Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3634203d3e203631363032.roa
File:                     323830343a373030343a3a2f33322d3634203d3e203631363032.roa (raw, json)
Hash identifier:          4CDFcSVlUkPBqCOMDjPfFPceufobG0eVCpeY+PyTvyo=
Subject key identifier:   54:17:2C:4B:9F:44:15:AB:5C:EB:71:52:26:C1:44:CF:58:79:1B:AC
Certificate issuer:       /CN=DD93E6CEC70F4FB2840733DFC82E068F6922ABC9
Certificate serial:       16E72788B9B1A0385FE15E8EBFEC8ACC231AAA27
Authority key identifier: DD:93:E6:CE:C7:0F:4F:B2:84:07:33:DF:C8:2E:06:8F:69:22:AB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3634203d3e203631363032.roa
Signing time:             Wed 20 Aug 2025 09:45:02 +0000
ROA not before:           Wed 20 Aug 2025 09:40:02 +0000
ROA not after:            Wed 19 Aug 2026 09:45:02 +0000
asID:                     61602
IP address blocks:        2804:7004::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e7:27:88:b9:b1:a0:38:5f:e1:5e:8e:bf:ec:8a:cc:23:1a:aa:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD93E6CEC70F4FB2840733DFC82E068F6922ABC9
        Validity
            Not Before: Aug 20 09:40:02 2025 GMT
            Not After : Aug 19 09:45:02 2026 GMT
        Subject: CN=54172C4B9F4415AB5CEB715226C144CF58791BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:4e:ab:15:2f:95:ca:c3:fa:a7:60:ea:3e:
                    61:86:a4:5d:67:e6:94:38:17:75:ba:41:7f:a0:8c:
                    12:b9:eb:d6:d3:ba:dd:6e:1b:68:f6:5b:f3:da:f5:
                    67:3d:8d:0f:a8:e8:9e:7a:bc:93:19:ab:55:21:25:
                    c9:5b:f1:50:04:13:70:d9:51:55:cd:ae:ff:ae:25:
                    39:fa:b5:06:c6:e4:d2:96:c4:db:4a:76:52:f9:6f:
                    cc:17:f5:72:df:35:59:75:e7:80:73:12:7b:08:0d:
                    60:e8:52:e7:63:63:ed:28:be:5c:05:f9:1a:48:16:
                    62:ba:0f:60:0f:22:db:fd:b5:dc:e3:24:72:8c:03:
                    bc:cc:d0:d2:ed:58:67:02:62:fd:5b:95:70:97:30:
                    95:bd:ff:fc:7f:94:dd:cd:b4:73:62:9a:74:4c:ba:
                    c6:c3:20:f5:3d:e6:18:ab:da:2d:c5:eb:ea:fb:5f:
                    cb:68:c6:4b:b7:cd:30:25:da:3e:c2:26:ca:13:80:
                    58:f4:51:98:31:a7:ab:49:0e:b0:27:c9:5c:60:80:
                    48:f0:5e:2f:fe:0f:0b:b2:1b:89:1e:cc:6b:4d:25:
                    0c:ec:c6:bf:3b:a6:34:e1:0f:03:be:70:88:86:b0:
                    43:f0:63:43:5a:64:51:eb:8b:4d:43:a5:2c:42:80:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:17:2C:4B:9F:44:15:AB:5C:EB:71:52:26:C1:44:CF:58:79:1B:AC
            X509v3 Authority Key Identifier:
                keyid:DD:93:E6:CE:C7:0F:4F:B2:84:07:33:DF:C8:2E:06:8F:69:22:AB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD93E6CEC70F4FB2840733DFC82E068F6922ABC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a373030343a3a2f33322d3634203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7004::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:a3:fc:0a:d6:3a:df:8f:8e:22:bb:b9:b5:23:ec:09:d3:
         db:86:d4:d9:ea:9e:6b:11:f1:94:57:9a:f1:33:87:d5:a8:aa:
         c0:83:c6:e8:5a:18:b7:aa:71:f6:1b:de:6d:e0:f2:9e:70:73:
         b4:9b:41:5a:25:a9:f3:27:4c:e8:6f:f9:f8:eb:0e:86:e4:4b:
         d4:59:17:9d:ff:89:0f:e2:53:ad:27:3a:28:90:b9:e9:a7:aa:
         39:83:a5:20:93:1d:81:ae:8d:8a:ce:ed:f8:6e:cf:76:87:ab:
         40:54:0a:c1:fc:40:03:34:2e:c0:68:ad:9a:fe:3a:9c:3e:6b:
         bf:6a:a4:1d:dd:b0:bc:c8:32:32:a9:c5:25:a5:14:b7:ea:cf:
         af:92:88:e0:79:e6:59:5b:68:e2:ff:4a:06:d8:64:06:d7:73:
         f6:79:73:d6:55:2b:0a:98:bb:8c:eb:31:aa:f5:03:ea:6a:47:
         9b:a5:3a:32:6c:bf:7e:90:58:8e:1e:cf:a8:7a:fc:82:1b:18:
         db:fa:8d:ba:86:7e:d9:a7:6f:bb:0d:34:9c:92:ab:3e:ab:14:
         52:44:2b:43:2b:e0:56:4c:08:79:a6:7c:ce:48:37:f1:b2:4b:
         83:a6:2b:c7:4c:53:a5:5b:60:a5:f7:e2:e4:40:9a:1a:98:79:
         e8:8d:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:33:45 2025 by rpki-client