Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa
File:                     323830343a386461303a3a2f33322d3336203d3e20323733333639.roa (raw, json)
Hash identifier:          qNUtPU45hLhwcciO3a8wDPboEVnMQ9lHagyDQmj9xMA=
Subject key identifier:   E4:91:BC:49:3B:C1:FD:62:CC:82:52:65:2D:1A:E3:A0:32:E9:17:6B
Certificate issuer:       /CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
Certificate serial:       4571EAEF7F26C062528EB2EFEDE33C728C8F45F4
Authority key identifier: 4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa
Signing time:             Wed 02 Sep 2026 02:11:56 +0000
ROA not before:           Wed 02 Sep 2026 02:06:56 +0000
ROA not after:            Wed 01 Sep 2027 02:11:56 +0000
asID:                     273369
IP address blocks:        2804:8da0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl
                          rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 11:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:71:ea:ef:7f:26:c0:62:52:8e:b2:ef:ed:e3:3c:72:8c:8f:45:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032
        Validity
            Not Before: Sep  2 02:06:56 2026 GMT
            Not After : Sep  1 02:11:56 2027 GMT
        Subject: CN=E491BC493BC1FD62CC8252652D1AE3A032E9176B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:50:14:a7:44:fa:12:ac:34:1d:f0:85:f2:de:
                    67:4e:b4:b9:1f:b5:90:dc:18:ee:92:3d:32:55:dd:
                    e1:da:51:80:92:c8:0a:3e:d2:ae:c6:60:b1:e1:04:
                    b9:90:3d:6e:06:3e:97:2d:b3:29:99:79:e1:d9:68:
                    9c:7d:96:be:22:94:d3:b8:db:f2:8a:c0:b4:ec:a3:
                    a9:87:2d:22:e2:6b:60:1d:6b:f4:3f:42:9f:69:d1:
                    36:eb:10:f0:f7:86:87:cb:5e:f8:7a:56:5d:0b:46:
                    e4:64:be:a0:c2:84:50:e6:b9:1f:ae:71:b2:c4:2b:
                    71:29:89:1f:08:e7:c0:73:62:4a:24:cc:43:99:c7:
                    e2:32:16:fe:c8:ae:b7:f5:a4:0b:7a:cc:a5:30:d0:
                    6b:8f:04:9e:4b:2c:04:d0:e1:8d:e0:b3:ed:59:08:
                    57:50:e1:49:1e:b7:b8:85:1a:f2:f6:73:9b:e8:a3:
                    6e:07:eb:59:81:c9:95:3a:20:20:46:7e:54:8a:8c:
                    c3:bc:f2:87:e8:7e:bf:e5:8c:68:6a:2e:28:d1:6a:
                    d6:5c:1b:45:24:ee:d9:5a:7f:6c:53:a1:62:8f:cb:
                    95:02:51:ea:ef:c5:37:d2:a5:bd:c9:ce:84:ac:db:
                    a9:4b:9b:e6:5e:45:cd:2f:30:30:1f:c2:69:0b:97:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:91:BC:49:3B:C1:FD:62:CC:82:52:65:2D:1A:E3:A0:32:E9:17:6B
            X509v3 Authority Key Identifier:
                keyid:4B:D7:CC:FB:86:83:AC:19:AE:AB:3A:61:49:3D:19:01:FA:2F:10:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BD7CCFB8683AC19AEAB3A61493D1901FA2F1032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71xrP7gnBks27G3PgBJUHmoBrMjmmgtpQjAsCDobK3U3/0/323830343a386461303a3a2f33322d3336203d3e20323733333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:14:0f:92:6a:fe:cc:e9:d5:99:97:04:2f:79:e9:b2:dc:98:
         51:b4:de:26:38:62:f3:a5:66:2e:c5:08:b3:3f:d6:57:53:5e:
         11:43:86:3c:30:7d:c6:fa:9f:5c:3c:4c:fb:71:99:4d:00:85:
         ce:14:23:55:76:21:2b:e8:13:02:cf:77:d0:e8:1c:78:92:1f:
         ef:2e:96:5b:95:2b:2f:fc:fe:8c:9f:f1:4b:4c:02:d3:86:40:
         46:ba:a1:ba:d8:ff:d8:89:05:96:f3:55:a0:40:3e:65:95:43:
         53:03:8f:75:06:0d:23:d9:6d:f0:74:5c:bb:3d:4f:06:7c:8f:
         f7:4b:ff:88:19:ca:05:17:74:51:6e:e7:21:3c:af:f4:54:89:
         18:62:c7:a1:65:6e:0c:5c:3a:c4:84:d3:3a:24:38:05:72:e8:
         59:3a:c3:08:76:18:f1:06:6c:9c:99:7d:c2:c0:cd:a2:48:7d:
         1f:c5:5c:71:be:3f:0c:37:5b:d7:24:b8:82:cb:ba:99:23:9d:
         a2:2f:cb:c2:af:47:ee:f0:b8:fc:62:52:2c:bf:3c:ff:b3:8c:
         26:df:cb:2c:e5:dc:81:c5:c3:6c:ee:73:37:53:95:98:5b:65:
         7a:b6:43:d8:cd:39:9d:4c:f3:5c:ad:5d:87:b4:19:51:0e:91:
         f2:ed:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----