Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa
File:                     323830343a386162633a3a2f33322d313238203d3e20323733363839.roa (raw, json)
Hash identifier:          ItHOB5NSOr3tcfc/B7XnxF4I381M7cjemmgQf3Y+EaI=
Subject key identifier:   7B:15:A0:4B:6D:F9:4D:68:FA:E7:9F:25:88:91:63:AE:56:D8:5C:25
Certificate issuer:       /CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
Certificate serial:       2D6064F335DE66A53B3493230718DE5C1B07D573
Authority key identifier: A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa
Signing time:             Thu 09 Oct 2025 18:21:30 +0000
ROA not before:           Thu 09 Oct 2025 18:16:30 +0000
ROA not after:            Thu 08 Oct 2026 18:21:30 +0000
asID:                     273689
IP address blocks:        2804:8abc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl
                          rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:60:64:f3:35:de:66:a5:3b:34:93:23:07:18:de:5c:1b:07:d5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Validity
            Not Before: Oct  9 18:16:30 2025 GMT
            Not After : Oct  8 18:21:30 2026 GMT
        Subject: CN=7B15A04B6DF94D68FAE79F25889163AE56D85C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:33:55:19:43:27:71:8e:4e:e4:ce:0e:ba:
                    7a:8f:57:67:59:5d:50:89:bf:4a:4f:a1:32:7b:53:
                    e2:64:e9:3a:a7:6b:f4:3d:84:b7:70:4f:ce:1f:54:
                    8f:6c:5c:8f:50:2a:80:e9:b6:39:db:9f:6e:b2:39:
                    68:a5:28:bf:60:18:49:02:de:72:98:6c:b7:f4:a8:
                    bb:aa:34:9a:fd:62:25:b2:19:ff:25:29:70:7d:54:
                    15:11:cc:41:5b:4e:05:94:69:95:e6:7f:cb:26:32:
                    57:52:2f:5f:fc:6a:cc:ff:52:a2:9d:74:f0:80:68:
                    d0:9e:e6:7a:7b:6c:d0:94:00:61:e3:0e:6d:f8:b2:
                    42:95:dc:93:80:db:f8:8d:d6:3d:c0:15:fc:20:f4:
                    8d:ce:d3:cd:b8:65:d1:e6:bb:ed:7a:2d:96:14:7b:
                    18:aa:1b:31:fa:48:de:1a:3b:f4:84:9e:df:0b:37:
                    42:5b:aa:e6:d6:27:34:dc:08:94:8b:e2:c1:78:90:
                    6d:50:4a:62:ec:97:4c:74:25:ad:3d:5f:d8:22:1e:
                    be:df:65:8d:c6:ec:ca:e2:5f:cb:a0:99:99:d0:89:
                    c5:d3:93:e5:61:ed:33:f2:34:90:6a:a7:49:6a:07:
                    4d:0d:17:a7:2c:2d:33:c6:64:c5:8d:ee:9c:e7:83:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:15:A0:4B:6D:F9:4D:68:FA:E7:9F:25:88:91:63:AE:56:D8:5C:25
            X509v3 Authority Key Identifier:
                keyid:A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/323830343a386162633a3a2f33322d313238203d3e20323733363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:f5:9f:83:2f:3d:06:62:05:3a:00:87:54:0c:c7:77:88:
         30:47:9e:13:3f:95:ca:44:50:20:6e:1d:10:48:d6:30:62:9a:
         ac:6d:fe:8b:a7:85:e2:d9:df:71:50:31:fc:a8:c1:f3:c5:57:
         9a:13:35:fb:8f:93:60:23:6b:7d:36:85:6a:a5:12:0c:09:50:
         c6:f5:60:05:62:54:14:0d:85:e5:cc:fd:a7:14:04:12:ad:87:
         64:2f:12:82:7d:2c:eb:53:bc:46:d3:9a:fb:ed:3d:9d:88:9e:
         35:db:c3:cd:17:f2:6a:71:86:5e:06:ac:53:a9:ee:e7:66:2e:
         01:e7:f0:4b:f6:60:0a:82:1b:36:69:46:64:b8:7b:21:de:2f:
         24:9e:6c:09:ff:af:86:66:ad:73:cc:e3:80:53:60:73:63:d1:
         d1:7b:9b:19:e5:c9:d0:c3:1c:f5:8b:c4:e6:43:8f:41:49:58:
         11:3b:98:17:7f:0a:15:00:d5:5c:98:74:2e:48:8e:e7:e3:ca:
         80:01:67:95:8f:41:85:c9:c0:f2:60:94:bc:eb:e7:6b:c1:4a:
         6f:03:6d:db:11:44:78:85:bb:0b:21:d5:6c:f1:be:02:fd:3e:
         3e:29:d9:9c:d9:e9:ed:67:f7:cd:78:60:1c:4b:73:93:15:5c:
         c9:b8:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:01:55 2025 by rpki-client