Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa
File:                     323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa (raw, json)
Hash identifier:          bjPa32lLbjw9jym4hm5SsLfg8hn6JEqcuKVHBpBezjY=
Subject key identifier:   4A:11:47:1D:D5:86:A5:1C:27:5B:B7:BD:59:71:41:66:FE:73:2C:7C
Certificate issuer:       /CN=BB141441D22A497A1BF5ADB580A218637930FA95
Certificate serial:       30A45A518B01BE41EF261DA1E74F8574C0A2F94B
Authority key identifier: BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa
Signing time:             Sat 16 Aug 2025 14:02:01 +0000
ROA not before:           Sat 16 Aug 2025 13:57:01 +0000
ROA not after:            Sat 15 Aug 2026 14:02:01 +0000
asID:                     269502
IP address blocks:        2804:6598:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a4:5a:51:8b:01:be:41:ef:26:1d:a1:e7:4f:85:74:c0:a2:f9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB141441D22A497A1BF5ADB580A218637930FA95
        Validity
            Not Before: Aug 16 13:57:01 2025 GMT
            Not After : Aug 15 14:02:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:14:7a:d6:24:78:68:bd:a4:60:20:84:6a:
                    01:4b:ac:5f:2f:a8:84:92:10:76:8d:54:89:1f:00:
                    1d:b6:87:b9:9c:3e:9f:19:8e:01:1a:bc:31:56:dd:
                    61:49:49:1d:04:70:5a:d0:03:dc:da:58:ac:c7:49:
                    68:9b:89:17:3e:b1:00:76:eb:6e:7f:ff:91:dc:5c:
                    bb:30:0c:a2:62:2a:f5:c5:5f:b6:21:0b:43:36:f2:
                    6c:fb:9b:13:8e:08:ac:f6:ac:92:0c:cb:9a:ec:4d:
                    3f:75:76:08:87:6b:72:4b:0b:55:7c:66:61:6d:b1:
                    18:c5:2e:ea:43:53:39:e1:9f:22:62:3b:b3:3b:57:
                    53:8d:03:89:57:0e:8d:de:35:0c:8e:cb:0e:a8:f1:
                    55:a8:0c:07:99:2e:09:3d:7a:e9:8c:c5:7f:42:0c:
                    e1:8a:5b:59:b3:9e:f2:a2:31:16:a9:7b:fd:0f:82:
                    eb:9d:4b:83:96:01:b5:ee:60:02:c7:76:17:5f:37:
                    76:92:36:39:01:38:bf:1b:0f:2f:e5:c8:71:f0:3f:
                    ba:61:cd:8e:c8:f0:57:71:c0:c0:7c:63:a6:1b:ef:
                    23:3d:48:5a:42:3b:53:57:47:48:8d:ec:d3:10:41:
                    99:c6:19:33:09:96:b4:c9:47:67:e9:e6:7b:36:72:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:11:47:1D:D5:86:A5:1C:27:5B:B7:BD:59:71:41:66:FE:73:2C:7C
            X509v3 Authority Key Identifier:
                keyid:BB:14:14:41:D2:2A:49:7A:1B:F5:AD:B5:80:A2:18:63:79:30:FA:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/BB141441D22A497A1BF5ADB580A218637930FA95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB141441D22A497A1BF5ADB580A218637930FA95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/1/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         45:29:be:a0:d7:74:7d:8e:86:64:3b:26:62:4b:82:e3:e9:f9:
         bc:f6:2d:b0:4f:c0:cb:49:d7:68:d0:16:86:9a:06:ac:b1:59:
         85:50:2a:e9:c0:05:7d:a5:dc:39:eb:09:91:3f:fd:58:28:32:
         8c:71:18:7b:11:78:71:06:40:5f:dd:66:cc:a1:2c:fd:e9:fe:
         c7:49:94:1d:57:dc:33:c9:16:d2:78:ff:4a:0d:f6:3f:d6:90:
         b3:46:51:6d:75:e6:0b:fb:fa:9e:60:98:af:b8:5e:b6:4f:0a:
         11:d3:b9:60:a1:ed:6b:dd:51:8f:cd:b7:06:fb:99:e5:35:00:
         82:e4:bc:4b:86:15:94:9a:1f:14:1d:3d:86:1d:81:84:39:79:
         96:8c:75:62:8d:df:65:cf:78:04:71:93:64:01:d2:ff:c8:54:
         33:7f:1a:3d:34:dc:60:e9:da:e9:a0:b8:fb:fb:01:04:1c:a6:
         88:dd:ed:04:6c:98:a4:cd:d0:7c:e8:05:11:21:f1:78:59:fc:
         3f:b3:16:65:3f:ad:81:07:e3:6a:d2:59:04:1b:74:98:7e:16:
         53:14:69:e9:2e:32:59:9b:6d:22:86:1e:29:4e:cf:84:63:78:
         22:14:f0:df:98:69:36:1b:cd:86:c7:6a:f0:a3:d9:40:97:16:
         14:d7:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:12 2025 by rpki-client