Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d3334203d3e203631383538.roa
File:                     323830343a316136633a3a2f33322d3334203d3e203631383538.roa (raw, json)
Hash identifier:          otUYZ0f5gumGzu2MLUoRhDcy4uCTIKkzNdlGa5Leh3I=
Subject key identifier:   83:A1:17:EC:15:11:DD:3B:F7:AF:1F:B0:D0:25:18:17:E9:31:90:0C
Certificate issuer:       /CN=3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28
Certificate serial:       2ACEC58521578B828F1066B8EABA9B36160C2E86
Authority key identifier: 3F:4E:FA:AB:4C:A3:61:A2:6D:0F:7A:0E:4D:69:E8:36:CF:01:6A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d3334203d3e203631383538.roa
Signing time:             Thu 23 Jul 2026 20:55:34 +0000
ROA not before:           Thu 23 Jul 2026 20:50:34 +0000
ROA not after:            Thu 22 Jul 2027 20:55:34 +0000
asID:                     61858
IP address blocks:        2804:1a6c::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.crl
                          rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ce:c5:85:21:57:8b:82:8f:10:66:b8:ea:ba:9b:36:16:0c:2e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28
        Validity
            Not Before: Jul 23 20:50:34 2026 GMT
            Not After : Jul 22 20:55:34 2027 GMT
        Subject: CN=83A117EC1511DD3BF7AF1FB0D0251817E931900C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:74:1a:e3:17:68:db:c8:aa:8a:f1:a8:1c:
                    8a:22:13:92:89:1f:2d:1e:62:2e:5f:fd:d2:69:bd:
                    60:8d:15:da:62:1d:a6:60:8e:ef:36:8a:ba:fd:32:
                    c6:67:03:b4:6f:3b:ed:32:73:5f:82:1c:f7:b2:ad:
                    75:81:03:4a:e7:19:82:7b:3e:e5:e4:4b:60:6c:69:
                    bd:61:44:a1:56:6d:6c:5a:66:98:81:53:4d:72:a2:
                    ab:28:cf:61:f3:2e:ac:53:b3:36:a2:6e:50:67:03:
                    55:45:c8:da:a8:66:28:90:e6:b8:d1:ae:98:28:93:
                    ec:b5:bf:e4:98:45:73:0c:41:50:2f:57:ef:35:7e:
                    59:b4:76:6b:fe:ab:6c:5e:23:a8:42:92:b2:db:ea:
                    99:15:5d:e4:8e:7f:f6:08:f6:82:0a:38:5e:4a:06:
                    30:a3:a1:7e:f0:ac:03:46:60:d9:59:10:96:77:2d:
                    0e:82:62:f2:de:97:92:c9:d3:fe:90:b8:c5:ff:9a:
                    70:97:bd:57:64:5b:6a:b7:36:99:a3:56:c1:c8:bd:
                    00:a6:7f:34:0c:00:46:4b:5b:ba:c1:05:88:cf:bc:
                    cc:e5:76:c7:a7:2e:08:92:42:34:a0:c2:5e:8a:d3:
                    35:a0:3d:76:41:8c:b2:2c:d2:94:c2:b2:86:01:1d:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:17:EC:15:11:DD:3B:F7:AF:1F:B0:D0:25:18:17:E9:31:90:0C
            X509v3 Authority Key Identifier:
                keyid:3F:4E:FA:AB:4C:A3:61:A2:6D:0F:7A:0E:4D:69:E8:36:CF:01:6A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F4EFAAB4CA361A26D0F7A0E4D69E836CF016A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/323830343a316136633a3a2f33322d3334203d3e203631383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:8b:36:2c:c2:9a:d3:82:bf:54:1f:f6:5b:5c:08:c1:b5:
         61:77:aa:c5:e8:a7:17:bc:00:c9:a4:f0:66:31:72:1e:bf:c2:
         68:6c:31:ae:bc:de:bb:be:20:9e:4d:e6:85:1a:49:cb:83:f5:
         cf:bb:41:62:66:74:53:10:86:2e:05:23:9a:e0:df:46:39:d4:
         0b:03:71:e7:59:67:b1:44:3e:dd:8f:3f:86:82:02:a0:32:e1:
         4d:ec:bc:e5:51:a9:d6:45:32:5f:02:0b:78:65:51:2e:d0:c7:
         53:51:9e:4f:01:3a:3e:50:22:9f:52:1e:55:e7:3d:bf:18:fc:
         76:a2:6f:75:5d:8f:ba:28:e5:f9:78:9f:21:c2:b5:9b:82:29:
         0b:e4:03:1a:3a:ab:ac:77:60:5a:10:24:c3:46:f7:16:2f:55:
         6f:5a:39:30:d2:7f:1c:0d:60:a9:67:c5:ac:0b:d3:8c:f0:46:
         8d:ae:a5:2a:24:b3:d5:a8:52:91:ff:76:a3:58:d1:39:4d:a1:
         06:8a:4d:5a:c0:c9:c3:7f:26:d7:b0:14:c3:27:5c:24:ac:9d:
         3d:84:43:45:a4:51:01:92:45:d1:d3:ec:3d:44:54:d0:c9:7c:
         53:9c:35:8d:0d:2d:01:20:b5:27:87:42:b4:b1:0e:91:31:13:
         43:9d:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:00 2026 by rpki-client