Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa
File:                     323830343a343831343a3a2f33322d3332203d3e20323637303936.roa (raw, json)
Hash identifier:          AN94iw1/UUtY6gtcHj/9zjD2QyQRSh+kaaj7DYKk968=
Subject key identifier:   1C:C5:DD:3B:40:2F:E3:E8:BB:4B:73:D9:51:CA:56:68:F8:F9:E2:B3
Certificate issuer:       /CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
Certificate serial:       29608674139C567EEE3C7F3874EB61713B6F4D89
Authority key identifier: 6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa
Signing time:             Wed 05 Nov 2025 17:09:15 +0000
ROA not before:           Wed 05 Nov 2025 17:04:15 +0000
ROA not after:            Wed 04 Nov 2026 17:09:15 +0000
asID:                     267096
IP address blocks:        2804:4814::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.crl
                          rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 18:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:60:86:74:13:9c:56:7e:ee:3c:7f:38:74:eb:61:71:3b:6f:4d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA37C4D080AEB9F5587B7C537BE633D714F5748
        Validity
            Not Before: Nov  5 17:04:15 2025 GMT
            Not After : Nov  4 17:09:15 2026 GMT
        Subject: CN=1CC5DD3B402FE3E8BB4B73D951CA5668F8F9E2B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:58:5f:ef:5d:52:ae:c0:17:91:cf:68:a3:
                    04:19:b7:e7:65:c1:98:be:03:ee:ce:11:6a:41:6a:
                    d4:86:37:08:54:f8:55:69:ee:7f:31:57:89:43:60:
                    ee:fc:b1:d4:8d:cc:2a:b7:54:ec:da:8a:ce:fd:66:
                    47:28:94:ba:f0:9f:6b:9b:69:3c:47:e9:7c:1f:b8:
                    49:be:7e:19:9b:0b:01:dc:4b:17:ab:45:1e:32:6f:
                    20:1d:82:34:97:4d:b6:98:07:5e:2a:53:10:1e:56:
                    e7:3f:0d:25:0e:8c:db:71:45:b5:da:01:5d:64:14:
                    b5:75:f2:44:67:34:22:ca:1d:a2:46:ae:b9:90:08:
                    7a:4b:c9:d0:9e:8e:bd:2a:5d:ca:9b:cd:bf:21:7c:
                    ca:f5:93:b9:f2:60:53:39:44:a7:64:c5:1a:a1:bf:
                    a8:a8:95:91:95:36:ba:77:d9:85:cc:2c:1d:78:db:
                    a8:bd:15:ce:95:55:ec:46:98:bf:a3:84:13:5b:ab:
                    7d:dd:23:9e:71:90:58:5f:f7:19:48:97:0f:4f:42:
                    c6:77:d5:b9:ff:87:ec:18:cc:4d:86:cb:2a:31:8f:
                    21:b4:c8:8f:73:7c:b9:d1:2a:c7:38:66:87:3f:0b:
                    25:c7:1c:90:3c:9b:8a:79:05:0a:2a:e4:d4:d5:13:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:DD:3B:40:2F:E3:E8:BB:4B:73:D9:51:CA:56:68:F8:F9:E2:B3
            X509v3 Authority Key Identifier:
                keyid:6E:A3:7C:4D:08:0A:EB:9F:55:87:B7:C5:37:BE:63:3D:71:4F:57:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/6EA37C4D080AEB9F5587B7C537BE633D714F5748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA37C4D080AEB9F5587B7C537BE633D714F5748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6k8A2eUtBwi5kA9PJ6xpaszBSccycrNpt2ZJeBRJ5Jn4/0/323830343a343831343a3a2f33322d3332203d3e20323637303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4814::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:ea:03:6d:3b:58:9a:e7:af:fb:1a:98:73:a1:53:d7:36:71:
         b0:1d:9b:d7:a1:ed:29:71:71:01:6c:7d:ba:c6:59:d7:56:3d:
         02:38:69:7a:c2:d0:51:4f:dc:d8:49:50:46:41:bd:1c:fd:49:
         61:47:65:a7:00:41:73:6a:1b:82:99:a9:30:1f:67:b5:15:73:
         87:1d:a8:48:ef:ee:c0:ed:4f:b9:67:f1:23:d2:1a:ed:4a:d8:
         e8:1e:50:8b:fc:27:63:e7:2c:9c:ff:ba:de:36:3d:ef:77:c9:
         40:aa:9d:1d:ff:8b:65:b8:a0:51:58:7f:1e:ab:30:77:be:1e:
         a0:af:53:1b:71:48:57:22:5c:b7:35:82:07:58:dc:86:a3:28:
         84:be:69:ae:95:df:63:9d:0f:37:54:61:cb:3f:f1:e0:49:1c:
         60:12:0f:0e:89:e3:34:8c:ce:93:6a:97:25:34:40:4e:77:d1:
         33:2c:62:ef:03:65:fe:ab:f2:d5:86:e0:18:ed:d3:87:48:9f:
         5f:56:65:45:02:80:a4:f1:af:7e:60:1a:69:76:8e:35:d2:6b:
         9a:c4:b4:d6:33:82:2e:76:7b:4e:bb:c8:c0:66:13:92:36:58:
         e7:f3:02:da:1b:3c:b9:3b:0f:1d:84:cb:a5:11:29:66:9e:a3:
         69:e6:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:46 2025 by rpki-client