Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a383030303a3a2f33332d3333203d3e20323731323738.roa
File:                     323830343a373866633a383030303a3a2f33332d3333203d3e20323731323738.roa (raw, json)
Hash identifier:          xHgX7Wx7vIpQ477jZuZH8dp064E6MB7TUCeUNexM+SU=
Subject key identifier:   E0:6A:80:B1:91:37:61:D7:3D:DE:38:C2:79:A1:71:5D:AA:E3:50:8B
Certificate issuer:       /CN=E65390E77A729F873FA28119BCD08F1CA0204C93
Certificate serial:       5B9AD03022032FA8E4AE4EC9D8E126F0E51C4BDB
Authority key identifier: E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a383030303a3a2f33332d3333203d3e20323731323738.roa
Signing time:             Sat 13 Sep 2025 14:26:27 +0000
ROA not before:           Sat 13 Sep 2025 14:21:27 +0000
ROA not after:            Sat 12 Sep 2026 14:26:27 +0000
asID:                     271278
IP address blocks:        2804:78fc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl
                          rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9a:d0:30:22:03:2f:a8:e4:ae:4e:c9:d8:e1:26:f0:e5:1c:4b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65390E77A729F873FA28119BCD08F1CA0204C93
        Validity
            Not Before: Sep 13 14:21:27 2025 GMT
            Not After : Sep 12 14:26:27 2026 GMT
        Subject: CN=E06A80B1913761D73DDE38C279A1715DAAE3508B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:51:17:14:f8:01:86:96:5a:fd:57:5f:fa:
                    f0:11:b0:f0:a8:aa:a1:92:d6:a2:eb:9a:b7:3b:fa:
                    90:c3:8e:b6:7d:c1:f6:56:34:b2:e8:41:90:4d:49:
                    2d:d4:f1:99:5e:76:d7:ee:f0:12:e2:d7:59:58:ef:
                    87:7d:9c:8a:fc:38:a9:cb:26:38:02:b5:5d:f1:a6:
                    26:57:dc:86:c2:49:71:57:89:40:9c:84:3d:30:52:
                    d1:3b:f6:22:02:81:76:76:52:59:fa:33:65:50:1a:
                    f9:87:79:fd:6f:a3:0e:c2:e4:ec:1e:d2:37:b8:7f:
                    1c:97:d3:1a:b9:50:ad:4c:a8:a9:20:ea:cd:e7:60:
                    74:78:cb:f8:70:c5:b4:ed:3d:9b:4a:03:f2:58:7c:
                    94:0f:ba:8e:06:6a:2b:49:ba:ef:d7:e8:57:78:af:
                    dc:98:f1:ed:1f:f2:4d:7e:c1:3c:55:45:32:94:33:
                    03:35:c6:79:c3:41:ca:e7:43:b1:4c:db:10:21:f2:
                    d6:1c:cf:25:1c:ea:03:bb:8f:58:09:ec:c5:05:57:
                    84:60:d6:1a:fc:cd:cd:7a:4b:d4:aa:48:c3:96:c7:
                    fe:9c:32:a6:13:d0:99:8a:59:69:20:12:49:e8:48:
                    ba:09:6b:b7:d5:8f:75:7c:98:45:b8:ee:e1:dc:11:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:80:B1:91:37:61:D7:3D:DE:38:C2:79:A1:71:5D:AA:E3:50:8B
            X509v3 Authority Key Identifier:
                keyid:E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a383030303a3a2f33332d3333203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78fc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:b2:b2:fa:f7:13:f5:18:9f:67:3b:3c:e3:98:06:a8:47:
         64:41:fb:c0:ed:f3:e9:da:87:13:2a:a2:b1:5b:e3:e9:69:8f:
         98:f9:a1:e3:a3:f4:28:6f:9a:92:b1:fa:6a:5c:bd:4b:06:26:
         52:fa:19:c3:ec:94:47:9a:13:16:89:52:f6:bd:79:7c:b4:7b:
         e2:80:19:34:be:d3:34:76:29:0d:37:9c:c9:9c:a5:33:06:ae:
         9a:c8:5b:60:d1:9b:af:ee:bb:82:d3:cc:75:21:8e:20:1a:23:
         e0:12:5e:07:96:37:a5:3d:66:01:3e:2c:ef:ec:b7:94:e6:95:
         e6:f8:c8:6d:92:04:1d:bd:54:b9:2d:48:84:34:d5:3b:e4:19:
         8a:25:24:2b:3f:37:77:2f:a2:8f:4a:68:d4:93:a3:1a:16:a1:
         9e:d2:3f:b3:96:8d:8b:53:30:b6:6c:4e:81:bd:ea:db:57:ea:
         57:62:71:75:0d:87:98:d4:1d:1a:aa:ef:87:13:80:a3:92:96:
         6e:34:12:b5:57:27:15:fd:bd:1b:cb:ab:ec:e0:5d:ba:e5:3f:
         c2:47:df:06:88:43:21:b9:01:bd:b0:eb:6b:c3:08:d5:c3:1a:
         4a:3e:ea:0c:44:ef:84:8a:50:5f:8f:e0:59:b4:50:fd:33:22:
         bb:1a:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:35:46 2025 by rpki-client