Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33332d3333203d3e20323730383738.roa
File:                     323830343a373264343a3a2f33332d3333203d3e20323730383738.roa (raw, json)
Hash identifier:          jUhm8dS62sNjbLDnfPS0rjq0HpZqa2kIJz2m3ZNjPvM=
Subject key identifier:   2C:18:7B:CE:32:10:D8:C5:95:CA:91:05:C0:DB:77:81:15:2C:D8:65
Certificate issuer:       /CN=F323C8A2CD672636B55EC43AB298AEB42D849558
Certificate serial:       26C7AEA5024F6791D7BF0874D73B16FBF722FB6D
Authority key identifier: F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33332d3333203d3e20323730383738.roa
Signing time:             Tue 02 Sep 2025 22:20:04 +0000
ROA not before:           Tue 02 Sep 2025 22:15:04 +0000
ROA not after:            Tue 01 Sep 2026 22:20:04 +0000
asID:                     270878
IP address blocks:        2804:72d4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c7:ae:a5:02:4f:67:91:d7:bf:08:74:d7:3b:16:fb:f7:22:fb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F323C8A2CD672636B55EC43AB298AEB42D849558
        Validity
            Not Before: Sep  2 22:15:04 2025 GMT
            Not After : Sep  1 22:20:04 2026 GMT
        Subject: CN=2C187BCE3210D8C595CA9105C0DB7781152CD865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:43:43:83:e0:63:7f:8e:49:0d:b9:6c:2e:
                    89:94:93:80:97:c6:16:91:ed:ef:69:ba:63:0b:65:
                    36:4f:0a:11:38:06:dd:5a:cc:d3:2a:0e:10:de:72:
                    db:64:28:3d:70:6c:73:e2:bb:d6:37:ea:d9:f7:78:
                    d8:7a:60:19:d9:2c:23:74:53:7a:18:e2:e1:38:45:
                    3d:a1:14:e7:01:e2:f4:d4:40:c8:21:f7:56:f8:5f:
                    63:75:07:00:74:44:0f:c3:3b:20:12:ee:fc:62:b8:
                    3c:39:a7:24:a7:0f:0f:d1:07:39:2f:b8:33:18:8b:
                    c7:ac:e0:e2:2b:7a:05:dd:b4:c6:7c:2d:45:df:d1:
                    25:6a:f6:d1:ce:50:2e:25:a8:dd:57:a9:b9:72:02:
                    8a:e6:6e:8a:ff:61:f9:34:ab:b1:d8:e9:30:77:4a:
                    47:8a:e7:da:e8:91:1f:5c:73:51:c4:ee:4c:a6:68:
                    0d:4b:11:c7:d9:a4:94:be:9f:38:9d:86:e3:e0:c2:
                    8d:2d:6c:18:9b:e2:75:b0:da:34:24:41:22:05:cf:
                    f9:ae:8f:08:62:e1:75:17:27:8a:7b:bb:5e:17:70:
                    9a:1c:80:b7:24:56:83:57:a5:b4:1c:75:d8:80:8b:
                    08:ba:c8:88:1a:85:5e:1e:03:db:db:80:6c:17:e6:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:18:7B:CE:32:10:D8:C5:95:CA:91:05:C0:DB:77:81:15:2C:D8:65
            X509v3 Authority Key Identifier:
                keyid:F3:23:C8:A2:CD:67:26:36:B5:5E:C4:3A:B2:98:AE:B4:2D:84:95:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/F323C8A2CD672636B55EC43AB298AEB42D849558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F323C8A2CD672636B55EC43AB298AEB42D849558.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/323830343a373264343a3a2f33332d3333203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         70:89:ff:d2:20:ce:90:9d:b3:9c:77:de:41:d7:2d:ca:fb:4f:
         35:87:33:80:a2:f5:b7:c5:0c:71:65:88:19:89:2a:8d:f8:7e:
         2f:0a:c3:91:2a:02:54:13:c8:f6:10:cc:c0:b2:5f:3f:54:2b:
         ec:0f:bd:3d:02:2e:25:9c:f9:1b:53:cb:4b:ce:5b:8d:22:fe:
         67:aa:16:ab:75:0c:67:f8:ac:31:94:58:5d:86:26:a0:f5:2a:
         84:34:49:43:33:ab:54:53:ac:86:e0:6c:64:b2:04:52:a6:a6:
         79:b8:49:e6:b6:8e:91:ee:48:9e:91:6f:b0:91:e1:f8:30:8d:
         bf:63:c1:5c:00:12:1a:c2:18:5a:77:4d:4f:d0:b7:eb:af:c7:
         c5:bd:03:ca:38:64:83:84:1a:7e:dc:ed:7a:cc:04:04:ec:bb:
         e5:6a:1b:85:ba:51:6f:5c:56:86:cd:28:f7:87:30:26:00:b1:
         dd:f8:2e:1a:15:af:f8:7b:2d:8b:27:32:74:61:d4:a8:9d:15:
         49:60:47:63:53:ec:c8:41:d8:01:42:7b:71:16:3d:20:be:84:
         bc:81:e3:8e:2a:92:74:5b:31:14:01:7a:7b:82:50:51:2c:79:
         46:3e:bb:4d:07:9b:9e:3e:bb:db:89:d4:10:92:74:17:14:32:
         33:44:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:05 2025 by rpki-client