Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/323830343a366562303a3a2f33322d313238203d3e20323730363133.roa
File:                     323830343a366562303a3a2f33322d313238203d3e20323730363133.roa (raw, json)
Hash identifier:          rbxVIyrqcLAr7u8OgxTNtlVKcu6ozbS0v77t/dubzfg=
Subject key identifier:   F8:94:0F:74:DD:D5:A2:2B:DA:7D:C7:CC:52:67:DB:33:96:CA:6A:43
Certificate issuer:       /CN=6270D61C612187B7191E921F0486D7439C07C508
Certificate serial:       1209DBEFCE0900CDE473D1406BAC80C3F72A225A
Authority key identifier: 62:70:D6:1C:61:21:87:B7:19:1E:92:1F:04:86:D7:43:9C:07:C5:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6270D61C612187B7191E921F0486D7439C07C508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/323830343a366562303a3a2f33322d313238203d3e20323730363133.roa
Signing time:             Mon 22 Sep 2025 18:13:42 +0000
ROA not before:           Mon 22 Sep 2025 18:08:42 +0000
ROA not after:            Mon 21 Sep 2026 18:13:42 +0000
asID:                     270613
IP address blocks:        2804:6eb0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/6270D61C612187B7191E921F0486D7439C07C508.crl
                          rsync://rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/6270D61C612187B7191E921F0486D7439C07C508.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6270D61C612187B7191E921F0486D7439C07C508.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 05:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:09:db:ef:ce:09:00:cd:e4:73:d1:40:6b:ac:80:c3:f7:2a:22:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6270D61C612187B7191E921F0486D7439C07C508
        Validity
            Not Before: Sep 22 18:08:42 2025 GMT
            Not After : Sep 21 18:13:42 2026 GMT
        Subject: CN=F8940F74DDD5A22BDA7DC7CC5267DB3396CA6A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:ba:5f:10:2c:a2:c4:d3:32:91:e6:d0:b6:
                    18:a1:3f:5f:30:3f:d4:22:5f:1c:02:ed:62:37:e5:
                    f6:7d:e2:db:8d:3d:d1:84:73:7e:da:91:b5:0e:b4:
                    a3:71:da:c1:cf:c0:25:d9:e4:53:ee:0f:cc:c7:9c:
                    bf:68:14:86:5f:91:d6:3a:0e:c8:e5:6f:d6:22:cb:
                    a1:f7:35:26:cc:99:41:c4:1b:51:6c:ca:d5:c4:6b:
                    4f:c2:34:bd:f7:9f:c4:4b:4d:b7:ef:29:54:8b:be:
                    26:16:7a:5f:b6:81:76:b6:d8:b4:3c:7a:a2:98:ea:
                    44:62:d9:c6:73:94:59:45:b9:07:fa:65:68:73:16:
                    5f:f6:96:a9:74:98:89:4f:eb:09:3f:7c:91:9b:48:
                    97:eb:ba:78:5a:33:83:c8:29:3b:67:cd:88:44:5f:
                    bf:ed:08:52:b1:11:bf:03:e3:13:1d:9e:2e:81:d6:
                    42:bf:b0:d6:af:e0:2e:f4:60:f5:20:c8:fc:fd:99:
                    5c:72:89:72:9b:8b:de:cd:29:2e:28:95:72:f3:9e:
                    83:e9:75:3c:e2:2d:1b:a9:27:e4:ba:2b:64:e1:a9:
                    39:0b:4c:f4:7b:c9:32:6d:e6:cc:ef:82:0c:81:51:
                    97:5d:72:aa:09:2c:d6:81:a4:b7:b5:a4:80:81:e7:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:0F:74:DD:D5:A2:2B:DA:7D:C7:CC:52:67:DB:33:96:CA:6A:43
            X509v3 Authority Key Identifier:
                keyid:62:70:D6:1C:61:21:87:B7:19:1E:92:1F:04:86:D7:43:9C:07:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/6270D61C612187B7191E921F0486D7439C07C508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6270D61C612187B7191E921F0486D7439C07C508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WVamSF5NoPyEATLyjVh1jLg7gVVSEBUM7t2HMuuQpny/0/323830343a366562303a3a2f33322d313238203d3e20323730363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:a0:39:ac:f5:e6:7a:30:99:c3:a9:f5:10:10:b7:48:55:
         c5:31:6b:ab:1a:c7:e4:5d:e0:ec:83:29:4b:d9:7f:44:d1:35:
         9f:3e:c9:ae:24:bc:85:8e:1e:61:64:15:a9:97:eb:7a:62:f3:
         56:0a:68:0d:64:57:8a:3c:25:50:f0:a3:22:ab:42:76:f8:f9:
         a5:a1:1c:26:8b:1b:2b:f7:07:51:eb:4f:e0:d5:2d:c9:98:9b:
         1a:c5:33:1c:ec:1f:40:22:97:2c:c8:91:5d:17:dc:81:f1:c2:
         56:8c:99:57:7e:ac:6b:06:b5:25:d3:3a:a8:9e:65:5f:9e:67:
         d6:ef:a4:01:73:81:53:09:81:cc:c4:6f:50:10:de:dc:dc:b4:
         52:a7:4d:16:6e:65:84:c3:ba:28:39:be:23:3d:e1:85:86:cc:
         29:41:c3:df:c4:47:d9:2c:f7:8b:cc:d7:9a:35:fc:fd:85:74:
         2f:15:6d:c8:13:15:6c:ec:90:62:2c:a2:80:5b:dc:7d:b7:2e:
         35:5c:6c:bc:65:c5:04:90:b8:20:44:f2:33:10:f4:69:7f:f4:
         12:29:18:0b:59:cd:9b:aa:2b:2e:2a:eb:a6:5d:7f:9b:25:54:
         97:0a:1b:b7:d7:ea:ef:74:25:5c:6d:dd:82:5d:cf:39:71:72:
         be:ff:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:01 2025 by rpki-client