Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa
File:                     323830343a6339303a3a2f33322d3438203d3e203238313938.roa (raw, json)
Hash identifier:          ZxqO6gefQ/0FdbVDOQHEa9BgUwIw2Vm2G2LSNmudLbQ=
Subject key identifier:   AC:17:2A:8E:5C:68:A3:B9:B3:26:B7:BC:72:7E:A5:B0:D5:27:F9:CF
Certificate issuer:       /CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
Certificate serial:       1E6E80EC1A8AC1809F3148D5C1E2AF2493A1CD89
Authority key identifier: 6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa
Signing time:             Tue 29 Jul 2025 20:06:43 +0000
ROA not before:           Tue 29 Jul 2025 20:01:43 +0000
ROA not after:            Tue 28 Jul 2026 20:06:43 +0000
asID:                     28198
IP address blocks:        2804:c90::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl
                          rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6e:80:ec:1a:8a:c1:80:9f:31:48:d5:c1:e2:af:24:93:a1:cd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAA7188EADCC8C3C798B0460F218564DA04CCAD
        Validity
            Not Before: Jul 29 20:01:43 2025 GMT
            Not After : Jul 28 20:06:43 2026 GMT
        Subject: CN=AC172A8E5C68A3B9B326B7BC727EA5B0D527F9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:71:e0:27:5c:51:05:c7:06:1a:5f:19:a4:8d:
                    de:c1:90:5d:00:37:d3:f1:92:d6:d3:57:94:15:e8:
                    3b:6b:de:f4:6f:b8:82:c7:ee:a9:a9:0d:f6:e3:51:
                    80:ac:cf:8b:60:00:a4:9e:87:4e:a2:50:bb:80:dc:
                    05:f1:1a:dc:11:5c:28:e6:bd:95:6f:27:ae:52:60:
                    0d:44:13:4d:66:a1:06:e6:0d:f3:51:e2:cb:48:04:
                    ae:8e:8d:64:60:b4:f4:91:2c:18:03:2c:a4:81:b1:
                    08:56:c4:32:f9:b2:f2:bd:be:92:0b:d1:71:32:2a:
                    d6:84:8f:19:72:31:9c:2a:a1:0c:b7:83:41:59:d8:
                    d1:80:b7:d2:2d:1f:af:b3:ef:f7:79:ab:1f:45:30:
                    b6:e1:a8:3d:35:c8:e0:b9:df:d2:2c:04:be:1e:9a:
                    26:e3:57:4c:ad:af:7e:6e:ac:f3:2e:a8:4a:56:e5:
                    80:9d:c1:23:04:37:4c:cc:3a:d5:53:ae:8d:a1:ca:
                    64:c4:61:15:eb:86:9b:28:4c:c5:b6:e5:3b:df:bf:
                    52:2a:e8:9a:d8:9e:f4:76:51:14:8b:86:b9:89:16:
                    6d:97:93:1e:dd:99:51:41:d7:9c:fb:44:a1:75:d0:
                    6a:74:9e:b9:70:fc:ec:50:50:dc:02:ee:4d:5f:2b:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:2A:8E:5C:68:A3:B9:B3:26:B7:BC:72:7E:A5:B0:D5:27:F9:CF
            X509v3 Authority Key Identifier:
                keyid:6C:AA:71:88:EA:DC:C8:C3:C7:98:B0:46:0F:21:85:64:DA:04:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CAA7188EADCC8C3C798B0460F218564DA04CCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:1d:ec:17:b3:dc:a8:88:4a:40:86:64:3c:ff:7c:f6:0b:
         c8:65:13:86:f2:21:cb:fc:3c:c8:d8:f9:18:a8:36:38:5d:84:
         f2:f6:c3:a9:db:43:14:7a:f0:2c:96:a0:b9:12:96:a0:c1:ed:
         25:02:a8:b8:8f:8f:be:f3:cd:45:4d:6c:2d:76:cc:c6:62:71:
         20:30:aa:bd:6e:3a:73:d5:73:ac:70:05:17:b7:35:4a:bb:3e:
         87:a0:60:a5:43:09:88:48:80:f0:51:de:5c:8d:1c:7e:d9:d7:
         d2:b7:5a:46:0b:53:cb:97:f0:f1:be:e1:c5:68:19:78:37:da:
         4a:af:2a:82:62:b2:e0:92:23:ab:13:e5:45:6f:f4:01:e4:33:
         13:8e:57:03:ce:38:fd:5b:f9:4f:3c:50:4e:1d:70:fb:29:3e:
         7b:b5:7b:1c:8f:6a:35:45:a6:06:65:1c:0f:12:39:49:0b:36:
         84:43:ef:87:ed:e9:11:28:89:fb:ff:f8:58:0b:7d:c1:ad:7e:
         2b:48:1b:22:34:8d:dd:ad:b5:52:f3:76:79:b8:fe:3b:b6:f8:
         a3:ae:00:96:56:82:a7:4d:4d:b8:b9:40:8b:a7:16:e1:3c:8d:
         d0:7e:31:37:c0:4c:32:6d:70:b9:7b:8f:28:7c:dd:e1:90:53:
         20:cb:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:24:06 2025 by rpki-client