Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa
File:                     323830343a366261303a3a2f33342d3334203d3e20323730343133.roa (raw, json)
Hash identifier:          /9JMReWgjUjvga3Pw96Uv7h3UTdf5PhTzeo+ZDm2Pio=
Subject key identifier:   64:4D:F8:F3:64:90:F5:5C:51:7C:29:C0:87:63:BE:8D:C4:65:87:68
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       297A9F72E048C9A0D0EE67672D1DB9B9C42455CF
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa
Signing time:             Thu 04 Sep 2025 14:30:06 +0000
ROA not before:           Thu 04 Sep 2025 14:25:06 +0000
ROA not after:            Thu 03 Sep 2026 14:30:06 +0000
asID:                     270413
IP address blocks:        2804:6ba0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:9f:72:e0:48:c9:a0:d0:ee:67:67:2d:1d:b9:b9:c4:24:55:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Sep  4 14:25:06 2025 GMT
            Not After : Sep  3 14:30:06 2026 GMT
        Subject: CN=644DF8F36490F55C517C29C08763BE8DC4658768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:5c:2b:b4:a3:5d:fa:1a:49:7b:6a:86:7f:
                    50:f1:62:83:d6:86:51:57:6c:24:b8:03:d2:27:0e:
                    83:4a:4d:66:ba:29:db:1d:25:96:bb:e6:ed:f9:41:
                    94:94:86:e3:32:0c:15:24:f2:b9:00:21:fa:83:57:
                    fe:87:f9:3c:58:4b:9b:f5:f4:7b:cd:1e:df:a0:f1:
                    43:dd:e2:5e:d2:56:38:f3:b3:5c:61:7d:68:9c:79:
                    4f:08:23:04:d6:9c:80:e4:19:c5:3c:dc:5e:74:37:
                    96:f4:89:c4:23:3d:f0:d3:db:3f:59:c1:d4:b8:5d:
                    e3:e7:92:4d:b6:dc:3e:f2:ea:04:41:20:68:1c:6c:
                    bd:9a:52:41:47:ad:6c:2e:12:df:ba:ab:3e:35:c5:
                    82:7c:59:5a:49:02:d1:b0:30:a9:2d:5d:b1:3c:66:
                    cb:48:21:a6:55:e2:a6:3a:b1:b5:b4:61:c3:d1:a6:
                    ae:2a:d7:e4:de:42:e6:57:86:34:c5:6b:48:19:1e:
                    c2:ed:d9:94:13:5c:cd:8b:13:7c:0a:33:d8:a0:58:
                    2a:6e:a7:af:e5:1d:27:39:bb:24:c6:49:91:31:7c:
                    d3:44:89:e4:1a:d0:c2:5b:37:aa:85:a3:8f:37:6d:
                    f6:38:2c:c8:57:a9:c0:b8:13:8f:bb:41:3e:f9:6e:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4D:F8:F3:64:90:F5:5C:51:7C:29:C0:87:63:BE:8D:C4:65:87:68
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/323830343a366261303a3a2f33342d3334203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ba0::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:04:6e:7e:2a:ef:ef:cc:63:5a:6d:71:56:8f:c9:fa:9f:
         2a:ae:01:a1:ed:37:eb:a4:ce:15:2d:bd:e4:ea:c6:c4:e8:54:
         fb:df:5f:15:68:f2:a6:80:13:fe:c1:8c:2b:30:cc:ef:f0:e4:
         da:e5:0b:5f:dd:14:16:49:f8:0a:88:c1:f1:f8:2e:08:cf:b2:
         a3:32:11:47:6f:9a:08:8a:71:18:2c:a8:48:e3:77:58:39:b4:
         1a:cc:ae:97:09:37:10:c1:7d:50:68:23:15:c9:e5:5f:60:23:
         71:a5:86:9d:84:cf:40:1c:54:9a:24:72:0c:95:12:de:3e:49:
         be:26:90:e1:36:27:91:a3:64:18:22:85:4c:a9:4b:a2:2b:81:
         af:78:91:18:86:28:9d:e2:bf:30:fa:31:b0:74:4d:d3:6e:e6:
         4f:cf:e2:60:49:37:eb:c6:80:f1:56:6b:4a:09:79:e0:f0:01:
         ce:ef:88:62:cc:cb:ff:7d:43:97:5a:37:3e:d9:8b:c8:3d:6a:
         de:36:da:28:db:03:9c:d8:e4:72:72:19:64:cc:9c:24:cd:d4:
         36:90:ef:e7:28:9d:a8:85:c7:dc:ad:cd:d5:b3:cd:c0:39:60:
         85:39:7a:6b:ce:73:47:0c:30:88:6a:f4:10:35:7a:e6:0a:f1:
         12:41:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:59:15 2025 by rpki-client