Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/323830343a323034343a3a2f33322d313238203d3e203532373734.roa
File:                     323830343a323034343a3a2f33322d313238203d3e203532373734.roa (raw, json)
Hash identifier:          OR8EPEhNkXm5n15xKeqrn+yE8a9Ouc7Nd6P5/eu2WwE=
Subject key identifier:   F7:45:0F:34:A1:C6:25:2A:FD:E5:27:66:EC:79:35:65:2C:38:1B:97
Certificate issuer:       /CN=ECC476EEF0025078A76C96EE377194228F90C3A1
Certificate serial:       169781C620D60009ECD2B30F60AF28B45F29951A
Authority key identifier: EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/323830343a323034343a3a2f33322d313238203d3e203532373734.roa
Signing time:             Wed 30 Jul 2025 15:03:23 +0000
ROA not before:           Wed 30 Jul 2025 14:58:23 +0000
ROA not after:            Wed 29 Jul 2026 15:03:23 +0000
asID:                     52774
IP address blocks:        2804:2044::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl
                          rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 20:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:81:c6:20:d6:00:09:ec:d2:b3:0f:60:af:28:b4:5f:29:95:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC476EEF0025078A76C96EE377194228F90C3A1
        Validity
            Not Before: Jul 30 14:58:23 2025 GMT
            Not After : Jul 29 15:03:23 2026 GMT
        Subject: CN=F7450F34A1C6252AFDE52766EC7935652C381B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:c3:4e:7e:32:39:32:e0:e2:27:5c:3f:6f:
                    72:01:c8:5e:89:9f:85:93:05:46:d6:97:54:30:77:
                    0d:49:6a:a2:26:ad:ee:2e:dc:a7:1d:22:df:fa:78:
                    cf:42:02:84:c3:ee:c4:3d:45:49:9a:26:f9:11:11:
                    30:70:31:ed:18:4a:09:f1:b8:7d:13:57:f3:c3:67:
                    51:50:a7:52:78:f7:19:71:4f:c8:f3:29:39:dd:e0:
                    3b:7b:b3:2d:cd:30:3b:14:9d:3b:c9:b6:a1:a3:74:
                    fb:cc:a3:a0:e6:3c:8a:be:a0:67:4e:da:58:73:fe:
                    30:00:bc:fc:6c:bc:37:dd:29:09:86:ce:76:6a:b0:
                    2e:e9:ec:8b:1e:1f:df:80:e8:84:b8:5e:84:86:98:
                    43:8c:7f:27:89:29:65:d6:2a:ca:a9:8d:57:28:97:
                    ee:50:36:6a:a9:14:0f:f1:cc:ab:b5:74:f4:67:8c:
                    f9:74:cf:c2:63:d4:bd:8c:98:68:a6:99:6c:2b:94:
                    c8:0b:ff:ae:68:ba:3c:84:02:58:4b:70:cd:a6:ef:
                    92:0a:7e:b9:f6:0c:ed:b3:6c:7e:bf:1d:bb:b5:e9:
                    9a:03:03:e8:e8:dc:89:b4:f3:77:93:89:63:cf:79:
                    86:02:0e:27:3d:19:65:ed:6a:0b:e5:0b:c1:38:c2:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:0F:34:A1:C6:25:2A:FD:E5:27:66:EC:79:35:65:2C:38:1B:97
            X509v3 Authority Key Identifier:
                keyid:EC:C4:76:EE:F0:02:50:78:A7:6C:96:EE:37:71:94:22:8F:90:C3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/ECC476EEF0025078A76C96EE377194228F90C3A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ECC476EEF0025078A76C96EE377194228F90C3A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQBZfaM31vw31vmd6fvD8e1UHg7epaSscr4HbGgJrZrR/0/323830343a323034343a3a2f33322d313238203d3e203532373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2044::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:81:5b:b7:d7:78:b1:fa:48:db:9b:17:6b:83:ad:2e:13:
         24:95:95:d9:c7:3f:a8:9e:c2:7d:b8:7a:3e:85:5c:ba:9e:9e:
         41:01:20:31:2d:a0:49:0d:1d:f8:7a:d7:74:cc:dd:e8:a4:ac:
         66:69:10:c1:65:76:3d:ad:6c:cd:80:16:9d:e9:f9:e4:54:8a:
         54:bc:12:45:35:db:b9:a2:cd:41:1b:a1:22:8b:55:26:fe:5d:
         ab:b9:dd:c0:55:71:6f:bf:05:fa:a8:c8:19:b7:c1:d3:53:b2:
         d8:79:e9:d2:71:10:a6:cf:fe:bf:23:3b:9a:9b:36:4f:99:7e:
         2b:8d:3a:f8:1b:4d:88:2f:e0:d4:d0:ec:60:de:10:ae:15:5c:
         f7:c6:66:0e:b0:1a:18:0d:3d:eb:39:9a:53:c0:d7:67:e4:8b:
         82:fd:32:66:6a:ce:d9:32:88:60:b4:95:dc:0f:b2:e8:49:01:
         ad:66:8c:20:0c:63:57:f9:88:37:37:9f:a5:6b:59:28:f8:22:
         4e:95:22:66:c0:19:97:e4:1f:36:8a:20:23:23:c0:cd:e9:b3:
         35:b0:d9:d6:4d:7e:72:a6:38:96:f5:37:e7:44:2f:32:80:c5:
         e0:53:23:a8:da:38:ad:87:4a:4b:cb:17:52:b0:e8:72:d5:26:
         aa:1f:6d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:32 2025 by rpki-client