Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33332d3333203d3e20323730343133.roa
File:                     323830343a366261303a3a2f33332d3333203d3e20323730343133.roa (raw, json)
Hash identifier:          JXGnDvizAzu4qNjzcgakkwFaddBsElJ9xmVHgYn/t50=
Subject key identifier:   F1:8F:BC:6D:31:DC:46:41:1D:24:3A:70:29:B6:AC:A6:D2:16:99:03
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       40EA7D25DEC50D622F884B1AD730D1EF903B23CB
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33332d3333203d3e20323730343133.roa
Signing time:             Thu 04 Sep 2025 14:30:06 +0000
ROA not before:           Thu 04 Sep 2025 14:25:06 +0000
ROA not after:            Thu 03 Sep 2026 14:30:06 +0000
asID:                     270413
IP address blocks:        2804:6ba0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ea:7d:25:de:c5:0d:62:2f:88:4b:1a:d7:30:d1:ef:90:3b:23:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Sep  4 14:25:06 2025 GMT
            Not After : Sep  3 14:30:06 2026 GMT
        Subject: CN=F18FBC6D31DC46411D243A7029B6ACA6D2169903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:ab:24:b7:13:a9:46:87:0d:bf:6a:a4:4c:
                    9f:45:6a:13:c2:78:39:e2:52:bb:da:63:2d:db:c3:
                    ef:00:d8:03:6e:4c:2a:00:d2:05:8f:ee:ab:59:6e:
                    95:71:7a:bc:26:54:f5:5d:f2:6f:ed:ed:ca:a8:09:
                    dd:2f:ab:50:c8:f1:1c:3f:f8:cd:d0:60:83:dd:00:
                    d1:aa:9c:0c:2b:95:b1:4a:f9:ec:99:96:d4:cd:3d:
                    78:73:39:07:fa:08:8d:04:5e:21:a4:14:28:68:ae:
                    05:77:33:61:4b:c3:e7:7c:9a:42:1e:fa:d1:7d:a8:
                    47:03:78:8e:02:58:5b:70:d0:c1:ed:bf:b2:35:1f:
                    c5:a7:6b:f0:6f:2f:75:3d:6f:fa:54:cd:c7:30:79:
                    de:71:18:a1:b4:27:2b:6a:79:44:59:56:c5:d5:4d:
                    12:3d:3e:26:4b:81:21:0f:3e:82:94:dd:2f:18:b9:
                    bf:8d:e8:33:b1:71:5c:75:b6:55:a3:cf:f4:71:a2:
                    02:c8:0c:7d:3e:d6:03:71:32:02:5b:a4:9c:6d:4d:
                    bb:9e:e3:eb:d7:7b:26:f8:21:b4:54:9c:75:eb:6f:
                    4f:aa:47:cc:c8:79:fc:d5:70:f2:ce:bc:d8:cd:29:
                    11:36:cd:bb:c1:20:d8:2d:d2:92:75:e6:7e:c0:64:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:BC:6D:31:DC:46:41:1D:24:3A:70:29:B6:AC:A6:D2:16:99:03
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33332d3333203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:88:f8:25:2f:3a:b2:74:4a:4f:02:f8:66:ac:70:97:d9:
         92:18:cb:22:43:18:bb:7e:39:cc:2e:b2:71:68:8f:14:5d:75:
         5b:9a:85:98:22:e6:06:be:d0:ed:94:ba:24:15:ef:3e:e1:0c:
         8f:1c:c4:fa:61:fb:f9:9e:21:b8:bc:60:a2:e0:14:f4:8c:81:
         b6:18:3c:05:8e:89:64:2a:14:e9:8e:27:28:68:4b:8e:79:28:
         ab:76:37:1f:0e:eb:71:f3:bd:84:e7:59:8a:01:d3:96:4f:d5:
         79:0e:d4:05:61:71:5d:ba:bd:50:0c:b0:16:bb:b6:dd:3f:d9:
         73:44:91:37:02:e5:fc:7c:89:a5:49:27:87:ff:f9:b2:c0:bb:
         fb:f8:9a:78:48:2a:38:35:71:ef:2a:5e:60:60:f4:dc:3e:2f:
         6a:59:b4:22:21:67:1d:c7:87:c4:60:02:12:be:15:9e:0d:02:
         18:eb:5a:29:40:5a:83:1e:fa:08:cb:bc:94:9a:97:fb:cb:a3:
         5e:2b:d6:80:14:36:d2:55:c7:1a:72:96:5c:bc:8d:77:3e:0b:
         55:52:80:7d:54:47:7e:3e:72:2f:46:27:dd:52:c2:d4:9b:28:
         d3:b8:de:c3:db:1d:d8:67:bd:af:de:be:f9:8b:cd:f9:34:a5:
         b9:65:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:27:13 2025 by rpki-client