Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa
File:                     323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa (raw, json)
Hash identifier:          VE1qeUxyj4re+MpcWb35nsqMTtjiXSq0bCQyWt3cCBU=
Subject key identifier:   1C:A0:3A:75:24:16:D7:30:5C:1B:4A:9C:2C:EA:11:95:63:70:58:37
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       37D742861E4B7D6EF4D2C870E0C128046B1BD9AA
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa
Signing time:             Tue 07 Oct 2025 14:28:53 +0000
ROA not before:           Tue 07 Oct 2025 14:23:53 +0000
ROA not after:            Tue 06 Oct 2026 14:28:53 +0000
asID:                     268675
IP address blocks:        2804:54e0:8b01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d7:42:86:1e:4b:7d:6e:f4:d2:c8:70:e0:c1:28:04:6b:1b:d9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Oct  7 14:23:53 2025 GMT
            Not After : Oct  6 14:28:53 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:41:1b:d2:2e:6d:3d:17:41:72:be:7d:3b:
                    16:dc:c1:2f:e1:dc:da:ab:55:b6:98:1c:f3:30:83:
                    e1:1b:a7:38:ee:f4:6a:ec:d4:18:db:ae:60:d2:a0:
                    4e:4a:67:79:3b:65:33:e5:82:d2:84:60:6a:89:2c:
                    e8:90:fa:a4:3f:d2:c2:9d:5b:da:d1:81:97:60:35:
                    78:bc:55:c7:b5:84:22:f8:b4:d7:7d:fb:a8:5a:b0:
                    ea:1c:84:fe:12:09:43:8e:cb:de:a7:23:56:53:27:
                    50:05:a2:14:b3:f2:33:c3:7d:be:49:3b:3d:47:99:
                    23:8e:23:b2:6d:c8:52:87:a8:86:16:58:b8:79:9e:
                    f7:d9:bc:70:06:c4:d2:c7:ab:17:7e:e6:7f:73:23:
                    ff:7d:30:97:79:07:3f:69:cd:8d:20:54:8c:7e:f6:
                    35:8f:68:e2:81:18:42:00:ea:0b:b4:d6:c9:39:76:
                    51:57:50:c4:ff:1f:aa:18:b5:2c:f8:ad:d3:4b:04:
                    c1:c4:f1:27:75:ef:64:e1:a8:98:b0:5a:5e:58:5f:
                    f1:e8:fc:5b:db:d8:09:c1:ab:c4:5c:81:5e:ad:3b:
                    39:ca:b9:ef:8a:3a:ec:6a:4c:7e:ed:b4:44:41:f9:
                    fd:ba:7c:5b:eb:97:fa:89:76:30:f9:5f:d1:63:f8:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:3A:75:24:16:D7:30:5C:1B:4A:9C:2C:EA:11:95:63:70:58:37
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386230313a3a2f34382d3438203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0:8b01::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:ac:72:5e:07:dc:32:5d:db:ef:ab:8c:8a:62:e3:c3:16:
         7f:5e:a5:c0:f9:db:55:bb:1e:c3:a1:4a:b5:5d:20:9a:6a:f6:
         de:81:fa:81:72:d1:8c:6f:06:e2:32:4a:5e:9c:f6:a2:d1:c2:
         26:67:77:dc:bf:9f:8e:d7:6e:ec:7f:06:2f:28:b6:b8:3c:cf:
         a9:87:d7:08:7c:1e:84:ae:e2:b6:8d:21:1f:73:db:b7:2b:6d:
         1b:80:f3:84:23:c5:b5:f8:5b:34:90:c5:c3:fa:66:bb:8f:ee:
         9c:96:eb:57:11:41:68:bf:62:26:36:e4:86:76:75:5e:ac:64:
         c1:ab:b9:ca:86:02:22:36:3e:33:68:60:61:1c:d3:9a:89:80:
         21:a2:94:4c:b2:f6:57:61:08:1b:43:5d:72:94:24:60:e2:e5:
         9f:7f:ae:9b:2c:06:c9:ff:a1:ba:59:35:bc:7b:43:26:04:b2:
         96:8b:02:43:9b:6f:73:42:67:b0:61:2d:64:61:73:4f:fd:c8:
         11:4f:e6:51:39:59:87:9c:a4:22:63:d4:5c:0a:42:88:08:f9:
         52:1d:67:fe:e1:7b:e4:dc:48:9e:1f:e6:da:1f:20:21:81:c5:
         00:3a:10:15:1e:ee:60:67:fd:4f:84:d3:e8:8d:5e:e9:99:94:
         58:a5:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:48 2025 by rpki-client