Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
File:                     323830343a353734633a3a2f33322d3332203d3e20323638303537.roa (raw, json)
Hash identifier:          D4fDiQS0N/bSn+j19KOgW9lK2ZaW4wnjU0Y641p5zC4=
Subject key identifier:   7E:6D:21:F9:B2:6D:2B:47:53:F6:00:F6:6E:32:81:4D:F2:E4:3C:C7
Certificate issuer:       /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
Certificate serial:       5854A25DD9D374521618609B078FB8BD3C605B53
Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa
Signing time:             Mon 06 Oct 2025 09:17:58 +0000
ROA not before:           Mon 06 Oct 2025 09:12:58 +0000
ROA not after:            Mon 05 Oct 2026 09:17:58 +0000
asID:                     268057
IP address blocks:        2804:574c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:a2:5d:d9:d3:74:52:16:18:60:9b:07:8f:b8:bd:3c:60:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
        Validity
            Not Before: Oct  6 09:12:58 2025 GMT
            Not After : Oct  5 09:17:58 2026 GMT
        Subject: CN=7E6D21F9B26D2B4753F600F66E32814DF2E43CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:68:a0:8a:82:75:ab:88:de:58:6e:fe:65:
                    fc:23:1b:1c:16:84:c1:8b:21:be:84:59:33:b3:54:
                    c7:cc:9a:14:85:e4:5d:9c:bf:83:48:04:b2:4a:b2:
                    b1:48:3c:80:bc:39:42:3d:b2:6f:87:45:64:cd:b4:
                    36:6e:87:b0:67:ba:6c:d4:18:a4:a5:46:56:8a:20:
                    2e:52:94:56:30:ab:5e:45:09:f1:0a:f0:5e:5e:d9:
                    b1:20:1d:67:f1:ec:d5:da:da:64:28:68:c0:a4:af:
                    b9:70:d1:30:a1:76:e8:f8:8b:d4:a9:1c:0a:76:20:
                    b5:cd:90:a4:15:4a:d1:fd:17:7f:45:14:99:fc:f7:
                    78:b6:55:6e:28:c0:f3:8b:63:58:f4:b4:e8:3c:37:
                    48:e9:23:3c:32:d9:96:e9:db:43:28:17:dd:33:9b:
                    61:4d:48:94:eb:48:44:fe:6c:0a:41:a4:9b:e0:9c:
                    fe:04:ee:8f:77:66:6e:b5:c9:94:ad:cb:a2:e2:80:
                    24:1d:4c:a0:d5:b9:0a:f3:11:db:35:fc:fd:a1:5c:
                    05:a3:75:d8:8f:9e:a7:ce:54:68:69:50:ba:21:2f:
                    91:db:03:82:dc:4e:43:62:55:48:86:e1:e7:5f:09:
                    fe:8e:94:2d:e6:94:40:a9:07:da:e9:de:de:0e:e5:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:21:F9:B2:6D:2B:47:53:F6:00:F6:6E:32:81:4D:F2:E4:3C:C7
            X509v3 Authority Key Identifier:
                keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33322d3332203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574c::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:11:f6:a6:6e:38:fe:05:93:08:d4:07:81:6b:f4:da:19:
         0a:69:d9:7b:60:ec:61:4e:15:8d:85:94:2b:5d:78:d0:5a:8a:
         85:87:a6:61:39:d0:b5:9f:3f:93:f9:81:4a:ae:1a:b9:2c:8a:
         ed:c6:35:94:88:bc:f3:2e:0a:69:22:9b:c3:b9:21:9d:f3:9f:
         c4:4a:2b:e2:74:f9:7d:36:d2:10:ea:cb:2f:86:2a:83:e5:63:
         a1:c5:c6:43:84:1a:fb:45:10:0c:c9:26:80:73:fe:89:0f:a6:
         12:95:fb:bf:f4:77:11:99:e8:ef:2c:fe:52:21:7e:31:a8:88:
         e4:4f:e8:60:e2:4e:60:ee:a4:4f:81:8f:72:dc:02:f0:35:4a:
         aa:ce:90:ad:a1:d3:7f:3a:5b:7b:72:84:dc:e0:78:e4:dd:9d:
         53:44:1f:28:ac:2e:40:56:7e:8a:7e:6b:8f:83:fd:e4:b7:d4:
         b4:bc:60:f4:4b:7f:eb:e9:98:0f:f7:7f:8b:b1:0d:e2:26:f4:
         4e:1c:df:6c:ea:85:14:2d:bd:7a:10:27:3b:a0:ff:e0:31:66:
         3c:23:97:3f:9c:df:4c:78:45:8e:ad:c3:c6:05:23:71:a5:c7:
         b8:88:03:26:06:34:9d:37:86:1f:d9:06:b9:0f:db:4f:f3:bb:
         17:8a:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:36 2025 by rpki-client