Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa
File:                     323830343a373762343a3a2f33322d313238203d3e20323731313934.roa (raw, json)
Hash identifier:          4ym1u9j+LIO/Js9gYBWNnBwh6nxImAIdElLnQlqlcpc=
Subject key identifier:   EA:C5:01:07:08:2D:95:3A:DC:4C:B7:E2:B8:2B:3B:72:7D:4F:BA:BF
Certificate issuer:       /CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
Certificate serial:       02333982383A2D44247430ABE131DC831257C1E3
Authority key identifier: 9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa
Signing time:             Mon 06 Oct 2025 23:37:30 +0000
ROA not before:           Mon 06 Oct 2025 23:32:30 +0000
ROA not after:            Mon 05 Oct 2026 23:37:30 +0000
asID:                     271194
IP address blocks:        2804:77b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl
                          rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:33:39:82:38:3a:2d:44:24:74:30:ab:e1:31:dc:83:12:57:c1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA244F46829F581C9D94D1AE427B1A856BF970D
        Validity
            Not Before: Oct  6 23:32:30 2025 GMT
            Not After : Oct  5 23:37:30 2026 GMT
        Subject: CN=EAC50107082D953ADC4CB7E2B82B3B727D4FBABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:14:1d:6e:0e:52:f2:25:27:f2:04:9e:ce:
                    9d:d7:94:e2:7c:79:44:ab:e5:8a:4e:5a:7f:b4:09:
                    46:a2:1c:82:77:08:71:d6:82:57:bd:3c:b5:9f:0e:
                    09:56:ad:b7:27:64:ad:2a:68:f8:41:88:2e:f9:bf:
                    2f:58:8c:5d:cb:f8:fa:fe:d8:0a:ef:2a:1d:f6:12:
                    88:35:1b:be:a0:05:e3:42:d6:7c:a7:f0:94:eb:3a:
                    98:a2:cc:3d:49:49:6f:10:7f:b6:bd:e9:dc:bd:df:
                    cf:79:37:c4:01:cf:ad:59:10:b0:2b:b2:15:bb:59:
                    a9:5d:f9:84:dc:50:b6:9f:d5:2e:88:88:b8:20:5a:
                    4b:48:14:c1:c6:b7:19:f6:0a:91:d0:08:08:6a:a8:
                    83:7f:38:3b:f5:85:f1:ea:64:85:b9:c5:61:bb:9a:
                    e3:02:58:84:02:3d:a2:f5:35:48:d3:61:f8:d0:a1:
                    9a:1a:34:37:44:e6:24:12:fa:1f:90:fc:d9:ce:f6:
                    bf:59:fa:8e:f7:6f:41:97:90:aa:bc:2b:83:b2:23:
                    df:58:fb:01:a1:6d:4f:81:02:80:07:4f:e3:ce:1e:
                    91:46:61:0c:07:b9:e0:35:9a:c8:07:93:fe:31:98:
                    89:5a:db:25:b3:b9:c0:2e:f2:07:f4:bb:8c:1b:33:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C5:01:07:08:2D:95:3A:DC:4C:B7:E2:B8:2B:3B:72:7D:4F:BA:BF
            X509v3 Authority Key Identifier:
                keyid:9F:A2:44:F4:68:29:F5:81:C9:D9:4D:1A:E4:27:B1:A8:56:BF:97:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/9FA244F46829F581C9D94D1AE427B1A856BF970D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA244F46829F581C9D94D1AE427B1A856BF970D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwKJMvQpLbrwSZmNMMN6DPjdFMAVQGBNXrDQ8x9DBxwB/0/323830343a373762343a3a2f33322d313238203d3e20323731313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:a3:f2:c7:53:a7:2c:87:e0:e9:b3:d7:12:03:7e:18:b6:10:
         6b:df:f0:d2:05:52:d1:d7:58:41:b8:35:4b:4a:d1:cf:00:6c:
         bb:62:02:53:86:ac:13:e4:3a:b9:f5:99:9f:e1:df:f9:4e:c0:
         e5:08:9c:a6:a2:43:60:b4:58:aa:81:27:34:fd:e2:96:bc:a0:
         67:2c:91:22:5d:9d:b5:dd:a2:5a:15:63:32:e8:52:7d:10:e4:
         80:a2:ff:51:00:cd:34:a5:e1:1d:f4:1e:51:13:d4:6f:c5:8a:
         6f:cf:a1:ec:65:3e:ac:da:45:98:14:bb:ce:b1:a0:5b:eb:b7:
         d6:44:27:6f:d0:8a:c5:06:5b:62:e4:39:36:69:85:0f:0b:96:
         82:bb:34:ab:60:f9:c1:6c:3d:dd:34:ef:f8:04:2e:b6:2c:8b:
         1b:7f:f0:f2:7e:52:8d:68:98:fa:c4:b8:2b:44:0b:77:97:44:
         16:aa:56:29:c3:a4:9b:c9:87:e0:78:7b:63:5e:d4:cd:fd:48:
         03:5e:dd:cd:93:4e:5a:b8:e1:27:a1:4f:37:f1:b3:a1:29:71:
         13:43:39:41:3c:c9:f0:04:c3:01:7e:31:30:b6:50:66:ef:8b:
         5e:31:9d:0a:38:9d:c2:95:ff:33:24:67:a1:1c:08:e4:4e:45:
         09:e6:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:32 2025 by rpki-client