Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa
File:                     323830343a386335633a3a2f33322d3333203d3e20323733373938.roa (raw, json)
Hash identifier:          M+/gYbU+pJ5B06F4a3PkbmoVfZnst22lg55a3Wnhkro=
Subject key identifier:   B9:D6:94:E9:B8:9D:69:0C:CF:68:61:25:D1:1C:DF:6D:EC:ED:27:5F
Certificate issuer:       /CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
Certificate serial:       79306111760B47B76CC5EB8EF0BCD0E1A045AC47
Authority key identifier: 7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa
Signing time:             Tue 14 Oct 2025 21:04:07 +0000
ROA not before:           Tue 14 Oct 2025 20:59:07 +0000
ROA not after:            Tue 13 Oct 2026 21:04:07 +0000
asID:                     273798
IP address blocks:        2804:8c5c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl
                          rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:30:61:11:76:0b:47:b7:6c:c5:eb:8e:f0:bc:d0:e1:a0:45:ac:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019
        Validity
            Not Before: Oct 14 20:59:07 2025 GMT
            Not After : Oct 13 21:04:07 2026 GMT
        Subject: CN=B9D694E9B89D690CCF686125D11CDF6DECED275F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:9f:6f:6b:35:f7:33:24:a2:85:ee:47:8b:
                    63:e7:15:a0:20:ec:8c:fb:8e:52:74:c5:ee:62:f6:
                    95:25:5d:f8:30:81:ca:84:4a:d2:bc:6c:d5:11:c6:
                    83:a1:41:d8:6e:9d:54:87:2d:2a:7b:8e:39:eb:ef:
                    ec:08:bb:4f:6b:a0:2b:04:b0:e7:25:63:76:81:80:
                    02:06:01:d7:a0:5f:9c:23:e4:2d:c4:29:1a:91:c1:
                    8f:46:24:a5:93:e9:4c:63:33:8e:ee:39:83:0d:cd:
                    0a:af:df:cf:76:60:8a:f9:96:1c:2f:30:99:f6:a6:
                    59:d5:8e:1d:56:34:f5:95:bb:0b:e2:79:d0:e0:37:
                    68:d1:f0:e8:32:dc:8c:de:d6:72:d4:f7:e8:a4:ba:
                    15:a5:ad:cb:6b:31:fa:91:7d:d5:35:0d:9f:5e:fa:
                    8b:79:45:30:52:fd:7a:ef:3b:4a:a6:9e:14:dc:03:
                    b7:87:22:af:ba:f5:a6:cb:1d:87:b2:ca:f5:dd:77:
                    cb:1d:99:f5:0d:f3:60:dc:2f:4d:98:8d:c6:db:21:
                    6c:9e:be:14:be:4e:d9:31:cf:96:90:08:b5:cc:b1:
                    f0:f3:19:ee:88:61:b7:e5:ce:f8:30:dd:be:0f:3f:
                    60:00:45:ca:57:f0:1d:af:2a:8a:2d:8e:c2:84:66:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:94:E9:B8:9D:69:0C:CF:68:61:25:D1:1C:DF:6D:EC:ED:27:5F
            X509v3 Authority Key Identifier:
                keyid:7B:7C:AE:33:EB:E3:97:5B:E8:99:71:E3:BD:0E:EE:6E:B2:21:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B7CAE33EBE3975BE89971E3BD0EEE6EB221C019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2H6Ma2SHFgBtrCEn5AkG7NCXLCkgAGzHraRLHimk5cq/0/323830343a386335633a3a2f33322d3333203d3e20323733373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:c1:73:a7:60:5f:fc:b7:77:22:b0:2f:5f:0c:49:4d:9d:22:
         f4:18:29:50:6e:bb:19:87:49:22:0b:c2:29:7d:cf:c4:9e:f5:
         f8:ee:ef:21:81:8e:75:53:d1:18:81:3b:af:89:3a:8a:9b:8e:
         71:00:23:ed:f9:06:ff:25:87:f8:af:c2:f1:02:b9:7b:c6:35:
         45:e6:a0:17:a9:d3:ba:d1:7e:3e:8d:2f:2b:e4:46:87:a4:2d:
         2a:77:ba:c8:f7:19:65:9f:a9:e6:c5:d8:74:26:22:99:c0:c5:
         9f:8e:87:7d:1c:bb:9f:e5:04:90:01:b0:ae:db:29:84:25:61:
         67:c2:4d:6b:64:7e:19:91:06:0e:f8:9c:a1:23:c7:6f:49:a9:
         eb:67:36:3e:ea:d5:04:28:17:6f:c3:62:f9:40:89:fe:fc:42:
         ef:be:1a:c0:f6:0e:d1:7f:cb:b2:b0:1c:51:e5:62:11:a3:53:
         40:93:1f:03:82:61:f0:0e:7d:8b:1e:0d:1e:e1:4b:ae:94:fe:
         78:21:17:16:94:c4:7f:94:d5:25:2a:cf:5f:f0:d6:e3:db:46:
         e1:c5:d8:f1:c7:0c:ce:b8:9c:eb:eb:1c:c9:9f:a7:ca:8d:6c:
         47:2c:38:b0:a6:23:5f:f7:d8:b3:0b:d2:6c:7c:14:0b:9f:38:
         6b:8c:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:03:13 2025 by rpki-client