Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
File:                     323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa (raw, json)
Hash identifier:          uMnJ27UqWEVRsvepL65Hz8PxM8GvLBBOOqCfpFoV9p8=
Subject key identifier:   06:97:EC:8F:CB:10:40:1B:8A:2E:CB:7A:62:B5:1A:96:0F:80:5D:94
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       1865E8ADF5F42AFF42C2EE281B951ED429E76922
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa
Signing time:             Wed 06 Aug 2025 12:41:27 +0000
ROA not before:           Wed 06 Aug 2025 12:36:27 +0000
ROA not after:            Wed 05 Aug 2026 12:41:27 +0000
asID:                     264891
IP address blocks:        2804:2f70:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 21:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:65:e8:ad:f5:f4:2a:ff:42:c2:ee:28:1b:95:1e:d4:29:e7:69:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Aug  6 12:36:27 2025 GMT
            Not After : Aug  5 12:41:27 2026 GMT
        Subject: CN=0697EC8FCB10401B8A2ECB7A62B51A960F805D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:f1:18:42:c5:6d:6d:5c:dc:40:26:38:57:
                    01:eb:1a:64:f7:f4:e7:40:c6:1a:12:c8:78:47:42:
                    61:14:f9:6c:04:6c:47:79:09:af:67:76:3a:b8:f8:
                    0b:6f:5d:fc:78:f8:8a:89:38:d9:bf:0a:bc:61:ae:
                    f1:33:ed:47:82:80:6a:24:a1:23:52:e3:85:4b:c7:
                    7b:e4:fd:26:0e:aa:c5:dd:00:82:55:73:76:ad:74:
                    b8:19:a2:88:b7:68:ba:c7:75:f0:8f:d7:47:62:5b:
                    2f:85:ba:cf:2c:9a:05:e8:43:e1:8c:89:d9:13:45:
                    a4:7c:1a:d4:63:8a:a9:cd:5f:39:c4:b5:19:bf:9b:
                    eb:b5:65:01:a1:e6:8f:bc:87:6a:aa:2e:9e:de:b1:
                    7f:b0:4a:63:94:87:c4:f3:19:46:96:dd:8f:cc:e2:
                    b3:dc:69:9f:c8:bf:97:81:d2:63:6d:4c:75:bd:61:
                    d7:ad:ae:61:50:ef:40:6c:0a:82:41:65:b3:47:d6:
                    77:65:69:ae:e1:bd:14:fd:91:f4:b5:8b:42:80:dd:
                    79:45:e3:bb:f7:64:7e:e2:dc:b1:82:d8:1b:31:63:
                    cc:23:82:d1:5f:ec:70:40:7e:ef:f6:cc:83:16:80:
                    36:6b:51:0e:cf:4b:5a:f2:0a:28:45:e9:95:ee:1a:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:97:EC:8F:CB:10:40:1B:8A:2E:CB:7A:62:B5:1A:96:0F:80:5D:94
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/323830343a326637303a353030303a3a2f34382d3438203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f70:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:5e:51:64:13:bf:c1:4a:9d:bd:0a:6e:3a:38:3e:5e:2c:
         39:18:37:bf:fc:bc:95:ff:c5:1c:73:ae:11:e6:b0:5a:0c:68:
         c1:62:3b:b3:be:21:98:80:1b:5a:ee:b8:44:df:42:4e:a2:6e:
         1f:14:da:63:45:45:1f:90:3f:8b:e0:15:95:b3:30:62:c9:69:
         86:17:cd:03:ae:cf:00:0a:60:cf:fb:df:86:f6:63:d1:5a:31:
         1d:4b:85:5a:61:27:d3:1a:2a:ed:08:22:02:b1:32:e9:3b:09:
         99:f8:23:10:d3:bd:d2:70:a5:8d:bf:32:ab:74:a7:fc:2c:b7:
         90:88:69:02:91:5a:99:f1:cc:b5:ec:f3:66:7b:75:26:a4:f6:
         ea:61:e0:e4:6e:4a:17:dd:b8:f8:3d:0f:45:03:ea:df:b3:fb:
         6f:aa:0d:26:34:dd:d3:28:3f:2f:98:69:74:68:c7:29:cf:5d:
         10:eb:c2:43:2e:d4:9d:fb:d5:ec:24:fc:f3:0a:67:8c:32:ec:
         50:93:ba:58:1b:c3:18:86:91:41:56:f7:b5:f3:16:0e:ef:e6:
         51:b2:31:04:a8:42:a1:44:cb:8a:77:9a:80:46:14:36:20:86:
         f3:d9:bb:7a:ed:a6:6b:b8:82:5c:1b:ca:92:7a:99:54:29:0c:
         7c:d4:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:36 2025 by rpki-client