Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a3a2f33342d3334203d3e20323731323738.roa
File:                     323830343a373866633a3a2f33342d3334203d3e20323731323738.roa (raw, json)
Hash identifier:          RrP/kcBZTl8V+tgRPvaqesaYIiFfa5MTGpAh93LImY8=
Subject key identifier:   AD:D5:ED:60:BA:6C:AA:73:62:14:8C:75:87:6C:D0:18:70:D9:B1:7B
Certificate issuer:       /CN=E65390E77A729F873FA28119BCD08F1CA0204C93
Certificate serial:       66AD20E683951B22857418DFCB5C7C6DF867BADD
Authority key identifier: E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a3a2f33342d3334203d3e20323731323738.roa
Signing time:             Sat 13 Sep 2025 14:26:51 +0000
ROA not before:           Sat 13 Sep 2025 14:21:51 +0000
ROA not after:            Sat 12 Sep 2026 14:26:51 +0000
asID:                     271278
IP address blocks:        2804:78fc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl
                          rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ad:20:e6:83:95:1b:22:85:74:18:df:cb:5c:7c:6d:f8:67:ba:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65390E77A729F873FA28119BCD08F1CA0204C93
        Validity
            Not Before: Sep 13 14:21:51 2025 GMT
            Not After : Sep 12 14:26:51 2026 GMT
        Subject: CN=ADD5ED60BA6CAA7362148C75876CD01870D9B17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:33:c3:ea:ce:d9:5c:d3:e6:c4:21:45:d5:
                    bb:91:a4:83:11:cd:09:73:c7:aa:f7:85:01:43:b9:
                    f8:07:1c:94:df:fa:92:80:1c:e1:85:e1:34:b0:9f:
                    fe:05:8c:81:56:4e:7d:e3:5d:fe:92:52:f4:bb:99:
                    b5:1c:e9:83:6f:06:cd:f8:ec:ac:57:ce:9b:10:19:
                    a3:6c:2a:e4:1f:c1:64:81:7e:08:09:1f:86:9a:c7:
                    04:b7:b4:40:03:9e:e8:1f:8f:3c:54:b2:8c:e1:77:
                    94:87:91:f2:71:bc:3c:17:e6:cc:1b:c6:d8:9f:46:
                    14:bb:7b:ea:9d:87:8c:16:8e:a1:1e:e9:1b:79:95:
                    ff:6f:b8:c4:be:e7:cf:00:36:5c:67:ff:91:61:f3:
                    9d:83:4e:c9:4a:06:d4:87:9a:4d:92:d5:5e:6b:36:
                    68:7e:83:71:50:33:ff:23:6c:c8:c0:e3:9f:8c:a7:
                    52:3c:03:ef:f2:0d:88:29:53:4f:81:74:14:46:bf:
                    59:7c:5b:b6:c6:82:ec:39:9d:a4:c0:f5:8d:1a:c9:
                    85:ad:5e:d3:ef:99:64:18:38:f0:cd:3e:ce:37:59:
                    b6:4f:36:7e:75:91:93:1e:7b:3d:2d:44:1b:c3:77:
                    99:5e:2a:b2:75:0b:c7:4e:bf:81:eb:d5:83:21:ce:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D5:ED:60:BA:6C:AA:73:62:14:8C:75:87:6C:D0:18:70:D9:B1:7B
            X509v3 Authority Key Identifier:
                keyid:E6:53:90:E7:7A:72:9F:87:3F:A2:81:19:BC:D0:8F:1C:A0:20:4C:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/E65390E77A729F873FA28119BCD08F1CA0204C93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E65390E77A729F873FA28119BCD08F1CA0204C93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9h9ZmmweX2ueUNzpZ5MmFfAZTCiT24CXixoqYxH8TUiK/0/323830343a373866633a3a2f33342d3334203d3e20323731323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78fc::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:28:cc:cf:5d:41:f0:70:17:d9:b5:26:f3:2d:c7:92:2b:
         3a:a7:fb:d3:76:89:b7:50:8e:18:5e:65:94:d6:17:a1:d5:32:
         d3:f7:65:b1:46:95:a2:0e:1b:34:59:5e:48:44:b4:bb:5f:aa:
         79:13:0f:b6:be:5f:c4:71:80:4a:8b:c6:8c:c7:b0:88:bd:91:
         1d:a1:ca:74:f2:2a:42:75:62:4f:0f:f6:e5:a5:8f:8c:ff:72:
         61:c6:86:ff:fb:66:fe:87:9b:e8:1a:7d:fe:3b:fb:f9:c0:f2:
         96:5a:e0:5f:c6:50:b7:b1:18:b2:35:c6:76:b5:5b:e9:7c:05:
         49:87:8e:a2:d8:05:6c:97:8f:90:b5:06:3a:d2:73:cf:5c:f6:
         6e:4e:1a:5d:d7:62:e6:4f:e3:78:0e:1a:66:27:52:4f:88:ab:
         07:5c:19:8c:de:f9:d8:88:d0:a7:9f:52:ae:af:4c:ff:90:cc:
         09:54:c9:e5:8b:51:8c:24:4f:08:86:7a:43:dd:05:97:6c:6a:
         db:d5:0e:a4:38:26:e6:8b:64:2e:2e:21:86:93:6f:25:d3:c7:
         a9:ef:a7:73:a4:6d:1a:79:43:88:8b:de:b8:3b:48:54:8f:6b:
         29:c1:61:33:be:7b:36:a7:0e:13:34:ba:57:33:f9:d5:41:3b:
         b6:d9:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:00 2025 by rpki-client