Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
File:                     323830343a363133343a3a2f33322d313238203d3e20323639323230.roa (raw, json)
Hash identifier:          rEynaADBs2+9GKK1CU1c/++wCo2UmR0OfLY1tjrAtww=
Subject key identifier:   DC:5A:AD:DE:05:C9:2A:70:FE:13:01:05:7D:B3:68:CA:63:22:D6:6F
Certificate issuer:       /CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
Certificate serial:       12A693906C7F350EC92E30E5A541566091F46EA7
Authority key identifier: D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa
Signing time:             Tue 23 Sep 2025 21:34:45 +0000
ROA not before:           Tue 23 Sep 2025 21:29:45 +0000
ROA not after:            Tue 22 Sep 2026 21:34:45 +0000
asID:                     269220
IP address blocks:        2804:6134::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl
                          rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 16:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a6:93:90:6c:7f:35:0e:c9:2e:30:e5:a5:41:56:60:91:f4:6e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E315D505A9FD327F8C5FCFB284F96BDF315E8F
        Validity
            Not Before: Sep 23 21:29:45 2025 GMT
            Not After : Sep 22 21:34:45 2026 GMT
        Subject: CN=DC5AADDE05C92A70FE1301057DB368CA6322D66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:9f:c6:eb:c0:c3:18:82:09:10:16:79:67:
                    46:cc:62:31:ce:bd:d4:05:56:1c:9e:aa:68:d6:f3:
                    87:3c:ef:83:63:ef:19:d4:c6:4d:22:bd:fa:cd:19:
                    da:56:2b:90:e0:fc:78:51:08:5a:63:70:c0:be:fe:
                    c7:78:60:cc:9d:34:17:7f:91:29:85:0a:67:b4:c7:
                    90:73:a7:3d:a8:61:a4:ed:f2:8b:ea:c7:03:e9:22:
                    a7:ab:c3:ee:ca:31:ff:85:76:7f:36:01:68:99:45:
                    6e:77:9d:e0:53:44:d9:c2:e8:b1:cb:77:8f:89:14:
                    8b:e5:47:0e:3c:17:e6:c0:6f:96:38:cb:71:90:f3:
                    45:7f:85:eb:70:4e:db:20:98:9f:72:e7:dc:b5:72:
                    85:63:60:0b:6e:e4:49:f6:76:92:e9:87:51:ec:5c:
                    23:89:e6:ef:f7:ed:90:9b:24:8f:20:c4:fc:08:07:
                    67:29:2e:fa:da:13:5b:90:e0:56:e1:26:12:5f:63:
                    be:a5:25:63:e6:85:3d:0c:52:de:cb:14:fa:dd:eb:
                    76:98:d0:62:61:06:12:83:d9:95:16:9f:57:a8:65:
                    f9:f5:08:fb:53:d3:d8:95:9e:88:4b:4a:08:65:2b:
                    39:e8:89:d5:22:47:f0:d4:ed:6b:25:1d:0d:1d:1c:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5A:AD:DE:05:C9:2A:70:FE:13:01:05:7D:B3:68:CA:63:22:D6:6F
            X509v3 Authority Key Identifier:
                keyid:D6:E3:15:D5:05:A9:FD:32:7F:8C:5F:CF:B2:84:F9:6B:DF:31:5E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E315D505A9FD327F8C5FCFB284F96BDF315E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtT41Sm6cZPr3DyUuAM7JT7PfrxiNxkZZdfvPZDNj7Yp/0/323830343a363133343a3a2f33322d313238203d3e20323639323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6134::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:bf:1d:17:62:3b:57:44:6f:53:b1:83:c0:63:73:e5:21:
         4d:7d:db:1e:d0:91:ec:03:c8:7d:3e:72:eb:9d:f4:5a:15:07:
         38:53:3a:d8:49:7c:31:bc:14:6f:ab:ed:da:03:b6:df:8d:ab:
         34:0e:f1:f2:71:8d:ce:13:9d:4a:1b:43:22:f3:be:a2:42:ab:
         c1:46:76:72:ed:ac:69:7b:8b:a6:28:29:29:39:1d:d0:ef:3b:
         9f:3d:b5:8e:9d:6c:0f:e3:77:81:99:8b:b4:b6:5b:40:34:fe:
         c2:b8:0e:df:69:e8:60:b8:e0:23:f8:bf:14:b3:2d:9c:d7:76:
         b2:36:89:9c:84:4c:f3:70:68:06:d7:32:0a:c7:99:18:10:b0:
         c4:d6:71:fa:d9:89:09:51:36:d0:2b:c5:d6:43:90:e0:88:c5:
         f5:56:95:1a:0f:8b:c4:c1:3f:57:1b:bd:e0:4c:fe:8c:d6:fb:
         32:90:bc:96:9a:0c:f2:19:3a:f5:45:e0:39:7b:0f:0e:0a:f1:
         6b:e4:b9:2e:b8:06:3c:51:21:e8:4a:c0:de:4f:b4:5f:9a:e1:
         f0:69:da:6e:27:bd:89:1f:48:ee:0a:95:13:c7:32:f0:4e:3c:
         0d:87:6b:16:c6:68:19:93:4f:d6:93:03:82:d8:38:6a:a1:a4:
         76:64:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:24:07 2025 by rpki-client