Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/323830343a336431303a3a2f33322d313238203d3e20323636323531.roa
File:                     323830343a336431303a3a2f33322d313238203d3e20323636323531.roa (raw, json)
Hash identifier:          6OM5TUR8INqK6ybskaGnuewoKzCLeWsNPgoxidg6HF0=
Subject key identifier:   00:BA:88:2C:20:04:68:C9:A9:FA:90:53:99:0F:2F:A7:68:0B:4E:2E
Certificate issuer:       /CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
Certificate serial:       6E6E40BCE3463CECEA9FA562CB34401E19674491
Authority key identifier: CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/323830343a336431303a3a2f33322d313238203d3e20323636323531.roa
Signing time:             Thu 25 Sep 2025 17:33:49 +0000
ROA not before:           Thu 25 Sep 2025 17:28:49 +0000
ROA not after:            Thu 24 Sep 2026 17:33:49 +0000
asID:                     266251
IP address blocks:        2804:3d10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl
                          rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 20:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:40:bc:e3:46:3c:ec:ea:9f:a5:62:cb:34:40:1e:19:67:44:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF
        Validity
            Not Before: Sep 25 17:28:49 2025 GMT
            Not After : Sep 24 17:33:49 2026 GMT
        Subject: CN=00BA882C200468C9A9FA9053990F2FA7680B4E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:6a:fe:a3:ae:bb:f1:12:c1:cf:f7:dd:68:
                    f9:4d:18:5e:71:5c:50:ee:8b:3d:4e:32:34:b7:ab:
                    14:01:a9:ab:ca:89:d0:47:ad:d7:45:b2:45:0f:1e:
                    f8:b9:bf:99:e2:a5:59:97:01:4a:f6:ec:9b:a5:52:
                    66:33:50:35:4e:6a:3f:56:41:8d:70:76:f2:36:0e:
                    19:69:7f:35:17:cd:6a:9b:b7:a6:92:b2:42:ce:2e:
                    df:5a:eb:12:6d:42:9f:b7:2c:12:e3:97:14:ad:7c:
                    72:ec:4f:2a:cc:c2:11:0e:ba:99:43:3f:e3:8a:31:
                    4a:c7:cd:31:58:cf:f4:68:fc:78:0d:f2:dd:0e:fd:
                    ef:40:d4:70:bc:3b:a2:7f:e0:55:23:fc:e8:26:9b:
                    6b:cd:68:c7:71:62:ba:24:90:a6:b0:bb:ec:fc:26:
                    f8:46:1b:68:d4:68:11:f2:bc:27:a5:eb:7f:bc:59:
                    8a:fc:7f:87:21:c1:4e:c9:69:e3:38:07:45:7a:b5:
                    78:06:7e:59:6e:62:33:6e:83:5e:f9:77:77:dc:4b:
                    40:02:4b:e8:ee:d3:97:e9:cd:63:0d:7f:8f:11:9e:
                    05:b5:b0:85:f4:5c:c1:1d:08:3a:07:8e:b3:ed:3b:
                    32:35:9b:f6:2d:b5:55:b3:91:7b:c2:ca:97:50:a7:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BA:88:2C:20:04:68:C9:A9:FA:90:53:99:0F:2F:A7:68:0B:4E:2E
            X509v3 Authority Key Identifier:
                keyid:CA:0A:B2:BC:B2:83:EF:EB:B7:72:29:E5:6E:86:E4:5C:98:64:D5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA0AB2BCB283EFEBB77229E56E86E45C9864D5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATWTZvtaZz4KXW23TCFUxaPQqE6cmRUBRa8G8Fpeuqf/0/323830343a336431303a3a2f33322d313238203d3e20323636323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:35:0d:89:fb:2c:10:c0:34:17:1b:4a:74:ec:cf:23:2d:
         ec:50:40:f0:e8:67:e9:c6:b3:52:e4:ec:1c:34:f6:04:33:cf:
         d7:92:28:d0:91:48:59:78:3a:9f:7d:17:ca:b4:a4:2e:6d:d0:
         93:ff:8f:2b:14:e2:f6:0b:82:28:c2:0e:ca:fc:d2:1e:e3:7b:
         84:a0:12:d6:c9:ae:21:be:f7:69:87:05:bc:4a:c7:1f:d8:a3:
         20:17:5a:a6:ca:4a:b6:d6:1a:90:b6:88:13:76:7f:f5:e3:15:
         50:c8:e2:4f:28:f5:65:3f:19:2f:89:d5:47:5b:c3:6d:3f:81:
         fd:ee:31:0e:1e:72:da:8f:41:fe:58:e8:33:31:4c:07:1c:91:
         d3:eb:d1:44:84:57:cd:e0:ca:7a:5d:ae:ab:85:52:05:82:9d:
         c7:26:cf:b3:f7:e6:d0:0f:5d:77:ca:1c:cb:77:78:e5:7b:ba:
         5b:35:31:25:23:30:7a:d0:07:0d:81:93:2b:ce:f3:c1:1f:f6:
         e1:59:23:e2:7e:f1:aa:44:97:45:df:e1:4e:ff:53:b6:5c:ce:
         b8:95:f6:91:7e:b6:64:04:2b:d8:1f:f1:e9:a8:a0:15:b7:e9:
         93:2c:bf:a5:71:8a:91:1d:72:3f:7b:8c:f1:c7:9c:06:77:f0:
         4e:1a:26:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:31:24 2025 by rpki-client