Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a323030303a3a2f33352d3335203d3e20323634383934.roa
File:                     323830343a326637633a323030303a3a2f33352d3335203d3e20323634383934.roa (raw, json)
Hash identifier:          zeGjkxDrktb9XR34Dl4moecfOAh4lOJ+Ww4va1BCnf8=
Subject key identifier:   59:D5:2C:50:E9:8D:15:65:BB:6E:90:8F:90:46:B9:D7:39:DF:A6:C6
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       606CD0A0C06E67D95714BECA25E13D84BC135CBE
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a323030303a3a2f33352d3335203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:11:39 +0000
ROA not before:           Sat 31 Oct 2026 20:06:39 +0000
ROA not after:            Sat 30 Oct 2027 20:11:39 +0000
asID:                     264894
IP address blocks:        2804:2f7c:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:d0:a0:c0:6e:67:d9:57:14:be:ca:25:e1:3d:84:bc:13:5c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:06:39 2026 GMT
            Not After : Oct 30 20:11:39 2027 GMT
        Subject: CN=59D52C50E98D1565BB6E908F9046B9D739DFA6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:c7:82:ee:e1:86:3d:88:60:db:0d:90:a0:
                    3b:8d:58:17:6d:6d:7a:af:07:6a:0f:d4:66:7b:34:
                    c4:0f:f1:f9:7b:2f:1e:72:ed:0e:ef:aa:56:4e:1f:
                    ee:37:22:3f:70:43:f5:76:ce:56:53:14:e7:3c:dc:
                    49:ea:cf:bb:c1:dd:be:24:c4:e3:05:42:ce:d2:e8:
                    7e:db:bb:05:6e:2d:6b:29:6d:95:d7:0c:c3:41:30:
                    2e:00:63:37:e8:33:d4:7b:40:6b:87:9a:c7:f2:e4:
                    d9:af:a9:51:03:bd:1d:94:1e:e1:90:79:4d:79:f9:
                    2d:4f:48:4d:35:33:f4:3f:f1:eb:f0:0d:a7:a1:60:
                    c1:92:5a:52:5b:6b:93:e2:2c:a4:0d:e9:ed:1b:8c:
                    de:3e:d9:d8:0c:ab:ab:99:7a:24:95:99:4b:b5:53:
                    da:00:e6:f3:5e:b3:43:15:ea:f6:b4:3a:e9:31:8d:
                    eb:ff:36:a2:4f:44:50:2a:0f:9c:9a:11:3d:bd:7b:
                    fb:41:a1:b9:bf:f5:5b:b8:e5:13:81:46:7c:b3:75:
                    38:63:0f:aa:39:39:46:81:ba:8a:46:88:94:3d:b6:
                    5b:4c:fb:f9:26:4f:ab:7f:91:70:36:b6:0f:d8:f6:
                    b5:74:3f:72:4e:e2:1a:13:5e:a1:c8:a1:e4:0d:48:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:2C:50:E9:8D:15:65:BB:6E:90:8F:90:46:B9:D7:39:DF:A6:C6
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a323030303a3a2f33352d3335203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:29:9f:92:5d:2f:b8:5b:46:89:db:91:e4:fe:72:8f:3d:
         ca:71:ac:b2:7d:65:95:3b:56:35:a4:68:80:89:3f:c9:e3:fe:
         0f:cf:29:70:3f:0d:f1:87:e3:a8:7d:a5:14:c9:c9:74:93:68:
         d0:bb:a8:17:6e:83:80:66:93:7d:0a:2f:29:81:3f:be:13:ae:
         d3:18:91:91:86:e3:ae:30:c5:90:c8:8f:43:37:e2:9b:83:8b:
         f4:1d:f1:0f:e4:42:71:6d:30:a0:bf:c9:8e:2c:f0:f5:67:5a:
         31:1a:e2:d6:a8:82:33:93:53:34:90:0b:8b:d2:8c:02:05:b3:
         f4:22:37:2d:26:70:81:40:ee:00:3f:40:b7:75:06:bc:ef:d9:
         0c:28:02:46:b6:da:1c:28:80:5a:57:4b:cc:bc:cd:6b:45:1c:
         59:d7:69:55:8d:f2:1e:cd:74:87:ab:73:69:62:c1:a8:a9:59:
         9c:57:32:04:5f:ac:e5:0e:69:e1:0e:41:bc:de:6a:5b:e8:54:
         41:04:34:7d:7e:eb:66:70:bb:fc:6d:a0:12:64:14:e2:a4:6b:
         89:39:02:d0:0b:59:65:b9:de:f6:d5:26:17:9c:32:b4:90:6e:
         b3:1d:ea:8d:4c:3c:bd:2b:90:73:fa:e2:85:c1:a2:94:b8:f9:
         ca:80:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----