Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a383030303a3a2f33342d3334203d3e20323730323637.roa
File:                     323830343a363936343a383030303a3a2f33342d3334203d3e20323730323637.roa (raw, json)
Hash identifier:          yoAZxAqUD1wfQOnxZcWQ5KWPbMx2MHzPF6jSoco7aYM=
Subject key identifier:   12:27:4E:B6:68:E0:CB:02:F6:C5:BC:77:04:3E:2D:1B:AF:07:E7:D1
Certificate issuer:       /CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
Certificate serial:       39C7AA833B21B59081C743E435E2503C06644942
Authority key identifier: 24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a383030303a3a2f33342d3334203d3e20323730323637.roa
Signing time:             Tue 28 Jul 2026 18:37:32 +0000
ROA not before:           Tue 28 Jul 2026 18:32:32 +0000
ROA not after:            Tue 27 Jul 2027 18:37:32 +0000
asID:                     270267
IP address blocks:        2804:6964:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl
                          rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:aa:83:3b:21:b5:90:81:c7:43:e4:35:e2:50:3c:06:64:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
        Validity
            Not Before: Jul 28 18:32:32 2026 GMT
            Not After : Jul 27 18:37:32 2027 GMT
        Subject: CN=12274EB668E0CB02F6C5BC77043E2D1BAF07E7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:30:2a:e8:e8:61:f9:f7:6f:6c:98:52:fb:
                    3b:44:d4:8a:4a:10:bb:fd:b8:83:10:72:1b:0e:93:
                    f1:8f:f7:80:82:72:ec:e1:df:98:74:fb:07:c7:1b:
                    ee:43:58:1b:8b:cb:06:59:d3:9c:95:5e:18:cb:9a:
                    ae:f2:68:3b:f8:44:02:e8:f4:3f:84:cd:80:94:34:
                    35:65:44:9b:ba:b4:2e:d6:ff:aa:77:48:4b:43:b6:
                    28:e0:4e:a1:74:08:2d:b2:1a:74:e8:7f:d6:c9:de:
                    e8:b4:15:70:3a:af:78:a7:28:58:fb:de:60:f8:de:
                    26:42:af:fb:ef:85:57:a7:09:4d:8c:80:2d:4f:d9:
                    e1:12:ad:cd:8b:3c:69:e6:0b:50:0b:1d:b2:52:eb:
                    63:38:00:de:a1:a0:eb:d4:7c:ea:14:1f:59:3d:b9:
                    21:10:04:91:5c:72:d8:9e:93:21:81:5f:b6:8d:4f:
                    a6:8f:c1:07:d0:72:27:d1:22:8e:4a:81:bb:d2:4e:
                    9d:cc:f3:e5:93:62:e7:d5:20:ad:03:ed:0b:da:3a:
                    7c:14:fd:0e:1b:2b:b9:7f:b0:97:ce:28:8a:f1:6e:
                    6c:a6:62:41:2e:7b:ff:a5:d2:28:3e:04:50:bd:ed:
                    fc:f3:c1:24:18:44:6f:1e:a6:e4:f5:70:1a:ab:9e:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:27:4E:B6:68:E0:CB:02:F6:C5:BC:77:04:3E:2D:1B:AF:07:E7:D1
            X509v3 Authority Key Identifier:
                keyid:24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a383030303a3a2f33342d3334203d3e20323730323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6964:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:32:44:28:71:b0:fa:56:e3:71:9b:71:78:f8:d1:4a:69:
         e3:55:d8:6a:fb:c2:47:7e:4d:b5:47:c3:f8:5c:15:cd:cc:51:
         0d:12:5a:ba:c6:d4:ff:8d:63:02:0e:81:a8:17:8b:26:67:df:
         22:2d:00:82:cd:d3:93:c0:ae:1c:a7:16:24:03:17:41:f4:b6:
         a3:95:a0:e2:09:84:a1:d5:a2:9d:29:a4:b9:25:ca:99:ce:f0:
         e1:1f:4c:ad:1c:d7:9d:1f:26:18:51:e9:ef:77:c0:b0:99:67:
         8c:37:42:71:66:ae:8f:88:1b:71:dc:2c:e5:1e:de:3c:03:1e:
         cd:10:f5:6b:ad:ed:8d:61:b4:f5:36:9b:65:86:7b:2c:b7:33:
         b3:07:87:ee:60:2a:7a:73:58:4b:08:5c:a5:c6:48:fc:d8:dd:
         cb:42:20:bf:2a:6c:1d:b4:5c:34:2e:20:35:3c:a7:d5:1b:55:
         90:98:ec:2e:8b:a0:94:a0:21:f9:ff:d1:51:ca:a8:9a:4b:a4:
         55:c5:85:3d:c4:af:f3:17:75:0e:82:9e:0b:cd:85:0d:65:76:
         e2:69:eb:d8:c2:93:f6:95:ff:b2:41:7d:64:f7:1d:ec:39:9f:
         8d:48:1c:35:14:99:d4:f0:20:ff:b1:41:ef:f1:93:3c:17:de:
         a0:9c:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:58:29 2026 by rpki-client