Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
File:                     323830343a3666303a3a2f33322d3332203d3e203533303437.roa (raw, json)
Hash identifier:          rV/byKKnFWYu4fi0mP/ueLf4y/bcmK0kUeT9hWiwQ8g=
Subject key identifier:   7A:77:ED:AA:E9:F1:B1:11:81:3E:48:53:98:09:CB:A4:CA:6F:09:F3
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       55DAED4E49B20A2874C43064D870208196A5930F
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:26 +0000
ROA not before:           Thu 06 Nov 2025 13:32:26 +0000
ROA not after:            Thu 05 Nov 2026 13:37:26 +0000
asID:                     53047
IP address blocks:        2804:6f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:da:ed:4e:49:b2:0a:28:74:c4:30:64:d8:70:20:81:96:a5:93:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:26 2025 GMT
            Not After : Nov  5 13:37:26 2026 GMT
        Subject: CN=7A77EDAAE9F1B111813E48539809CBA4CA6F09F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:ff:2d:e2:16:7c:30:9f:45:3f:b4:5c:4f:
                    2d:89:d0:39:7c:2e:44:c5:9a:a2:12:ec:9a:1b:d6:
                    ee:e6:97:0a:35:ac:15:73:09:d7:ec:c8:7b:be:2a:
                    af:6c:6b:f6:93:1f:60:8a:d9:d4:aa:07:98:80:90:
                    a6:ec:51:88:c4:1b:f0:25:87:f4:68:34:6c:76:d1:
                    4f:84:a5:95:bf:bf:0c:20:8f:81:37:bc:28:0a:e9:
                    ef:2a:f3:dd:6e:eb:60:fd:2f:a2:c2:e2:0b:d4:76:
                    55:d1:23:22:69:02:ee:d1:f6:38:3a:83:ca:5e:59:
                    6b:c1:79:e1:8c:0f:47:13:1d:88:b2:fc:f4:df:db:
                    e1:94:66:51:2d:bf:48:14:a8:89:76:a6:35:bb:27:
                    34:fa:32:8f:f5:cc:64:e3:d2:f3:02:ac:f9:9f:01:
                    72:21:6d:1b:ba:6a:72:23:94:e0:70:bd:3b:31:d9:
                    b7:26:36:ed:5d:63:3a:33:38:63:db:ee:bf:dd:b4:
                    b3:cf:08:28:24:07:18:e4:9f:67:f3:47:34:32:fd:
                    68:55:b9:5b:7c:7b:ee:8e:68:b4:03:14:a1:0c:32:
                    cc:93:32:e9:e6:35:42:8d:12:37:1e:dd:5e:6c:fb:
                    d0:5f:13:59:cf:54:17:ee:5e:8f:ba:8e:a1:28:9a:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:ED:AA:E9:F1:B1:11:81:3E:48:53:98:09:CB:A4:CA:6F:09:F3
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:85:e6:ac:9d:23:6e:be:f7:0b:21:9c:05:97:46:3e:b9:
         c7:01:8f:2d:26:b0:44:6b:0b:b2:cd:79:e2:c8:bb:d5:59:ac:
         84:14:db:f8:4d:1a:f3:65:2b:4e:1d:c6:e1:39:89:9c:4d:ad:
         cf:36:28:80:d8:82:2c:56:ae:3e:51:a1:df:4f:c8:f8:8f:2b:
         8a:88:9a:ad:70:64:84:18:cd:ab:4d:88:12:ad:64:97:59:81:
         57:a2:b7:6a:56:cd:85:1a:bb:f2:7a:8a:e3:e4:9c:8b:1b:d5:
         61:eb:71:03:ad:85:30:63:df:07:b3:79:75:8a:c2:b5:e1:3e:
         70:90:60:09:d0:cf:ea:c6:62:86:71:d4:3e:bb:50:80:bf:c5:
         a6:9d:2c:e1:26:96:0e:9d:4a:cd:38:49:21:95:41:a2:b7:1b:
         03:f2:97:a3:e6:8a:26:ae:5b:6e:53:a1:84:4f:d0:3c:72:76:
         6f:6a:44:a2:1a:fb:a6:43:b3:08:55:ab:75:c5:63:43:66:23:
         b5:17:8d:57:19:e7:0c:f2:72:ef:30:e3:a9:43:48:03:cb:d3:
         b6:57:53:0e:5c:7d:23:6a:f7:66:6d:85:f7:f8:1a:08:b3:00:
         7d:97:bb:41:3e:65:79:41:10:e0:a3:76:0b:27:75:8e:14:8f:
         00:e7:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:46 2025 by rpki-client