Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
File:                     323830343a356365303a3a2f33322d313238203d3e20323638393336.roa (raw, json)
Hash identifier:          ZFRBFK5CkeGOx6F+xMHDQgjCqnN8eGKFkXzM5F/uUg0=
Subject key identifier:   AD:EC:4A:47:9E:70:50:91:C9:1A:CC:0A:0B:C4:26:3B:94:60:FE:DE
Certificate issuer:       /CN=EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072
Certificate serial:       5AF663E13AE40BAE26A78B7A94B0E3409FE5859F
Authority key identifier: EE:80:D5:04:9D:8E:C1:B1:E6:BD:53:A9:ED:1B:DD:8E:CB:10:50:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa
Signing time:             Sat 30 Aug 2025 23:42:35 +0000
ROA not before:           Sat 30 Aug 2025 23:37:35 +0000
ROA not after:            Sat 29 Aug 2026 23:42:35 +0000
asID:                     268936
IP address blocks:        2804:5ce0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.crl
                          rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 01:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f6:63:e1:3a:e4:0b:ae:26:a7:8b:7a:94:b0:e3:40:9f:e5:85:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072
        Validity
            Not Before: Aug 30 23:37:35 2025 GMT
            Not After : Aug 29 23:42:35 2026 GMT
        Subject: CN=ADEC4A479E705091C91ACC0A0BC4263B9460FEDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:2a:a3:7e:8e:6d:3c:4f:23:d1:3c:55:53:
                    51:36:39:c1:3e:eb:89:64:c8:c4:c0:4b:38:04:36:
                    1e:1e:b6:4e:99:c9:26:b4:01:af:f9:8a:6c:ae:2a:
                    8b:a2:0f:a0:44:76:32:97:86:90:8b:5d:5d:c7:12:
                    61:0d:78:9a:73:c9:d8:cf:19:96:5b:50:c1:09:c9:
                    49:cf:06:52:cc:7c:a5:59:9e:89:2d:bd:f8:19:12:
                    11:54:cd:bd:33:22:8a:2e:9e:88:7c:26:e5:0d:e0:
                    1c:8e:fc:b3:6a:79:16:df:a4:e7:01:87:b8:89:23:
                    40:45:8b:18:b5:bd:6e:ba:76:19:a8:27:8e:c8:f9:
                    af:73:26:3c:c9:27:3e:a8:7a:a0:9d:17:d6:5a:80:
                    9a:d1:9a:40:4e:7e:4f:28:f0:2a:3e:ab:f8:50:ae:
                    5d:38:70:4d:41:2b:af:60:69:5b:24:e3:ab:c7:b6:
                    51:34:1d:00:23:f6:e2:73:1a:32:58:5b:f6:cb:91:
                    b5:06:5e:1f:cd:ed:37:57:cf:90:49:cc:d6:52:71:
                    5d:cb:3b:3a:c1:26:6b:24:51:b4:34:ff:3c:16:4e:
                    95:b5:cb:96:26:44:a3:14:96:49:04:79:81:fa:4e:
                    0f:b3:ec:e5:e4:bf:bc:fa:73:cb:5f:60:39:1d:ad:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:4A:47:9E:70:50:91:C9:1A:CC:0A:0B:C4:26:3B:94:60:FE:DE
            X509v3 Authority Key Identifier:
                keyid:EE:80:D5:04:9D:8E:C1:B1:E6:BD:53:A9:ED:1B:DD:8E:CB:10:50:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE80D5049D8EC1B1E6BD53A9ED1BDD8ECB105072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/0/323830343a356365303a3a2f33322d313238203d3e20323638393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:be:d9:f5:0f:ab:97:49:bb:28:35:2d:b7:08:f3:5e:f3:2f:
         17:88:a8:15:f1:d4:3d:2c:e8:be:a7:66:a7:d2:a5:80:8f:53:
         05:fd:17:59:a3:f1:ce:39:b6:ed:bd:7e:d3:1a:f3:0f:3e:4f:
         a8:ff:50:af:0d:52:27:b6:18:50:2b:49:39:cc:07:9a:10:d1:
         2f:0e:36:d4:e1:10:8a:8a:35:5d:91:ff:cf:92:f2:49:42:ed:
         2e:3d:37:f2:79:52:c0:d4:ba:0c:74:38:aa:9c:35:41:41:10:
         e0:b7:8d:00:34:a4:98:bd:53:0c:2e:bc:ab:05:1f:f0:67:c1:
         d2:21:ea:4c:04:3d:79:d1:0a:b6:91:95:56:08:74:65:9d:f9:
         c6:f6:27:f9:d6:e1:db:bc:b0:10:d1:aa:26:80:92:85:a9:14:
         8a:dd:93:26:74:bc:e9:d3:97:31:fc:f3:01:8e:8f:46:fb:df:
         63:95:b9:c5:15:8d:92:f0:7b:3e:99:f1:54:cf:31:50:5d:0c:
         56:10:14:e6:77:6d:e6:c7:2e:d6:e5:77:1e:bb:64:fb:77:55:
         2c:53:1b:4d:76:c9:68:32:09:94:77:b6:0f:4b:75:7f:fc:ea:
         7d:ec:ae:fc:51:08:60:7a:87:89:dd:0b:7e:f1:88:5d:9c:4e:
         6b:27:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:02 2025 by rpki-client