Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3438203d3e203238313938.roa
File:                     323830343a3838343a3a2f33322d3438203d3e203238313938.roa (raw, json)
Hash identifier:          u5oUBkEh3BrVSZCKHrt3t7eQvSI0j/z4TqFlqOsrf14=
Subject key identifier:   CF:8C:2B:23:CE:14:06:4F:C3:09:C4:3D:49:BD:C5:BD:63:50:B1:A2
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       5C31BDEA1D70FD099615FCB3A949291D0C51C2AB
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3438203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:00:59 +0000
ROA not before:           Tue 29 Jul 2025 19:55:59 +0000
ROA not after:            Tue 28 Jul 2026 20:00:59 +0000
asID:                     28198
IP address blocks:        2804:884::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:31:bd:ea:1d:70:fd:09:96:15:fc:b3:a9:49:29:1d:0c:51:c2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 19:55:59 2025 GMT
            Not After : Jul 28 20:00:59 2026 GMT
        Subject: CN=CF8C2B23CE14064FC309C43D49BDC5BD6350B1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:a6:0a:1c:b9:72:13:d5:1e:0c:e2:ac:f3:
                    ec:89:b9:93:94:4a:be:86:a0:81:9f:6a:eb:3f:e4:
                    6c:f6:85:b1:6f:07:9d:7e:cb:06:a5:28:14:e7:97:
                    20:24:34:2b:df:27:93:b3:35:17:f7:25:29:a7:aa:
                    b6:ee:fc:df:42:06:d9:b7:d2:d8:13:71:c7:92:6f:
                    f9:a8:da:6a:e2:58:05:6a:1a:04:2b:f6:44:8e:f4:
                    0d:19:7d:8e:61:bd:af:bc:8e:3f:86:19:a2:11:17:
                    31:95:39:fd:1a:d9:ae:d5:24:dd:ac:80:7a:82:ec:
                    d2:c8:6d:19:39:2e:10:cb:94:a1:a9:c0:3c:30:05:
                    9b:08:05:1f:0c:6a:d2:e6:ab:cc:34:66:6d:62:9d:
                    01:e1:b0:45:08:4c:75:ac:bd:7c:c1:60:fc:19:21:
                    72:0e:a4:3d:f1:c7:75:3d:80:fb:da:13:57:26:98:
                    e0:5e:ca:8f:61:65:e6:7a:82:1f:4f:8a:8d:6b:b9:
                    c9:a6:b4:29:ef:fd:9c:b3:b8:0c:75:7f:d3:07:b9:
                    3e:59:45:f4:f6:eb:08:9c:67:64:55:9b:84:7f:01:
                    b8:61:2a:6d:c3:45:f2:20:16:bd:10:91:fd:d5:6b:
                    98:d5:1f:fd:c4:1c:a2:76:7e:60:a0:48:5c:1e:e1:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8C:2B:23:CE:14:06:4F:C3:09:C4:3D:49:BD:C5:BD:63:50:B1:A2
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3438203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:58:de:80:20:1e:39:2d:37:62:70:8b:7f:27:7d:d4:ba:
         ec:f0:b7:69:13:5e:c5:60:d2:13:d7:71:e6:de:ae:22:18:78:
         da:fd:8c:bd:a7:a3:04:84:c0:4a:0c:97:d5:18:8f:1d:16:27:
         6c:68:ff:ce:78:93:4f:3c:a6:87:b8:67:66:16:6d:ed:c0:6e:
         28:1a:aa:69:51:71:bf:e7:07:74:bc:12:42:ac:c1:6a:29:e0:
         66:6c:3b:57:7d:ad:3f:6e:6c:ce:6d:50:26:fa:25:46:e9:4b:
         3c:4a:c8:00:53:20:f4:f9:4d:81:5a:c7:36:ae:fd:4e:79:cb:
         6d:08:8a:3d:bf:86:ad:ff:ba:ab:e0:5b:6e:63:e8:7f:46:e1:
         a5:96:3b:6c:7f:41:82:1f:f0:c9:7f:d2:8e:f0:77:cb:96:6e:
         2a:5c:71:9f:d2:02:31:95:8a:c6:49:ff:e7:79:2f:14:12:3d:
         aa:45:8d:aa:73:ef:35:e4:68:e7:5c:2e:43:19:30:9e:3a:e5:
         15:f3:d7:a1:14:d1:8a:5e:00:fd:a9:85:7a:3e:6c:e1:25:b5:
         79:84:5b:ac:1e:21:88:c8:15:2c:b8:59:93:bd:db:a0:12:a1:
         43:2a:ec:10:0f:82:7b:99:c1:59:1a:5a:30:1e:02:99:73:78:
         38:e1:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:01 2025 by rpki-client