Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
File:                     323830343a353465303a3a2f33322d3336203d3e20323638363735.roa (raw, json)
Hash identifier:          0JxL9/zEdcf7OUet1WrDOcI5v0ZM284F9ayvZ1DE/IQ=
Subject key identifier:   F0:F1:A7:B4:29:E5:3E:C3:F7:E9:68:91:FF:4E:08:27:3B:7C:01:90
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       66789C531482F9443521D9727555F6BC5CCF9E56
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
Signing time:             Tue 08 Sep 2026 15:00:00 +0000
ROA not before:           Tue 08 Sep 2026 14:55:00 +0000
ROA not after:            Tue 07 Sep 2027 15:00:00 +0000
asID:                     268675
IP address blocks:        2804:54e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:78:9c:53:14:82:f9:44:35:21:d9:72:75:55:f6:bc:5c:cf:9e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Sep  8 14:55:00 2026 GMT
            Not After : Sep  7 15:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:c8:eb:31:66:f2:f6:99:c2:91:9c:00:53:
                    96:76:7a:47:e0:b4:5f:20:18:29:f1:fb:cf:b7:82:
                    1e:b6:62:84:eb:e1:69:12:f1:78:7e:1f:31:e7:11:
                    9a:c8:d1:33:98:31:37:cb:38:ea:ed:6f:34:f2:3b:
                    db:8d:d8:1e:83:9b:77:b2:4d:55:83:fe:84:d9:83:
                    b2:9f:08:28:3f:e2:32:64:0d:af:ae:2e:ed:bf:21:
                    c7:e9:9b:ba:24:3b:6e:f3:dc:04:b6:9c:b4:3b:3d:
                    10:54:a9:bf:7e:27:64:31:6c:84:2f:25:61:bc:e7:
                    d9:58:f6:8f:9a:c9:b6:2f:f0:30:9b:4c:e0:fe:87:
                    c6:2d:08:9d:89:4f:39:03:e3:63:4e:6a:a9:7a:6d:
                    f9:0d:47:d0:16:26:da:45:b4:a4:ef:20:64:66:bc:
                    7e:93:bf:8e:27:f0:26:71:aa:1d:41:38:4f:8f:61:
                    28:14:87:8c:37:09:bb:f2:a2:3f:3e:c2:5b:5d:0f:
                    4f:79:88:ec:1c:1c:5b:41:5c:7f:10:33:2e:4b:6b:
                    fc:fe:49:96:ce:99:a0:86:a5:eb:76:56:f1:e2:02:
                    8b:ab:3e:85:8f:37:9e:22:92:3c:29:be:2a:d4:b4:
                    c8:9f:59:f1:10:b0:bb:03:6c:0d:13:27:ed:7d:23:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:A7:B4:29:E5:3E:C3:F7:E9:68:91:FF:4E:08:27:3B:7C:01:90
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:fe:f7:54:82:5e:e1:ec:19:76:2a:10:6e:7d:32:d3:10:
         4a:3b:fe:05:59:0a:e9:b7:c6:9a:06:6a:db:83:37:f8:73:bb:
         c2:24:0a:7e:a1:49:0c:ec:47:df:18:b4:ce:c9:ba:73:01:d6:
         10:35:f3:c5:5f:a6:13:0b:0a:42:04:e2:cb:03:3b:3f:a6:f1:
         d8:a3:61:04:04:d7:22:40:a9:41:a0:22:92:b0:ee:c9:17:e9:
         11:d2:96:b9:22:56:20:f0:9c:85:7d:eb:94:c0:ef:b3:5d:4e:
         2b:9e:ef:8d:40:65:52:0b:99:53:18:60:e7:c4:4d:2f:e9:13:
         4c:eb:e7:17:ee:72:db:c3:0c:59:10:1d:ec:47:cf:b3:63:12:
         0e:0b:ec:f5:a3:38:18:3e:4f:5a:33:0e:58:f0:4b:62:b1:93:
         a2:7d:e7:c9:23:f4:bf:17:7d:5c:51:a8:75:d1:59:c3:c6:57:
         98:dd:d1:ff:02:84:29:89:ad:b3:09:30:7c:34:8c:4a:1e:a2:
         68:bf:6f:43:04:57:f4:41:b6:c1:d9:e5:92:2a:40:76:b4:90:
         e6:a3:a9:e9:fe:4a:8d:f8:a3:ef:7b:79:36:cf:42:b3:c8:4a:
         db:e3:c1:3d:0e:65:a3:c9:66:be:79:55:90:11:42:23:3f:78:
         54:27:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----