Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/323830343a353036303a3a2f33322d3334203d3e20323638333835.roa
File:                     323830343a353036303a3a2f33322d3334203d3e20323638333835.roa (raw, json)
Hash identifier:          Xb0QhNuSdOg4uY2CFO4Di9U0plykT666Lic8EiOKKFs=
Subject key identifier:   20:12:BC:A6:20:B4:4E:F6:CA:8C:52:65:6E:16:0B:E3:DC:C8:22:3F
Certificate issuer:       /CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
Certificate serial:       7D10BF502F92CF09BA283C592959C1D595E4B861
Authority key identifier: 6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/323830343a353036303a3a2f33322d3334203d3e20323638333835.roa
Signing time:             Tue 01 Jul 2025 20:00:25 +0000
ROA not before:           Tue 01 Jul 2025 19:55:25 +0000
ROA not after:            Tue 30 Jun 2026 20:00:25 +0000
asID:                     268385
IP address blocks:        2804:5060::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl
                          rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 07:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:bf:50:2f:92:cf:09:ba:28:3c:59:29:59:c1:d5:95:e4:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96
        Validity
            Not Before: Jul  1 19:55:25 2025 GMT
            Not After : Jun 30 20:00:25 2026 GMT
        Subject: CN=2012BCA620B44EF6CA8C52656E160BE3DCC8223F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:83:b5:5d:91:5c:70:6d:80:32:36:2c:8b:
                    f1:6a:e8:ca:5f:a2:82:79:f2:99:3e:c0:f2:55:39:
                    56:2d:b8:fa:4e:a0:b8:9f:ab:61:0b:25:20:9e:c7:
                    53:f5:2b:f8:0d:47:bc:41:6c:8c:22:0d:c2:56:72:
                    3f:ec:95:15:8b:3a:93:b6:db:7c:36:88:a1:49:b0:
                    aa:71:f3:cb:e0:24:12:6b:06:08:e1:e0:8e:dd:ea:
                    8e:da:61:a7:e0:e5:07:49:e8:80:6e:00:87:b2:f4:
                    52:3a:8c:35:78:d8:4b:43:6b:60:d1:f6:77:f4:df:
                    6e:7a:e8:c7:e7:7e:4e:47:2c:8b:f7:b9:35:9f:26:
                    92:fc:96:e4:09:cc:52:34:2b:2c:90:39:18:51:27:
                    8b:95:58:66:fa:a9:ea:1c:fa:8b:b3:a1:79:38:1e:
                    3a:96:d2:1c:73:c1:a8:4f:be:43:43:f7:12:e8:71:
                    f6:8b:fd:5f:85:09:10:e4:b2:f2:21:12:c6:ed:93:
                    44:7c:19:5d:58:4e:f6:2b:56:0b:79:de:61:1d:e6:
                    81:9a:76:07:b6:2b:20:97:e1:e8:e6:cf:a9:85:8e:
                    99:b2:fa:93:a3:cf:c9:65:34:40:0f:16:95:c4:56:
                    a7:9d:d8:b8:9a:29:93:de:ce:cf:f0:33:22:9c:e3:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:BC:A6:20:B4:4E:F6:CA:8C:52:65:6E:16:0B:E3:DC:C8:22:3F
            X509v3 Authority Key Identifier:
                keyid:6C:7E:69:D6:E3:D5:39:A7:E5:D0:2A:6A:A4:62:ED:A7:7A:75:CE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C7E69D6E3D539A7E5D02A6AA462EDA77A75CE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTq61FtXryD7Vrp73grWsim9ZMUQXd4j616LuTE2cjVn/0/323830343a353036303a3a2f33322d3334203d3e20323638333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5060::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:e9:38:27:38:e6:37:71:cc:3f:2b:6e:6b:72:fd:24:cc:bd:
         f6:6d:53:23:8c:55:b0:4d:0f:ca:ff:45:70:be:af:20:d4:5e:
         c0:89:c3:9d:36:72:76:f0:c2:83:66:d2:b6:25:bb:96:6b:70:
         19:10:be:92:df:12:8b:50:9a:f1:46:2c:cb:6c:93:5a:99:05:
         5f:30:89:3f:16:0d:77:46:17:da:4d:84:6f:2a:2e:1b:e7:e5:
         b9:51:86:ac:f5:56:13:9c:3d:77:68:fe:2c:88:44:cc:61:2c:
         4b:8d:26:68:d9:c0:e9:d0:d5:18:f4:6d:1b:3f:86:c5:33:64:
         de:aa:58:f0:41:44:06:84:17:39:21:25:c5:1f:10:65:81:62:
         5b:b8:7b:bd:35:35:17:28:e9:ac:b0:e6:07:0f:41:02:eb:40:
         92:52:7d:4c:31:b1:91:f6:92:f7:b5:cb:7f:40:36:40:38:cf:
         bf:7c:93:da:51:18:27:7d:0f:5a:f1:c3:67:47:ca:6e:e3:33:
         b4:38:e2:fe:7b:30:b3:8e:c0:56:0d:fd:75:47:99:3b:c1:0d:
         85:cd:04:b7:3e:f2:4c:2a:ef:c9:c9:5c:74:25:5f:29:15:f9:
         77:17:b1:65:9d:87:54:97:ba:ac:ef:7e:3c:49:88:4b:b2:d2:
         0c:d3:3c:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfRC/UC+Szwm6KDxZKVnB1ZXkuGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM3RTY5RDZFM0Q1MzlBN0U1RDAyQTZBQTQ2MkVEQTc3
QTc1Q0U5NjAeFw0yNTA3MDExOTU1MjVaFw0yNjA2MzAyMDAwMjVaMDMxMTAvBgNV
BAMTKDIwMTJCQ0E2MjBCNDRFRjZDQThDNTI2NTZFMTYwQkUzRENDODIyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzT4O1XZFccG2AMjYsi/Fq6Mpf
ooJ58pk+wPJVOVYtuPpOoLifq2ELJSCex1P1K/gNR7xBbIwiDcJWcj/slRWLOpO2
23w2iKFJsKpx88vgJBJrBgjh4I7d6o7aYafg5QdJ6IBuAIey9FI6jDV42EtDa2DR
9nf032566Mfnfk5HLIv3uTWfJpL8luQJzFI0KyyQORhRJ4uVWGb6qeoc+ouzoXk4
HjqW0hxzwahPvkND9xLocfaL/V+FCRDksvIhEsbtk0R8GV1YTvYrVgt53mEd5oGa
dge2KyCX4ejmz6mFjpmy+pOjz8llNEAPFpXEVqed2LiaKZPezs/wMyKc4zWhAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUIBK8piC0TvbKjFJlbhYL49zIIj8wHwYDVR0j
BBgwFoAUbH5p1uPVOafl0CpqpGLtp3p1zpYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlRxNjFGdFhyeUQ3VnJwNzNncldzaW05Wk1VUVhkNGo2MTZMdVRFMmNq
Vm4vMC82QzdFNjlENkUzRDUzOUE3RTVEMDJBNkFBNDYyRURBNzdBNzVDRTk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDN0U2OUQ2RTNENTM5QTdF
NUQwMkE2QUE0NjJFREE3N0E3NUNFOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUcTYxRnRYcnlEN1ZycDczZ3JXc2ltOVpNVVFYZDRqNjE2THVURTJjalZuLzAv
MzIzODMwMzQzYTM1MzAzNjMwM2EzYTJmMzMzMjJkMzMzNDIwM2QzZTIwMzIzNjM4
MzMzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARQYDANBgkqhkiG9w0BAQsFAAOCAQEALOk4Jzjm
N3HMPytua3L9JMy99m1TI4xVsE0Pyv9FcL6vINRewInDnTZydvDCg2bStiW7lmtw
GRC+kt8Si1Ca8UYsy2yTWpkFXzCJPxYNd0YX2k2EbyouG+fluVGGrPVWE5w9d2j+
LIhEzGEsS40maNnA6dDVGPRtGz+GxTNk3qpY8EFEBoQXOSElxR8QZYFiW7h7vTU1
FyjprLDmBw9BAutAklJ9TDGxkfaS97XLf0A2QDjPv3yT2lEYJ30PWvHDZ0fKbuMz
tDji/nsws47AVg39dUeZO8ENhc0Etz7yTCrvyclcdCVfKRX5dxexZZ2HVJe6rO9+
PEmIS7LSDNM8hg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:06:50 2025 by rpki-client