Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33332d3333203d3e20323636333031.roa
File:                     323830343a333562343a3a2f33332d3333203d3e20323636333031.roa (raw, json)
Hash identifier:          STuwUq3JEZKeUfqPztGNM51qz9wLxPwB2bCvxfcChPI=
Subject key identifier:   D2:A5:59:EC:D2:F0:1D:A4:70:54:10:AD:36:6A:6A:17:28:2F:1F:39
Certificate issuer:       /CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
Certificate serial:       26DDBAC8F1174473FA24EB52FF025349B43BB910
Authority key identifier: 77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33332d3333203d3e20323636333031.roa
Signing time:             Wed 09 Sep 2026 19:40:03 +0000
ROA not before:           Wed 09 Sep 2026 19:35:03 +0000
ROA not after:            Wed 08 Sep 2027 19:40:03 +0000
asID:                     266301
IP address blocks:        2804:35b4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 14:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dd:ba:c8:f1:17:44:73:fa:24:eb:52:ff:02:53:49:b4:3b:b9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
        Validity
            Not Before: Sep  9 19:35:03 2026 GMT
            Not After : Sep  8 19:40:03 2027 GMT
        Subject: CN=D2A559ECD2F01DA4705410AD366A6A17282F1F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:75:c1:7f:a8:01:4f:ac:83:57:2d:d1:6a:
                    f0:a5:10:9f:c4:de:ab:88:0d:80:1e:70:16:3f:d5:
                    54:59:89:f0:88:fb:03:1b:2d:62:b5:be:93:2d:42:
                    ee:67:c9:f9:f7:c9:d9:ce:37:04:9c:25:74:31:15:
                    8b:ab:83:2c:19:6d:f9:33:45:ac:c4:f7:1c:9c:45:
                    14:7b:74:89:c0:ec:be:5d:a7:a4:d9:34:6c:e6:b0:
                    7f:02:8f:0a:52:5b:bb:d7:6e:01:9c:94:32:0d:4b:
                    dd:44:a5:4c:2a:fb:c0:df:7d:97:bc:50:96:7c:c9:
                    44:11:60:a5:71:13:94:3e:72:dd:bc:a5:d0:a6:52:
                    74:73:d9:6a:3f:39:e2:6f:67:91:c2:fe:90:af:30:
                    aa:db:6d:e1:bc:5a:e2:9d:80:96:02:ea:dc:83:4f:
                    27:b5:92:67:46:ec:73:48:81:f2:ab:d4:ae:da:b2:
                    e1:1e:be:a8:1e:b0:90:79:5e:fa:b8:26:8a:87:2b:
                    ec:b6:20:b5:bd:d7:bb:e6:2c:0b:87:a5:05:cf:2d:
                    bb:d4:2c:ba:63:57:6a:cf:79:36:e3:d3:4e:c0:db:
                    b3:b0:da:b7:4b:8e:df:97:68:a1:69:c4:19:74:e3:
                    d6:b5:d2:3c:70:58:10:71:c4:95:72:54:3f:c6:ac:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A5:59:EC:D2:F0:1D:A4:70:54:10:AD:36:6A:6A:17:28:2F:1F:39
            X509v3 Authority Key Identifier:
                keyid:77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/323830343a333562343a3a2f33332d3333203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b4::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:42:1b:57:4a:f7:74:76:e4:a4:bf:be:36:1e:b1:93:28:90:
         23:bc:c7:40:07:18:25:3c:64:6e:8b:4c:9e:d4:71:df:17:20:
         24:87:8f:31:c8:3f:6c:45:fd:e2:ae:93:7d:90:e9:20:a5:9a:
         3c:8f:36:4b:ef:b6:dc:12:e4:0b:a9:7a:5a:7c:f0:b7:d5:05:
         5b:11:c6:23:64:72:a9:14:c0:7b:d9:1d:ab:38:9b:f0:5b:6b:
         a1:ac:fa:33:27:39:a0:61:13:86:21:a1:3c:82:28:70:3f:ec:
         29:dd:ca:ae:81:f5:94:8f:83:6c:d1:25:64:f6:4a:89:b6:9e:
         48:3d:1b:ee:75:b3:e4:bc:43:11:bb:0c:3a:b6:c7:99:e9:fd:
         d5:4e:56:a6:aa:70:5b:1b:08:c1:6c:10:29:1e:d4:a0:25:8a:
         b7:ae:a8:6c:f6:92:7d:09:00:a7:07:9f:34:c8:4a:21:3a:05:
         d4:f1:99:07:ae:2d:21:86:7f:00:48:2e:76:4b:2d:17:63:bf:
         0d:d0:f4:5d:91:ee:98:7f:2a:49:9f:83:b9:a1:7f:98:34:cc:
         ca:54:a4:b4:5d:a1:95:af:cf:19:1b:fb:fa:2f:ed:3f:17:28:
         10:b9:6f:93:07:36:bc:d6:98:00:bc:29:96:9c:58:3b:98:43:
         07:f3:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 17:46:54 2026 by rpki-client