Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33332d3333203d3e20323637353536.roa (raw, json)
Hash identifier:          sQi2/HYdvnDbIZC/EaGVjmb774w4LV4eiJKMXVC3SHY=
Subject key identifier:   74:3F:C7:FC:65:E2:8A:59:7F:B3:07:35:9E:99:99:D3:BB:F1:E9:E6
Certificate issuer:       /CN=E6ADE5BD27A972136168D70B5010155F1247CB71
Certificate serial:       1F43A6F9884CAD85D695788D8B8AECF4A005BDA8
Authority key identifier: E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa
Signing time:             Tue 14 Oct 2025 11:49:25 +0000
ROA not before:           Tue 14 Oct 2025 11:44:25 +0000
ROA not after:            Tue 13 Oct 2026 11:49:25 +0000
asID:                     267556
IP address blocks:        2804:4338::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:43:a6:f9:88:4c:ad:85:d6:95:78:8d:8b:8a:ec:f4:a0:05:bd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ADE5BD27A972136168D70B5010155F1247CB71
        Validity
            Not Before: Oct 14 11:44:25 2025 GMT
            Not After : Oct 13 11:49:25 2026 GMT
        Subject: CN=743FC7FC65E28A597FB307359E9999D3BBF1E9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:6a:76:0d:17:63:50:8f:58:5b:a8:88:40:
                    c4:22:bc:24:74:67:1d:3f:45:ea:7f:ed:8c:01:a6:
                    33:65:a2:88:41:f6:d8:f0:28:47:c0:85:7d:d5:6c:
                    ef:a0:83:f7:9c:8b:0f:ff:08:f0:2d:01:ef:be:d7:
                    52:b2:56:e9:d1:bb:53:8a:d0:a9:ab:6c:4a:e5:83:
                    fe:f1:39:fc:aa:0a:2f:94:2f:57:bc:f7:60:33:bd:
                    84:02:21:d4:0a:cb:43:e6:84:6a:d7:53:80:3b:93:
                    51:a4:cb:78:ac:43:4a:98:30:09:c1:60:81:cf:ae:
                    bf:e6:79:8e:09:cf:04:3c:d8:b7:39:1a:34:c0:68:
                    9a:de:16:24:9f:f7:d2:f8:8f:2c:7c:ec:ac:22:e6:
                    99:c0:fa:9d:a4:a9:c4:74:ba:92:a5:d6:33:f0:cc:
                    e9:70:91:2a:50:e7:ed:95:88:5e:92:4f:5f:90:8e:
                    ce:86:e3:33:ac:ec:93:a4:dd:8f:53:6c:c8:2c:c9:
                    da:9a:9f:0f:1f:17:8a:68:b8:0b:2f:33:6f:5a:97:
                    0e:25:a2:b3:66:1f:45:d1:62:3a:21:31:cc:27:63:
                    c6:02:65:c4:6a:d5:19:1a:cb:32:76:af:23:8e:fb:
                    51:72:27:74:c3:77:d2:29:d8:e0:31:51:f1:cc:c5:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3F:C7:FC:65:E2:8A:59:7F:B3:07:35:9E:99:99:D3:BB:F1:E9:E6
            X509v3 Authority Key Identifier:
                keyid:E6:AD:E5:BD:27:A9:72:13:61:68:D7:0B:50:10:15:5F:12:47:CB:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/E6ADE5BD27A972136168D70B5010155F1247CB71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6ADE5BD27A972136168D70B5010155F1247CB71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33332d3333203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/33

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:78:60:3d:89:ac:ab:36:a0:e3:35:03:43:a1:2f:e1:92:
         60:3a:7f:04:5a:cb:19:d9:e1:c6:84:4d:e9:6d:43:b3:c7:56:
         ad:f0:b1:62:05:ad:c8:8f:ba:c2:f6:ea:d9:48:ee:fe:12:16:
         e2:30:b2:55:b5:3b:9e:75:6c:d7:fd:98:b2:93:8d:d0:df:38:
         ee:e8:f1:05:7a:3d:95:89:71:38:54:9f:61:bc:78:d6:b0:83:
         42:57:6f:66:6a:14:2b:2f:5d:0a:82:35:b1:df:be:af:b4:1a:
         64:f7:4c:3f:25:38:bc:b8:e4:18:56:ac:d3:42:52:f4:31:97:
         45:6e:af:9a:d7:72:52:a0:2a:5f:3e:9b:29:64:f1:14:45:52:
         62:15:f3:4f:60:6f:26:20:78:8a:97:fc:2b:86:36:64:d9:b8:
         90:a1:28:df:67:5f:b7:9d:7e:c5:1c:64:71:27:33:bb:f6:d5:
         37:77:30:ec:ec:c3:c4:43:73:e3:0b:14:51:0d:d4:90:90:21:
         11:59:8c:f8:c6:cf:df:5d:62:48:fe:c0:23:32:de:dd:db:c2:
         75:54:da:f5:13:ef:e5:30:34:74:11:a0:6c:49:a8:63:23:b3:
         f1:17:ff:76:9a:93:16:3b:2a:0d:f7:16:20:0f:91:99:0c:3e:
         fe:93:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:15 2025 by rpki-client