Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa
File:                     323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa (raw, json)
Hash identifier:          2sp64Wu8jC7r1ywpF+2I9r4kFB+8rB6AoQ4niGYVaMU=
Subject key identifier:   AF:EB:3B:F1:81:E0:62:06:B3:31:0B:C8:06:BD:A2:71:84:30:42:68
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       690F6DC1CD1F760B40A409F7B86595C07695E43F
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa
Signing time:             Thu 04 Sep 2025 14:30:06 +0000
ROA not before:           Thu 04 Sep 2025 14:25:06 +0000
ROA not after:            Thu 03 Sep 2026 14:30:06 +0000
asID:                     270413
IP address blocks:        2804:6ba0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 01:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0f:6d:c1:cd:1f:76:0b:40:a4:09:f7:b8:65:95:c0:76:95:e4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Sep  4 14:25:06 2025 GMT
            Not After : Sep  3 14:30:06 2026 GMT
        Subject: CN=AFEB3BF181E06206B3310BC806BDA27184304268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:5c:37:1b:4f:b7:e4:3c:5f:bf:42:38:f4:
                    97:27:7a:d4:c8:3a:6f:57:a3:76:d6:4c:ef:d8:22:
                    89:26:f1:c8:91:b6:f0:11:de:07:23:43:28:b7:40:
                    99:f6:87:ef:70:b1:54:6c:84:d1:9b:3e:9f:75:6c:
                    fd:85:c4:4e:d5:76:5d:ce:40:cc:63:7e:31:c5:54:
                    ea:f7:ba:3e:e8:2d:34:39:41:03:90:00:10:fd:90:
                    cd:ee:60:7c:5c:81:ed:c2:6d:bf:dc:31:f2:25:1b:
                    08:3c:8f:64:30:4e:44:65:7d:3e:94:35:62:43:51:
                    74:40:31:82:ae:b9:22:7e:85:c0:05:83:74:5c:18:
                    fa:99:4a:e6:16:05:9c:ec:e2:98:2a:f4:6b:2d:77:
                    dd:34:be:48:37:de:5f:75:6d:bd:27:e8:d7:27:02:
                    b7:d3:71:d4:7d:37:1b:a0:6e:d0:49:ca:94:e2:60:
                    f8:59:52:20:59:e5:38:64:33:45:18:f7:b4:c2:db:
                    c0:b2:79:61:ce:15:a6:f3:c1:00:be:79:50:9c:f4:
                    f6:f2:be:3d:1f:9f:e8:d4:38:4f:62:74:12:8a:b7:
                    0e:e2:ee:9c:0e:9e:61:34:3e:2b:de:5f:d0:72:b8:
                    89:3e:1f:bd:bf:72:cf:d6:8d:ef:bb:74:bd:85:46:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:3B:F1:81:E0:62:06:B3:31:0B:C8:06:BD:A2:71:84:30:42:68
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a383030303a3a2f33332d3333203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:81:09:de:ff:02:09:dc:f7:60:5a:d4:a0:77:df:86:9e:a4:
         34:0e:e0:35:8d:9b:13:82:46:12:cd:4e:b1:2a:8a:c4:3c:fb:
         1b:fb:a8:84:d2:31:f7:47:c6:a5:e3:61:38:2f:1a:2c:85:78:
         ef:6c:c2:b7:3b:69:02:aa:3f:61:c2:6e:62:9a:df:d0:90:03:
         3a:3f:94:c6:e9:ae:71:96:df:ba:b1:a9:2a:84:f2:bb:05:4d:
         7b:29:6f:39:28:4a:78:6c:39:87:09:2f:af:e7:02:0e:90:d0:
         c9:62:32:76:79:fa:6d:d1:37:e9:18:1d:df:8b:c8:4f:16:17:
         20:5b:3a:df:a8:d6:1d:f6:a1:83:cf:10:d5:21:9f:5c:5e:14:
         ff:d7:53:ae:1b:1e:56:16:2c:75:86:70:d9:ea:62:00:83:11:
         55:a4:fe:aa:f6:fd:d5:ee:83:a8:eb:72:6e:a5:4f:90:60:ab:
         05:b0:49:b8:5b:bc:78:5f:0e:3c:c5:14:c7:24:29:a4:a0:ba:
         0b:56:2b:15:19:e8:60:2f:46:81:a2:10:b8:c4:87:34:a0:91:
         8d:21:8b:ca:3b:ac:59:1b:13:a3:83:dd:e5:e4:e3:b6:ce:ba:
         83:23:64:99:ae:50:c2:fb:96:71:71:df:b4:71:87:c2:9d:6c:
         99:24:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:49:23 2025 by rpki-client