Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
File:                     323830343a363266303a3a2f33322d313238203d3e20323639333239.roa (raw, json)
Hash identifier:          jOv9Nk4wpnB4tvhUwpC8PIhB0e3SghBcQRuVtQI94Qc=
Subject key identifier:   E5:08:18:3D:D5:07:98:95:07:B8:F0:8E:C3:08:A1:E7:86:FA:9D:E5
Certificate issuer:       /CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
Certificate serial:       599A3C17852A851D2293B2EA3D438272163C414A
Authority key identifier: 6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa
Signing time:             Mon 18 Aug 2025 19:05:47 +0000
ROA not before:           Mon 18 Aug 2025 19:00:47 +0000
ROA not after:            Mon 17 Aug 2026 19:05:47 +0000
asID:                     269329
IP address blocks:        2804:62f0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl
                          rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 21:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9a:3c:17:85:2a:85:1d:22:93:b2:ea:3d:43:82:72:16:3c:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE
        Validity
            Not Before: Aug 18 19:00:47 2025 GMT
            Not After : Aug 17 19:05:47 2026 GMT
        Subject: CN=E508183DD507989507B8F08EC308A1E786FA9DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:c3:58:6a:2f:80:08:f4:e9:9f:39:12:0f:
                    c3:db:75:b9:7d:c4:c9:41:39:8b:8b:ee:9d:d5:9b:
                    45:23:a0:0e:99:63:56:a6:20:ab:6a:43:2d:9f:4a:
                    c0:88:1d:ce:8e:16:aa:09:68:b7:87:6a:69:40:bc:
                    b8:39:01:f6:10:a3:c0:0a:f0:f9:f8:7e:7a:5b:a2:
                    20:e9:4d:29:d5:9a:69:de:5c:18:40:34:75:d4:a4:
                    9b:63:d0:2c:b9:a6:9c:a7:f7:17:e5:31:16:50:29:
                    ea:e3:46:07:6b:7f:4a:35:94:dd:e3:c0:18:c1:a6:
                    4f:db:ea:dd:fb:7e:8d:a6:01:a7:36:8a:ec:f9:47:
                    cd:6a:43:4d:5d:53:6a:4e:9a:4b:66:20:fa:42:63:
                    3d:bf:44:41:3a:fa:d6:27:be:0e:fa:8f:b9:8a:18:
                    4f:1a:4b:f2:8e:fb:8f:07:b3:11:29:f3:09:0a:44:
                    a5:ce:f0:34:d1:a3:bd:bb:b1:ac:ae:65:71:22:e8:
                    74:96:9a:46:13:5e:14:dd:67:7a:0c:a4:1f:1d:cd:
                    9f:8d:6e:c5:f7:23:b3:4c:f3:65:ae:7a:fb:7d:c4:
                    02:18:f7:8b:db:e0:d2:13:3c:fa:1f:4c:87:66:b8:
                    cf:6c:ee:33:5e:96:fb:c1:3f:08:88:27:4c:fb:ff:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:18:3D:D5:07:98:95:07:B8:F0:8E:C3:08:A1:E7:86:FA:9D:E5
            X509v3 Authority Key Identifier:
                keyid:6E:4B:B7:F0:B7:10:1A:40:8E:EA:A0:2B:18:DF:90:4F:30:D4:AB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E4BB7F0B7101A408EEAA02B18DF904F30D4ABDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/0/323830343a363266303a3a2f33322d313238203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:fe:82:8a:ad:f9:8b:1d:be:31:6e:78:50:cf:9d:d9:ec:
         f8:96:73:2c:a6:11:2d:0b:96:e5:0b:d1:db:97:5d:f6:66:6c:
         4b:ba:41:ab:ef:b0:41:08:42:bf:b8:1f:2e:e2:7f:85:a0:38:
         bb:73:39:0d:8c:7f:8f:76:ce:73:fb:b7:6e:45:59:9c:ff:b2:
         26:63:59:24:40:81:2d:60:3f:a8:16:bf:da:4d:65:a5:d7:f7:
         c4:07:3e:ef:35:97:c4:08:d6:30:cb:8b:92:47:8f:b3:f6:87:
         7a:48:b3:ff:a9:b9:24:ce:7b:c2:4e:52:44:3c:df:5d:6c:b3:
         1b:6a:4a:44:f4:88:e6:19:1a:0f:64:c8:10:dd:c6:2c:e7:0b:
         e2:85:67:ae:fe:92:9f:6f:ba:cf:a3:eb:7f:a1:55:66:70:43:
         77:4c:31:92:fa:93:74:3f:81:16:bc:d1:9b:cb:f5:62:3e:49:
         d3:78:06:bd:0d:4f:9e:aa:5e:90:b4:32:98:62:d3:6c:6a:f5:
         f3:d1:99:e7:ff:7d:65:d0:79:77:d5:f6:a3:cb:29:b9:9c:27:
         57:66:96:28:ea:ed:e6:60:89:b2:63:cb:a5:38:59:66:44:fb:
         3a:8e:82:50:6e:b3:b4:ee:d7:56:60:67:33:60:67:c9:e0:79:
         77:d8:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:12 2025 by rpki-client