Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa
File:                     323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa (raw, json)
Hash identifier:          Tq2w23tqhH8NlzWdagW7yRpqVM6rEwmtngKPgWdEvwE=
Subject key identifier:   EE:2D:EF:0D:95:B6:21:7E:5F:27:54:9E:23:06:FA:93:98:1A:8D:DD
Certificate issuer:       /CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
Certificate serial:       6413E5956E0DB0FC6B00F71CCED83FE768AFC621
Authority key identifier: D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa
Signing time:             Thu 16 Oct 2025 11:48:27 +0000
ROA not before:           Thu 16 Oct 2025 11:43:27 +0000
ROA not after:            Thu 15 Oct 2026 11:48:27 +0000
asID:                     271108
IP address blocks:        2804:7660:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl
                          rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:13:e5:95:6e:0d:b0:fc:6b:00:f7:1c:ce:d8:3f:e7:68:af:c6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D478C8921C1F9837BE0DD110D7EC974DA1766D1D
        Validity
            Not Before: Oct 16 11:43:27 2025 GMT
            Not After : Oct 15 11:48:27 2026 GMT
        Subject: CN=EE2DEF0D95B6217E5F27549E2306FA93981A8DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:14:9c:ad:c6:5a:c5:0f:8a:13:09:cd:9c:
                    2e:5b:a4:77:97:52:10:c7:a9:44:e6:87:79:2b:06:
                    19:10:6f:66:71:8c:85:8f:3e:30:0b:3b:d6:34:8c:
                    8a:73:2f:dc:8c:9d:78:f0:24:60:bc:f2:36:f5:ea:
                    fe:c0:f1:78:43:ae:03:a9:bd:eb:2d:dc:7c:9c:c0:
                    86:b7:a2:8c:d7:03:f0:f9:aa:ea:0b:c5:92:62:3f:
                    df:ca:b2:d1:24:a6:af:84:8e:98:8d:87:6e:8e:88:
                    f2:b9:56:51:1c:68:c2:07:79:24:70:3e:e5:a6:d7:
                    e7:91:3d:23:10:ed:bf:a1:db:ae:30:a7:88:e7:26:
                    90:3a:36:8d:aa:ce:b2:21:05:e4:4c:aa:0e:19:55:
                    ac:da:45:32:39:15:12:bd:97:58:8a:45:a1:6a:55:
                    c6:de:df:7d:de:01:11:db:20:e7:17:9a:95:49:7a:
                    20:36:9f:e1:eb:4c:24:c3:28:89:c3:92:32:d5:bb:
                    56:e4:9b:6c:13:4c:cd:26:93:57:c4:01:7d:08:22:
                    10:42:3b:08:93:ec:fc:09:4b:65:5e:96:96:b0:0d:
                    53:e5:d6:8f:d9:2a:ec:d3:05:40:69:fa:29:cb:61:
                    c9:61:09:85:b3:43:7e:df:13:9e:15:89:51:e6:ad:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:EF:0D:95:B6:21:7E:5F:27:54:9E:23:06:FA:93:98:1A:8D:DD
            X509v3 Authority Key Identifier:
                keyid:D4:78:C8:92:1C:1F:98:37:BE:0D:D1:10:D7:EC:97:4D:A1:76:6D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D478C8921C1F9837BE0DD110D7EC974DA1766D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/323830343a373636303a383030303a3a2f33332d3333203d3e20323731313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7660:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         00:62:20:76:8b:c9:64:21:a7:f7:fe:d8:6d:f5:0c:32:12:9f:
         b3:0e:89:a0:07:bd:9e:57:66:f5:2f:db:62:51:b3:e3:db:bf:
         0e:a8:fc:d5:41:05:b1:38:f7:bc:15:61:03:83:8d:45:26:25:
         e3:26:54:3e:ff:57:09:b8:d2:6d:88:32:28:c2:27:9f:f4:0a:
         54:ef:ea:fb:2e:f0:c8:b1:73:5b:61:89:19:f4:0c:3a:50:0c:
         e2:d7:c3:c1:f4:1d:84:94:5f:85:02:71:03:6f:5b:e8:64:b0:
         4d:a8:18:12:e7:f2:a4:7a:1a:91:c3:b9:1f:14:37:5b:c1:4f:
         ee:05:70:48:5d:ba:99:08:25:56:0a:16:be:07:fa:12:07:e3:
         f4:80:f7:19:71:38:e1:38:4d:fd:8b:a0:32:c5:49:8b:e2:cd:
         62:07:cf:63:0a:e3:8b:20:ec:91:4e:d6:5f:3c:c0:14:8d:74:
         ab:f3:7f:55:b8:e4:1e:57:71:04:4c:d6:65:c3:30:bc:af:af:
         43:c5:3a:a9:6b:e1:2f:52:cd:0a:9a:90:80:54:70:79:62:cf:
         85:1b:c0:91:66:50:54:d6:bd:cc:47:f5:59:d6:d4:33:1e:9e:
         40:f6:46:7c:63:e9:a5:56:e6:17:f4:9d:cb:9b:53:1a:34:e2:
         f2:4f:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:10:41 2025 by rpki-client