Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
File:                     323830343a353465303a3a2f33322d3336203d3e20323638363735.roa (raw, json)
Hash identifier:          lqVm0bL2hIM52OBXOBwLNVlabBQIcs3ZhHAfDb+OBIU=
Subject key identifier:   26:E6:60:1F:B3:76:BE:86:94:75:E9:A2:36:43:19:4A:35:DA:11:B8
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       737D7CDC304305780D8E57CE24C8A4A384BE60AF
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa
Signing time:             Tue 07 Oct 2025 14:28:28 +0000
ROA not before:           Tue 07 Oct 2025 14:23:28 +0000
ROA not after:            Tue 06 Oct 2026 14:28:28 +0000
asID:                     268675
IP address blocks:        2804:54e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7d:7c:dc:30:43:05:78:0d:8e:57:ce:24:c8:a4:a3:84:be:60:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Oct  7 14:23:28 2025 GMT
            Not After : Oct  6 14:28:28 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:4a:41:00:b0:6b:0f:22:d9:2b:17:25:83:
                    07:8e:15:73:fe:1b:5d:02:db:df:da:5b:68:51:69:
                    fb:d6:96:0d:32:de:91:ee:26:30:cb:b4:34:91:e2:
                    e8:56:f4:54:66:63:42:0e:4e:ec:da:35:52:d1:e3:
                    c6:a0:f6:bc:f1:42:9f:8a:5c:d9:fd:67:61:28:41:
                    af:10:97:cf:19:ce:d1:39:2e:85:d7:f7:68:b6:c3:
                    cc:7b:1b:37:be:68:15:71:37:13:77:5d:87:4a:85:
                    4f:45:57:09:fa:25:a0:b0:90:13:84:88:63:44:37:
                    c1:a2:61:dd:a1:cf:b4:1a:40:b9:a3:21:28:72:c1:
                    f2:93:28:d3:98:e7:a6:17:83:77:63:00:8a:69:c4:
                    4e:d8:e3:c8:45:66:4b:e9:94:1e:48:f3:fd:30:1a:
                    94:75:6d:81:6a:f1:f6:b4:e0:95:24:18:94:3e:a0:
                    60:59:dc:14:2a:87:5b:e5:bc:10:17:59:a4:61:04:
                    66:51:41:5c:93:e9:53:24:b1:80:8a:88:22:0b:05:
                    a0:cc:e6:11:15:a9:2c:9d:63:2e:ec:27:97:9f:e4:
                    98:b3:8c:e0:5b:8c:6c:8b:e8:9f:a0:c9:54:c6:17:
                    f9:32:17:23:07:36:59:98:33:92:ba:1a:d4:ee:d9:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:60:1F:B3:76:BE:86:94:75:E9:A2:36:43:19:4A:35:DA:11:B8
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a3a2f33322d3336203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:7a:f6:49:14:85:e9:1e:eb:80:f9:2d:14:71:2e:56:d9:6c:
         a4:c9:4f:e3:75:02:12:2e:83:41:29:85:ad:3f:67:67:81:a9:
         c0:5c:8e:31:f0:3b:c1:4e:d6:cf:8a:7a:a3:83:83:32:da:3a:
         eb:ad:e6:e3:1b:9f:18:07:46:84:c8:99:41:54:f5:9c:99:3a:
         4b:66:4f:51:d5:76:aa:2e:18:26:69:5d:66:c0:66:9e:1c:a9:
         e6:65:8e:cf:0c:01:1b:b4:88:32:76:19:ee:3f:3c:a9:6c:c8:
         29:fa:29:65:fc:e8:76:2a:f5:d7:07:51:e7:6b:75:16:30:9e:
         8c:79:39:90:bc:64:26:50:a2:b2:7f:91:00:88:7e:64:11:3d:
         35:92:4f:c2:3f:1d:5b:ee:88:e9:42:06:86:82:0e:5d:f5:89:
         84:a8:cc:0f:04:a9:ea:34:3c:f4:e4:fe:56:1d:0d:0d:01:7c:
         14:7d:35:a9:7f:2f:b7:4b:99:10:0a:5c:ef:78:56:2d:3c:1b:
         b2:eb:2f:65:a6:16:df:f4:3a:de:7b:1b:bb:fd:07:f5:e8:55:
         11:84:bf:f5:11:06:56:e1:32:4d:66:cb:a2:b2:ab:17:f4:0d:
         d7:01:eb:22:1d:69:b1:26:b5:13:51:07:f8:5e:b2:d8:43:bc:
         45:78:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:47 2025 by rpki-client