Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a3a2f33322d3332203d3e20323633333335.roa
File:                     323830343a313438343a3a2f33322d3332203d3e20323633333335.roa (raw, json)
Hash identifier:          lijPS3v1qjgHkdzx0p4DWCQMy0dmxwB9f4GA6CTxIlA=
Subject key identifier:   9E:C9:34:68:D8:CE:04:B4:00:6F:6A:9E:96:81:72:F8:2A:45:08:83
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       73E1A1CA8C5E44BF5CD0A9F491DEDD0BA6712828
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a3a2f33322d3332203d3e20323633333335.roa
Signing time:             Tue 14 Oct 2025 22:25:22 +0000
ROA not before:           Tue 14 Oct 2025 22:20:22 +0000
ROA not after:            Tue 13 Oct 2026 22:25:22 +0000
asID:                     263335
IP address blocks:        2804:1484::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e1:a1:ca:8c:5e:44:bf:5c:d0:a9:f4:91:de:dd:0b:a6:71:28:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Oct 14 22:20:22 2025 GMT
            Not After : Oct 13 22:25:22 2026 GMT
        Subject: CN=9EC93468D8CE04B4006F6A9E968172F82A450883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:e2:09:5e:58:e8:b5:e6:0d:6c:9d:4a:2f:
                    cc:ca:03:5e:9b:38:2b:88:92:b0:d0:4c:07:67:99:
                    f4:53:44:91:c1:51:55:91:af:d8:f7:77:f9:02:61:
                    80:f5:8e:06:43:5b:d5:b1:d0:e7:7e:50:5a:23:bf:
                    d0:c6:de:db:75:c5:94:c7:35:6f:cc:dd:82:55:b2:
                    40:82:92:de:7b:af:76:21:19:a4:75:9e:ae:6e:e5:
                    14:3f:92:3d:5b:d6:88:d5:77:ec:8f:d3:7b:f5:84:
                    22:ad:e1:97:54:42:69:69:34:9a:ef:13:c6:05:41:
                    d2:c1:52:92:31:12:77:82:a4:70:5d:43:b7:04:90:
                    c4:d9:14:0d:c8:0e:b5:3f:a6:4d:4a:74:3a:d7:23:
                    c4:3e:bc:b4:67:f3:67:97:ad:dc:4b:6b:4c:8a:ba:
                    de:8c:eb:14:18:85:25:33:d8:52:23:26:d8:de:8a:
                    0b:14:de:67:67:9f:6e:d3:11:6b:6d:46:d8:67:b0:
                    89:38:02:3f:82:ee:5a:dd:1b:19:14:17:4a:0e:0d:
                    0e:34:00:1f:36:1c:12:d4:8e:18:69:ac:e3:b2:32:
                    fd:e7:65:e6:bd:99:d9:ef:0d:b0:5c:01:a2:45:e5:
                    46:1f:a2:0a:9b:64:34:66:de:01:7e:c4:d6:b0:14:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:34:68:D8:CE:04:B4:00:6F:6A:9E:96:81:72:F8:2A:45:08:83
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/323830343a313438343a3a2f33322d3332203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1484::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:ee:4b:5a:b3:e2:7b:4c:9a:cb:d0:a4:c4:cf:a7:ca:25:
         5c:b8:e1:44:99:62:07:22:8f:e6:cb:ad:54:6f:79:e6:d6:a3:
         9a:d7:84:e1:0d:60:5a:ea:bd:a7:5a:dc:e9:3a:b4:34:15:7d:
         62:5b:15:b3:e1:87:ec:0d:94:e9:72:c3:c8:80:d1:d1:89:76:
         70:1c:c0:e8:af:a7:0c:36:2f:2a:61:a8:3d:1d:ef:00:f6:6a:
         ce:d0:e2:10:04:ce:30:be:85:ee:3c:24:12:b3:6d:a1:26:0e:
         9a:6a:19:0d:ec:2f:13:bd:ec:21:c8:11:3f:b1:c8:c0:c2:9b:
         2d:e7:b8:9d:69:3b:47:a5:3d:73:7e:72:53:b5:24:18:b7:e7:
         37:6e:d4:4a:69:ac:dc:b7:50:97:01:11:65:51:5c:65:5d:a6:
         ae:a1:2d:5b:78:7a:01:0c:12:a6:b6:5d:44:c6:62:82:20:df:
         7f:a0:2f:0c:52:dc:2c:5b:8a:9f:ee:04:d1:ef:f6:28:a2:c8:
         65:5e:35:42:f3:79:04:26:69:d4:e5:8f:19:a7:ad:3b:0a:ec:
         70:25:e8:f7:b0:b2:16:78:87:23:ac:7e:d6:c9:8c:d7:08:b8:
         a0:6f:2f:c7:66:b9:f3:9b:ff:fd:97:3a:ed:a3:03:bb:00:8d:
         e2:35:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:35 2025 by rpki-client