Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa
File:                     323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa (raw, json)
Hash identifier:          wanUmUmfRbtkdpQtWBM1+BcNNmo3ubfd5wHS5o71Orw=
Subject key identifier:   42:61:F8:7C:EF:23:16:3B:7B:ED:EE:EB:EB:FF:73:3A:7B:37:BE:84
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       5ED31C22813827F7C24B853E88BF7F7F015E7B3B
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa
Signing time:             Tue 07 Oct 2025 14:28:28 +0000
ROA not before:           Tue 07 Oct 2025 14:23:28 +0000
ROA not after:            Tue 06 Oct 2026 14:28:28 +0000
asID:                     268675
IP address blocks:        2804:54e0:8a01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d3:1c:22:81:38:27:f7:c2:4b:85:3e:88:bf:7f:7f:01:5e:7b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Oct  7 14:23:28 2025 GMT
            Not After : Oct  6 14:28:28 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:a5:62:f5:a4:ae:50:71:82:db:83:99:38:
                    0e:6d:43:9f:44:6b:b6:91:e5:32:10:04:d9:8b:b9:
                    a6:ec:26:84:53:62:03:ba:74:e6:3a:22:99:18:c4:
                    61:5d:2c:0a:04:07:d3:54:75:62:09:7b:6d:4f:8c:
                    8c:9e:0c:10:49:b7:b2:ae:82:bc:b5:2c:da:bd:00:
                    0d:89:f7:16:4e:38:f8:22:91:e4:2b:ab:b9:84:66:
                    14:6b:6e:c4:f7:89:ec:22:ac:83:2b:cf:86:5a:da:
                    80:8b:48:14:7f:7f:b6:bd:af:2c:a0:f8:b0:95:ab:
                    4d:85:21:7e:dc:e2:9e:9c:19:62:d2:39:a4:a1:d6:
                    0a:f5:81:20:f2:ec:57:58:7c:09:88:95:6c:0a:d5:
                    5f:99:f7:bd:84:df:22:b4:08:d3:ea:42:40:72:e4:
                    d8:e6:a6:25:27:c0:3e:0e:44:8a:8a:7a:3a:91:09:
                    3d:3a:2d:7a:bc:72:77:fb:34:ed:4f:35:24:1f:d8:
                    e4:5a:87:19:ff:d3:24:f1:28:44:39:07:18:b9:68:
                    cf:63:71:71:32:64:a7:72:59:95:5b:90:e2:66:88:
                    26:0e:9d:3b:d0:49:32:75:ad:2d:25:71:67:d7:f3:
                    1f:15:c8:7c:eb:77:e9:c1:64:e8:18:f5:d3:8c:f2:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:F8:7C:EF:23:16:3B:7B:ED:EE:EB:EB:FF:73:3A:7B:37:BE:84
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0:8a01::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:28:7e:90:7a:5e:3f:4e:c3:67:01:54:7d:61:f8:af:ab:c5:
         a4:23:43:e4:75:9e:c2:79:ee:34:73:75:9f:c7:d4:3b:60:c6:
         8b:19:3a:cc:b1:6d:67:bc:42:38:1f:1e:1a:0d:f6:cd:29:cf:
         f7:37:48:e4:1c:82:e6:9d:9e:99:d1:66:c4:4e:e3:85:8d:4c:
         27:f4:db:5d:85:e4:8c:46:95:79:a6:c2:c0:1f:91:c2:65:8a:
         d8:81:77:b1:b1:15:d1:1a:89:94:60:ee:c5:7a:f7:00:1d:c2:
         4b:07:d9:9d:47:0f:a0:96:af:a5:6d:af:e4:b4:5e:07:6c:91:
         3c:4d:c2:22:ab:e3:ae:23:9b:b2:34:4a:95:a9:f5:ca:cc:2d:
         4c:a5:14:c4:f4:18:c9:09:96:1d:67:1e:ca:25:88:50:b6:fe:
         f1:1b:cb:a6:a1:25:83:f1:7a:2a:cf:c7:7f:d1:79:e4:df:72:
         f4:21:0a:51:15:9d:48:e2:d4:ef:3a:ed:83:e8:b7:c9:56:3e:
         26:a5:c7:99:48:c9:d9:16:3e:eb:89:af:a5:14:ff:a7:37:db:
         66:91:e3:bf:2a:93:ce:d3:1f:19:76:59:6a:79:93:2e:e2:f1:
         ea:32:05:3b:73:94:f3:63:e8:21:b5:d0:8e:61:f0:82:85:19:
         fe:ad:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:47 2025 by rpki-client