Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
File:                     323830343a373135343a3a2f33322d3332203d3e20323730373832.roa (raw, json)
Hash identifier:          icrRKTdEy4vSuYMpaV3oSlxMOksS+laY3OxTUEoWaaM=
Subject key identifier:   81:A4:EF:5C:59:3A:4C:5C:F6:21:C0:AB:3C:38:57:E1:43:48:B5:3F
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       D02B5F3B40ADD1B69A5982DDF05B1ED7578F19
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa
Signing time:             Tue 26 Aug 2025 18:09:29 +0000
ROA not before:           Tue 26 Aug 2025 18:04:29 +0000
ROA not after:            Tue 25 Aug 2026 18:09:29 +0000
asID:                     270782
IP address blocks:        2804:7154::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:2b:5f:3b:40:ad:d1:b6:9a:59:82:dd:f0:5b:1e:d7:57:8f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Aug 26 18:04:29 2025 GMT
            Not After : Aug 25 18:09:29 2026 GMT
        Subject: CN=81A4EF5C593A4C5CF621C0AB3C3857E14348B53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:b4:e1:df:17:56:14:ab:16:29:97:34:bc:
                    ff:84:a8:03:3c:ec:c9:1f:08:05:21:f4:e7:58:7f:
                    23:27:e1:82:da:ff:11:b5:e1:93:2a:fa:87:60:fc:
                    70:ec:c6:c4:bf:d2:26:52:b0:f3:1f:dc:8f:81:a0:
                    99:e7:99:3b:7c:4f:09:4f:63:f9:84:c7:83:e2:b8:
                    0c:37:10:56:21:6f:49:af:b0:69:f2:74:4f:66:3d:
                    1e:17:9f:0c:47:97:e8:0c:a5:e9:7f:a1:30:dc:a2:
                    ff:c8:a8:53:f6:8d:f1:ce:e7:8b:ee:21:92:07:c7:
                    f3:43:e3:90:da:2e:63:23:06:4f:da:c6:59:7b:41:
                    ae:8f:ac:5c:16:a1:ec:aa:6e:72:61:1f:bd:81:6b:
                    58:b0:89:64:7d:88:d7:22:be:10:21:02:50:f7:88:
                    6c:db:60:da:0d:73:73:2e:e8:04:0c:0e:52:e0:78:
                    d8:da:f4:39:9f:2e:c1:07:6c:ff:3a:3c:f8:03:09:
                    af:c4:7a:e3:38:72:a7:46:34:9d:ba:6a:7a:40:a8:
                    f1:af:7c:9a:7b:3c:3a:e6:a3:5c:8f:32:af:c1:be:
                    c1:62:bb:c7:e1:29:b3:74:1d:2a:7a:fc:b6:68:da:
                    3b:35:ee:ac:0c:cd:76:4c:a9:47:e0:7c:57:5a:9a:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:EF:5C:59:3A:4C:5C:F6:21:C0:AB:3C:38:57:E1:43:48:B5:3F
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/323830343a373135343a3a2f33322d3332203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7154::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:cd:ad:39:b6:5a:ac:10:e1:e2:95:62:d6:5d:37:54:1e:2e:
         5b:3a:a2:1a:ca:19:d3:47:1a:2c:b0:4e:26:d0:0b:ed:fc:67:
         36:83:07:f7:f2:63:66:e1:0f:c8:5e:66:81:63:4e:86:02:22:
         fd:c2:6d:5a:1c:0b:8d:ac:23:60:0b:db:92:02:10:bd:ef:89:
         02:3d:d3:5c:fb:25:96:4b:01:84:7d:38:05:ee:5e:de:fb:a3:
         3e:e2:81:26:8a:e1:27:b9:7e:aa:f0:4b:32:d3:72:97:23:0e:
         ba:7f:4d:cb:35:7b:05:ae:90:09:7c:c3:ff:5d:78:0a:2c:93:
         ea:c1:b5:ed:6d:ca:15:b4:d3:92:2c:e6:a2:ec:5f:64:98:63:
         ce:46:4a:32:f1:ae:84:52:1b:4d:13:19:25:11:5a:b4:32:ee:
         b5:cb:f6:df:65:29:93:2b:46:a7:83:bb:ea:68:9f:95:80:b1:
         35:e1:5c:73:dd:c4:4d:28:af:af:e1:8e:59:cc:d7:1b:b8:b2:
         49:f5:f4:ef:af:bc:5f:1b:e9:dd:01:68:4c:05:d4:62:2d:d7:
         94:1b:c8:a4:03:c2:bb:0f:cf:b7:a6:01:b2:c8:79:73:0b:8f:
         c5:e3:19:8d:7e:a7:a7:b4:05:00:f4:0f:63:f2:7e:e3:16:37:
         7d:69:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:43:48 2025 by rpki-client