Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3332203d3e20323730323637.roa
File:                     323830343a363936343a3a2f33322d3332203d3e20323730323637.roa (raw, json)
Hash identifier:          gp35ybCE6QgoZ8JHE3igood8OQH9I8XgiMjOrmv7jTM=
Subject key identifier:   C9:A7:1C:60:DE:3B:8A:BB:DE:14:3F:58:07:0E:4C:AF:11:3C:1D:23
Certificate issuer:       /CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
Certificate serial:       2DCB783F2DDE18A3FF95A7FD91E62B957CE5BB5F
Authority key identifier: 24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3332203d3e20323730323637.roa
Signing time:             Tue 28 Jul 2026 18:37:32 +0000
ROA not before:           Tue 28 Jul 2026 18:32:32 +0000
ROA not after:            Tue 27 Jul 2027 18:37:32 +0000
asID:                     270267
IP address blocks:        2804:6964::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl
                          rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cb:78:3f:2d:de:18:a3:ff:95:a7:fd:91:e6:2b:95:7c:e5:bb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
        Validity
            Not Before: Jul 28 18:32:32 2026 GMT
            Not After : Jul 27 18:37:32 2027 GMT
        Subject: CN=C9A71C60DE3B8ABBDE143F58070E4CAF113C1D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:45:ae:bb:ac:78:73:c3:a6:a7:b8:55:ec:
                    2c:d9:a4:3e:18:70:16:fe:69:0d:6b:09:36:79:55:
                    d6:74:e7:4c:9f:2f:c6:68:32:5d:2e:70:e0:e6:bf:
                    df:5c:5c:85:2e:fe:d2:fd:a8:47:a8:c7:9b:6d:6b:
                    5d:0e:6c:60:5f:f4:6d:10:61:91:97:ba:3e:aa:24:
                    3e:a3:e2:81:ac:22:03:73:77:33:b8:69:5b:f0:13:
                    bc:a0:e6:90:bb:85:db:de:71:7f:fa:f3:02:b0:d1:
                    09:22:c9:4f:78:cc:13:60:40:8b:7a:1f:f4:d7:b7:
                    d9:61:f9:07:05:08:5a:ad:82:29:38:c1:96:aa:b6:
                    90:19:9e:56:e8:12:aa:1f:16:f3:86:49:78:99:26:
                    89:5f:36:2e:e7:dd:ac:76:e8:27:b3:52:39:d6:f1:
                    b5:09:49:b9:df:c0:00:b4:2e:96:58:67:12:59:41:
                    75:8d:b4:a7:96:2e:ac:e6:df:9d:b5:2b:82:c6:12:
                    38:bd:94:99:ca:42:fc:2b:7a:09:b1:51:0d:43:8c:
                    e2:d0:fc:2f:e8:f9:46:30:5d:e1:60:bf:86:20:f2:
                    dc:c4:11:13:ed:57:61:05:27:b8:c7:e7:73:35:24:
                    e0:24:fc:ae:06:ed:ed:1f:19:54:c3:73:19:6e:4c:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:1C:60:DE:3B:8A:BB:DE:14:3F:58:07:0E:4C:AF:11:3C:1D:23
            X509v3 Authority Key Identifier:
                keyid:24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/323830343a363936343a3a2f33322d3332203d3e20323730323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6964::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:df:05:cb:97:31:4e:d2:a4:84:fe:9e:7f:32:17:a5:70:90:
         e1:c2:58:03:d4:22:b0:a5:a7:37:1d:b4:f0:b5:25:55:b0:d4:
         a8:5b:5a:1c:d1:ce:b9:6d:b7:e6:4c:62:d1:90:d6:bd:f4:33:
         a4:55:27:8e:ae:9d:4f:59:18:e3:06:db:2a:20:3d:91:64:f3:
         ac:74:af:10:f7:18:31:8d:5c:64:b6:8d:c6:26:25:70:eb:6e:
         ac:d3:0b:e4:8e:9b:eb:ff:17:58:ad:89:5b:b9:ea:64:df:4c:
         ef:42:32:4c:d2:19:c7:c3:90:66:08:fa:97:9d:f7:3f:8e:56:
         9a:56:c7:ea:19:0a:87:b0:8f:a4:eb:28:a7:8c:3c:ba:85:e6:
         9a:ab:7d:92:50:7d:33:24:d6:a2:e5:a6:0c:b9:0f:35:67:37:
         4b:23:71:3f:e9:ee:6a:78:55:c9:e5:67:54:1f:63:d1:35:89:
         cb:21:db:86:77:33:c3:e7:1e:7e:1d:d7:bf:e3:ea:89:25:cb:
         0c:64:8e:67:16:5a:35:28:3e:33:1e:ad:83:79:3d:0a:52:77:
         3c:5f:b9:40:f5:36:ff:0b:3b:c3:60:39:87:9c:d7:44:34:94:
         cb:24:2c:5c:00:46:37:ea:8f:eb:39:d4:9d:62:c4:24:94:67:
         c4:0f:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:58:29 2026 by rpki-client