Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830343a316638303a383030303a3a2f33332d3333203d3e20323735373938.roa
File:                     323830343a316638303a383030303a3a2f33332d3333203d3e20323735373938.roa (raw, json)
Hash identifier:          2nqmlX01AFgRN4LvRfdpjHqipV0ZoXcq7KEr8INPTO4=
Subject key identifier:   2F:FF:4D:3F:37:A3:AA:A4:9B:35:59:58:5F:ED:CD:D5:14:78:A9:27
Certificate issuer:       /CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
Certificate serial:       168D378E6F62A355AB9CD7FA1902A936E0194266
Authority key identifier: E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830343a316638303a383030303a3a2f33332d3333203d3e20323735373938.roa
Signing time:             Fri 25 Sep 2026 20:08:56 +0000
ROA not before:           Fri 25 Sep 2026 20:03:56 +0000
ROA not after:            Fri 24 Sep 2027 20:08:56 +0000
asID:                     275798
IP address blocks:        2804:1f80:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl
                          rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 18:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8d:37:8e:6f:62:a3:55:ab:9c:d7:fa:19:02:a9:36:e0:19:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E566AB13DF19F2E8935CAFB119E40308D0A08146
        Validity
            Not Before: Sep 25 20:03:56 2026 GMT
            Not After : Sep 24 20:08:56 2027 GMT
        Subject: CN=2FFF4D3F37A3AAA49B3559585FEDCDD51478A927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:b0:98:ba:54:96:5c:93:75:78:af:f8:0c:
                    6c:32:6a:ba:1a:6f:11:dd:ff:98:fd:dc:ff:f4:44:
                    ca:54:a5:9d:b3:3b:4d:80:9f:33:d2:af:f8:61:f4:
                    cf:d4:56:d1:83:14:55:ec:44:c8:71:58:c0:83:89:
                    93:de:e5:43:75:af:30:1b:86:f5:6c:cc:5f:ef:fc:
                    82:6f:bb:bb:5c:90:cb:a7:cd:4e:e1:e1:4c:e2:17:
                    06:b9:50:b4:3d:da:05:3f:ef:b0:2b:2c:1b:4f:24:
                    f5:3d:1d:09:e6:89:f5:e5:83:a3:d8:1a:d9:74:e3:
                    53:14:f2:34:2d:ec:aa:87:a0:d2:02:9f:2c:85:89:
                    25:99:1c:ae:89:7e:84:42:34:41:dd:14:c0:a3:85:
                    f8:34:46:ad:42:ce:2b:07:3c:70:0f:9c:f8:ff:21:
                    3d:df:75:b0:67:bc:9d:ad:0d:49:b8:f6:33:bf:a4:
                    2e:69:c3:b8:e2:f5:9a:73:ac:0a:4e:28:d5:a0:22:
                    3c:03:6b:72:db:c2:60:ec:ad:ca:04:5f:cb:9c:70:
                    95:94:59:52:79:b5:db:1c:8d:41:cf:1f:91:28:8f:
                    01:4d:f5:0b:e7:52:72:d6:fe:8b:02:39:d0:78:20:
                    2a:d7:46:50:b4:54:6b:00:9f:bb:d2:96:91:3b:54:
                    52:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FF:4D:3F:37:A3:AA:A4:9B:35:59:58:5F:ED:CD:D5:14:78:A9:27
            X509v3 Authority Key Identifier:
                keyid:E5:66:AB:13:DF:19:F2:E8:93:5C:AF:B1:19:E4:03:08:D0:A0:81:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E566AB13DF19F2E8935CAFB119E40308D0A08146.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QvnUnEXe5JTf7VhQHnUFRwdzeEpbF4rt3b5PLrvdeyy/1/323830343a316638303a383030303a3a2f33332d3333203d3e20323735373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f80:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:6e:b8:c4:ae:4b:99:8e:db:53:07:7d:23:07:f0:21:9f:56:
         e0:30:c1:18:b1:95:98:d0:fb:b9:8b:91:7b:15:21:46:34:98:
         3b:4e:d3:6f:1e:01:04:19:f6:26:cf:5e:7f:74:d7:1b:25:b7:
         27:1e:2e:22:f7:f7:70:f1:31:47:33:42:36:ec:60:ca:8f:1f:
         cf:2d:c6:00:ad:ca:c1:d1:9b:e4:0b:4a:35:0c:a2:fe:bd:3a:
         6c:fe:ad:46:9e:ee:a3:2c:94:37:25:93:19:eb:64:00:d1:88:
         59:81:4b:64:32:b8:31:a7:74:79:ec:ae:33:4f:37:ee:2b:cc:
         cc:82:8b:71:a3:97:74:dc:bf:29:64:66:99:da:f5:c8:1e:e2:
         7c:ec:6d:8e:8f:8d:70:73:ae:33:c9:90:09:3f:ed:75:42:9d:
         e2:52:c1:a1:16:df:f7:d7:f0:39:c5:d3:16:48:9a:79:5d:d0:
         4d:ea:a2:b3:e1:51:07:41:1d:79:ac:3b:87:18:d4:07:e2:a0:
         1d:e7:d6:51:3c:a9:9b:67:8e:d0:49:c3:2b:39:94:d9:ff:7a:
         44:0a:2a:5f:bd:9a:26:8d:1f:63:80:56:e3:bc:5d:26:cf:35:
         ba:02:00:7e:7f:c2:bb:60:89:14:10:b1:18:f2:eb:5f:2e:f9:
         cc:dd:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:33:05 2026 by rpki-client