Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa
File:                     323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa (raw, json)
Hash identifier:          JPkCk6648v0xhbSbtBIPbfa7Qyk12+QqcxIKcUjR6IU=
Subject key identifier:   5B:F8:DC:F1:91:1F:F0:D1:3B:6E:8F:6C:9C:1A:16:A4:39:24:82:80
Certificate issuer:       /CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
Certificate serial:       05718B0A480134913DCF95CCAD26DBAC77BAE4FA
Authority key identifier: BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa
Signing time:             Tue 08 Sep 2026 15:00:00 +0000
ROA not before:           Tue 08 Sep 2026 14:55:00 +0000
ROA not after:            Tue 07 Sep 2027 15:00:00 +0000
asID:                     268675
IP address blocks:        2804:54e0:8a01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl
                          rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 15:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:71:8b:0a:48:01:34:91:3d:cf:95:cc:ad:26:db:ac:77:ba:e4:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA066049D6F61C15788B2FC5F30C89377048CC1E
        Validity
            Not Before: Sep  8 14:55:00 2026 GMT
            Not After : Sep  7 15:00:00 2027 GMT
        Subject: CN=3082010A0282010100AC48D716CC0C04D58C507D5E7CB0E3ECA4E63583564BD853DAE733F1D585F9D50F834A08DAE4CC06CD3A0A4210640A6B84A619E589917D11A49A9340E8E9FA6E0D48ABE632376631D649A73374753920551EEDA37FE1F8F8C343F91BF4862B3311A9118FC56203AC43E63BDC3C63DA02EDDE85B8C82F169012D570A747EC72EC195EE166B42623872057DB99C22ED7EB3D0A708DEE3D5EDDF2CE08F77B1E2F05062A7B1D309415748E9B539C6BEEA2A046891418900102C72AB5899920CE351D6AFDF808B767D6F593BAA556B0B44381A8B89429AD8DB35BD801A8586AC7788AE91F961425E71167AC2E4572E414E7DF0256C1CBD4E1F77F2F156927DF1FFBBB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:d7:16:cc:0c:04:d5:8c:50:7d:5e:7c:b0:
                    e3:ec:a4:e6:35:83:56:4b:d8:53:da:e7:33:f1:d5:
                    85:f9:d5:0f:83:4a:08:da:e4:cc:06:cd:3a:0a:42:
                    10:64:0a:6b:84:a6:19:e5:89:91:7d:11:a4:9a:93:
                    40:e8:e9:fa:6e:0d:48:ab:e6:32:37:66:31:d6:49:
                    a7:33:74:75:39:20:55:1e:ed:a3:7f:e1:f8:f8:c3:
                    43:f9:1b:f4:86:2b:33:11:a9:11:8f:c5:62:03:ac:
                    43:e6:3b:dc:3c:63:da:02:ed:de:85:b8:c8:2f:16:
                    90:12:d5:70:a7:47:ec:72:ec:19:5e:e1:66:b4:26:
                    23:87:20:57:db:99:c2:2e:d7:eb:3d:0a:70:8d:ee:
                    3d:5e:dd:f2:ce:08:f7:7b:1e:2f:05:06:2a:7b:1d:
                    30:94:15:74:8e:9b:53:9c:6b:ee:a2:a0:46:89:14:
                    18:90:01:02:c7:2a:b5:89:99:20:ce:35:1d:6a:fd:
                    f8:08:b7:67:d6:f5:93:ba:a5:56:b0:b4:43:81:a8:
                    b8:94:29:ad:8d:b3:5b:d8:01:a8:58:6a:c7:78:8a:
                    e9:1f:96:14:25:e7:11:67:ac:2e:45:72:e4:14:e7:
                    df:02:56:c1:cb:d4:e1:f7:7f:2f:15:69:27:df:1f:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:DC:F1:91:1F:F0:D1:3B:6E:8F:6C:9C:1A:16:A4:39:24:82:80
            X509v3 Authority Key Identifier:
                keyid:BA:06:60:49:D6:F6:1C:15:78:8B:2F:C5:F3:0C:89:37:70:48:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA066049D6F61C15788B2FC5F30C89377048CC1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TbpW2EYtCvz5iu4BmuMESRHsvM2h4VsfZqs53e1mGzY/1/323830343a353465303a386130313a3a2f34382d3438203d3e20323638363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54e0:8a01::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:c8:4e:c1:fa:d2:10:6a:95:f9:b8:fd:1b:e3:9e:85:85:
         4c:2b:dc:0c:fd:16:b3:5b:09:4d:15:f1:17:ef:80:e8:80:66:
         45:4b:e3:f1:80:31:c4:6e:fa:69:e5:0a:e0:1c:dc:d8:a6:19:
         0e:58:92:74:9d:7a:5f:dd:ef:d1:ed:f6:a1:c0:a2:7d:79:f8:
         e9:84:3d:ad:0a:a0:a8:ba:ae:09:d4:7f:fb:3a:1f:16:d7:5b:
         ec:64:2e:71:84:70:15:7d:40:51:06:92:5c:8a:75:b6:35:02:
         46:d0:c6:e7:1d:ab:99:a9:de:a6:47:2e:f9:c7:f7:ec:6b:16:
         9d:9d:ff:10:c4:1c:fa:e8:7d:5a:8e:7a:05:6a:fc:47:fd:b3:
         ed:c5:b8:3f:30:e9:2c:94:20:7a:06:53:b1:db:49:db:e7:16:
         79:a2:21:d2:fe:71:54:41:55:0f:1d:af:f7:61:28:ea:ad:3c:
         d7:19:ee:d4:e3:3a:a1:6a:c6:3e:65:4a:50:82:35:cf:8e:de:
         42:ef:a4:a6:6f:ec:e3:b9:d7:04:d5:8c:4d:63:f7:5f:1a:64:
         c8:3e:a9:5f:72:d5:8d:bd:11:7d:a2:6e:ea:89:d5:46:a5:ea:
         c2:80:3a:36:87:6c:72:a4:5f:cf:02:8a:6c:43:bd:71:6e:b8:
         40:fa:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----