Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          LYSYtb1t//1T+nsA4RpuS0AFnsnb6e+4KiAZ8rHjCls=
Subject key identifier:   2D:A3:01:E6:D0:43:82:38:8E:DD:EE:45:B3:F5:F8:0B:FA:6C:9D:34
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       5734E20148FFFEA1EEF410EADF303A9DBB7665F2
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 06 Nov 2025 13:37:27 +0000
ROA not before:           Thu 06 Nov 2025 13:32:27 +0000
ROA not after:            Thu 05 Nov 2026 13:37:27 +0000
asID:                     53047
IP address blocks:        2804:6f0:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 07 Nov 2025 16:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:34:e2:01:48:ff:fe:a1:ee:f4:10:ea:df:30:3a:9d:bb:76:65:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Nov  6 13:32:27 2025 GMT
            Not After : Nov  5 13:37:27 2026 GMT
        Subject: CN=2DA301E6D04382388EDDEE45B3F5F80BFA6C9D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:ee:d0:1c:83:a2:b1:20:61:99:1f:4e:49:
                    2a:68:74:2f:bf:08:8e:85:8b:e3:01:da:9d:17:77:
                    b7:a1:85:a2:a6:b6:48:5b:f1:bd:ed:a0:60:ec:ac:
                    53:e6:bc:a2:15:e0:a9:6e:98:28:5c:ed:44:85:c7:
                    96:07:4d:91:a8:9a:06:4e:c2:d8:39:a4:99:1f:81:
                    3c:1d:d7:49:90:8a:07:f7:c7:aa:25:3b:86:71:6d:
                    c8:e1:1f:e7:f6:18:ea:b9:ae:0c:5d:d5:48:64:3f:
                    64:72:5f:09:a6:97:a4:a9:f5:23:a6:7e:af:2c:32:
                    9b:ea:0e:e7:9f:d6:5b:bb:3d:af:20:74:2c:79:00:
                    cf:5a:77:85:41:b9:f9:71:db:65:68:40:e4:e7:a9:
                    fc:64:ef:47:9c:68:82:ca:a6:a6:68:65:d6:2f:b6:
                    e1:ca:5b:ae:af:5b:95:4e:d0:bc:f9:69:09:f3:39:
                    8c:11:c6:55:6c:20:c5:8f:0c:02:e8:0a:06:fa:f6:
                    c3:72:f9:9c:d5:d3:ba:20:f7:2c:97:22:56:8c:29:
                    4d:94:d9:a5:9e:db:bc:d2:bf:64:fc:cd:27:77:9e:
                    1d:ab:5d:0e:08:1f:4b:30:3d:39:cc:12:2c:0a:1e:
                    7c:68:05:69:e2:2b:49:12:29:27:00:32:bb:ed:8d:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:01:E6:D0:43:82:38:8E:DD:EE:45:B3:F5:F8:0B:FA:6C:9D:34
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:fe:12:00:8e:43:44:19:be:19:8d:69:cf:a7:05:23:2e:
         e8:be:5a:cb:ab:73:7a:9f:58:12:81:2d:1b:53:c7:3b:2c:f9:
         4d:de:85:53:38:a2:50:7a:5c:21:49:dc:61:c6:4d:32:48:08:
         7b:60:e9:c9:d9:7c:f1:e5:06:a2:5f:19:5c:82:80:cd:df:c7:
         bd:9e:d6:82:7f:be:9d:12:b7:e3:2d:86:dc:c9:b8:48:3f:0d:
         0b:0e:ee:ae:1e:75:e8:55:b4:d1:d8:0c:f0:63:ec:df:6b:5f:
         eb:1b:b7:6b:67:8c:f7:26:a1:8f:bd:3f:a3:2a:2b:d9:d1:b7:
         9c:95:47:0a:ee:89:72:44:5e:b1:e6:ce:ce:72:92:b5:eb:22:
         2f:11:36:1b:d1:2c:fc:da:00:a2:59:78:4b:60:11:4c:d3:cf:
         92:47:40:32:e6:6e:12:6d:aa:25:86:d5:aa:59:32:31:81:2b:
         44:06:cd:24:67:c5:9a:fe:9f:99:9e:d5:c6:ba:e2:b2:0d:79:
         5a:21:fc:31:9c:2f:c3:f1:bd:86:2a:a8:f9:7a:d4:64:7d:e2:
         72:19:1a:ee:92:cd:85:6c:b4:01:cd:53:15:24:51:7a:db:e4:
         5b:9c:00:aa:14:ef:8f:23:94:bd:9e:4f:22:4e:81:9d:d7:8d:
         11:23:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 06:23:44 2025 by rpki-client