Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa
File:                     323830343a366330303a3a2f33322d313238203d3e20323730343339.roa (raw, json)
Hash identifier:          JkOv5JOsBVb6zEUXzVb6djTYWI0vPz9ETY1XD24iJN8=
Subject key identifier:   85:C7:3D:CE:A2:4C:1E:D7:75:70:6D:10:AC:75:38:D8:50:2E:5A:45
Certificate issuer:       /CN=152696C719E46D5202EEA288828D038B7D3FD514
Certificate serial:       04CE4FB66B0F514CA85F0BFA586EF6F74F4889AA
Authority key identifier: 15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa
Signing time:             Tue 15 Jul 2025 21:05:27 +0000
ROA not before:           Tue 15 Jul 2025 21:00:27 +0000
ROA not after:            Tue 14 Jul 2026 21:05:27 +0000
asID:                     270439
IP address blocks:        2804:6c00::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.crl
                          rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:4f:b6:6b:0f:51:4c:a8:5f:0b:fa:58:6e:f6:f7:4f:48:89:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152696C719E46D5202EEA288828D038B7D3FD514
        Validity
            Not Before: Jul 15 21:00:27 2025 GMT
            Not After : Jul 14 21:05:27 2026 GMT
        Subject: CN=85C73DCEA24C1ED775706D10AC7538D8502E5A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:d7:26:7f:e2:5d:26:e9:d2:05:bd:6c:a4:
                    b8:44:b9:9d:ee:ad:9e:59:e0:3d:84:f7:32:12:9d:
                    d5:bf:2d:7e:cf:20:b7:8f:d0:99:ec:4d:d7:a1:6e:
                    3e:74:8d:16:15:0a:34:55:a9:e1:a4:33:d8:62:59:
                    39:ea:f4:76:1a:74:c0:3a:06:7f:5f:d6:6a:d3:29:
                    df:03:33:52:31:52:fe:9b:61:d5:89:0d:aa:a7:3f:
                    a5:2c:9e:66:d0:6a:7c:dc:21:4a:41:64:b4:99:16:
                    40:39:b3:9a:98:5e:b2:c1:23:e4:25:bf:3d:15:14:
                    d9:a0:8e:7c:21:c0:46:b1:f2:49:51:a6:5d:ca:16:
                    26:de:f2:77:3b:3a:d9:a5:34:3c:b9:bd:87:82:fd:
                    f7:4c:e0:42:0f:5a:88:2c:e0:8d:a7:83:56:23:bf:
                    f1:15:b2:4d:6f:6a:e7:84:56:8b:76:06:25:98:f0:
                    cb:56:9a:05:54:fa:fd:dd:37:64:17:71:a7:e1:e8:
                    27:7b:36:e2:ea:5e:33:7a:e0:6b:83:02:8b:bc:1d:
                    ae:d9:3b:03:9b:5c:26:bb:fa:c2:43:b8:ef:78:e4:
                    07:9a:6e:8d:db:21:ff:15:d4:0b:b3:7f:a0:f3:30:
                    fc:28:63:41:56:01:96:0d:ca:99:aa:9b:70:f3:b9:
                    f2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:3D:CE:A2:4C:1E:D7:75:70:6D:10:AC:75:38:D8:50:2E:5A:45
            X509v3 Authority Key Identifier:
                keyid:15:26:96:C7:19:E4:6D:52:02:EE:A2:88:82:8D:03:8B:7D:3F:D5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/152696C719E46D5202EEA288828D038B7D3FD514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152696C719E46D5202EEA288828D038B7D3FD514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Fu1oSuxFbpWNebutrwk1rJ5stcyt4ZRfdSKttek7yEb/0/323830343a366330303a3a2f33322d313238203d3e20323730343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:00:42:62:1c:bc:d2:4c:3b:ec:19:05:30:c3:a4:fb:1c:
         0e:2f:be:e5:95:7e:19:82:d3:39:c5:0b:18:b9:aa:19:51:24:
         0c:cf:bf:28:80:c7:10:3e:a0:0d:3b:b3:5a:c4:0d:1c:85:9e:
         eb:a0:39:fb:88:20:72:5b:4f:12:f5:52:36:ac:16:02:10:f4:
         a3:f0:74:22:4d:ec:0c:d7:2d:c0:d6:37:4a:96:bf:56:ac:11:
         cc:03:29:e5:0c:4a:4c:08:9a:1c:3b:fc:ff:dc:35:7f:8c:d5:
         65:ec:9d:9d:0f:f2:c1:9d:b7:3f:a1:ec:62:60:c6:ee:54:ba:
         c1:83:46:29:9f:e2:5f:11:33:2e:df:66:f5:5e:fd:e5:f2:e7:
         e0:d6:50:23:25:57:58:7f:05:f4:4f:f0:de:c5:71:46:fa:d1:
         96:d7:86:95:87:4c:67:78:1c:6b:e2:9a:f9:f3:90:88:fd:a2:
         d3:9b:be:f2:44:cf:38:f1:01:26:41:c8:f8:5f:a7:00:bd:73:
         53:ab:8a:fe:92:38:2f:e0:17:76:b3:e5:4f:7f:1e:fb:48:38:
         e7:02:52:4e:ef:80:f1:e4:34:9f:60:5f:6c:2c:5a:25:bd:76:
         81:b2:41:66:34:55:e0:14:65:81:d2:27:de:87:cf:79:cb:b2:
         68:78:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:29:43 2025 by rpki-client