:94:c3:da:c4:81:7f:bd:e1:ac:b9:bb:c3:91:
         26:b3:c7:bb:c6:1c:07:bb:02:f3:d3:bd:1d:d7:ea:68:11:a2:
         f0:09:ad:04:bb:0d:6e:2c:13:98:0a:36:41:fb:e7:45:67:b3:
         54:6f:8c:75:05:c1:05:f8:2e:ba:7e:20:25:c9:13:4a:c4:d0:
         7b:ac:9d:71:ac:ac:d3:29:ce:47:0b:b6:9c:15:0a:bf:35:69:
         a6:b9:35:c6:54:81:00:e7:af:6c:3a:3c:a0:e0:b0:aa:26:a5:
         0a:00:fe:fe:65:91:80:3a:e4:d2:8a:cb:3f:ef:b6:9f:b6:b3:
         2f:3a:8b:ad:70:b6:b9:df:a0:ee:d7:c3:4f:96:01:6e:86:27:
         10:81:85:9d:06:5a:83:77:47:e8:f3:37:5f:4d:ea:06:87:99:
         e0:e4:82:77:fc:fa:cd:48:b8:2d:e2:93:f4:b8:78:dd:dd:91:
         14:29:4e:d7:68:6e:89:3e:b6:42:c9:1e:8a:fc:96:a2:52:63:
         40:8a:2e:6c:e5:24:5e:43:c7:b8:ba:0e:ed:a6:35:60:20:77:
         b0:89:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:49:26 2025 by rpki-client