Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa
File:                     323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa (raw, json)
Hash identifier:          H0vf6TPXYG6aJ8wxROvfvSMK7m2eqCknqLmL0DDLfq8=
Subject key identifier:   66:7E:0E:DD:05:8F:03:21:6B:24:78:4C:5C:04:88:F2:94:0C:1C:42
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       0EF351E8067B79F704A766E93CF4518A08B6EFAF
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa
Signing time:             Wed 09 Jul 2025 15:42:09 +0000
ROA not before:           Wed 09 Jul 2025 15:37:09 +0000
ROA not after:            Wed 08 Jul 2026 15:42:09 +0000
asID:                     270413
IP address blocks:        2804:6ba0:4080::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 23:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f3:51:e8:06:7b:79:f7:04:a7:66:e9:3c:f4:51:8a:08:b6:ef:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Jul  9 15:37:09 2025 GMT
            Not After : Jul  8 15:42:09 2026 GMT
        Subject: CN=667E0EDD058F03216B24784C5C0488F2940C1C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:58:f3:b1:79:21:2d:ef:8b:dd:15:22:ce:
                    38:a9:05:49:32:69:bc:a1:4f:d1:c9:87:43:01:5b:
                    83:92:b9:e6:40:7e:57:b7:86:8f:5b:c7:98:a2:48:
                    1a:8e:5e:93:3e:ae:47:80:71:45:f6:69:4f:32:8d:
                    f4:e4:1d:66:3c:71:d9:a0:32:50:a3:84:3e:5c:00:
                    75:c9:a8:14:99:a2:4f:62:4e:ff:a5:d0:9b:5b:bc:
                    70:2d:ad:fe:62:37:da:93:65:40:13:f9:06:c6:47:
                    08:13:ac:f5:eb:64:77:5e:f4:28:5c:7c:26:e3:e9:
                    a2:67:c5:b8:ad:35:60:c6:19:ec:73:c1:d5:78:4b:
                    37:a5:8a:6e:5d:7a:f9:23:f6:b4:2a:4d:ce:9a:07:
                    73:8f:f7:d6:84:26:fe:ab:d4:70:bc:d0:82:4b:b3:
                    66:59:5a:78:df:05:8d:ec:4c:f5:d1:7c:c0:e7:a9:
                    c2:d3:25:1f:eb:0f:68:f5:22:48:d8:d1:c2:c1:49:
                    d8:6c:a7:f5:78:a0:8a:28:87:92:6a:6a:13:28:98:
                    d2:1a:6f:ff:51:32:30:d6:31:df:7c:7d:13:13:19:
                    dc:44:48:13:57:b8:58:56:41:5a:a9:c0:b7:96:57:
                    43:2c:6b:5c:66:4c:76:4d:81:df:f5:19:88:25:34:
                    32:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7E:0E:DD:05:8F:03:21:6B:24:78:4C:5C:04:88:F2:94:0C:1C:42
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a343038303a3a2f34322d3432203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0:4080::/42

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:dd:3a:e8:18:f5:f6:70:fc:ae:26:74:02:66:82:32:49:
         3d:cf:e8:47:9d:71:4a:6a:6b:a8:71:07:34:85:56:9b:b0:5e:
         3c:14:8f:f7:76:b6:65:29:28:f4:c7:cd:35:d9:a1:3b:72:5d:
         95:ec:b9:82:cf:07:c4:9b:df:20:3d:26:59:30:d7:6c:8a:10:
         80:94:5b:74:1d:7d:95:e9:1f:4a:f6:4f:e1:73:ac:cb:40:27:
         ba:78:5b:a4:c3:3c:f3:6f:e7:71:d6:9b:0d:04:a9:ae:09:1d:
         5d:18:60:b5:d2:bc:3e:65:b8:bc:ae:92:b9:6c:b2:38:0e:bf:
         1e:95:8a:f7:50:fe:30:4a:99:57:a0:4e:b2:38:a0:ac:97:5a:
         d2:b7:e1:5b:3e:31:e2:a0:50:b8:4c:74:cb:d8:74:ec:5e:7f:
         ba:ff:37:b4:dd:46:5d:27:1d:16:36:0d:a7:49:ad:25:ab:0d:
         33:3c:c8:7c:5b:22:5b:5d:3d:80:4b:3e:ea:42:1f:2d:b0:cc:
         ed:c0:56:43:cd:53:79:10:85:fc:96:f2:c1:9c:47:ed:39:63:
         07:94:b7:ec:03:1e:e4:c4:d4:2d:0f:a7:00:02:71:56:c3:b4:
         1d:9b:74:31:87:0a:af:39:1f:39:42:b5:92:f6:a9:60:23:5b:
         7e:5e:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:12:09 2025 by rpki-client