Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a383030303a3a2f33332d3333203d3e20323636313534.roa
File:                     323830343a336238343a383030303a3a2f33332d3333203d3e20323636313534.roa (raw, json)
Hash identifier:          W55YMIPD+Uxa6yYW0NkCSca2N2vJUEFF91SA2M7o1g0=
Subject key identifier:   D8:73:E2:47:A3:19:52:BA:08:6B:39:8D:2F:CB:00:CF:E9:AC:D6:BD
Certificate issuer:       /CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
Certificate serial:       267B39A5F64C45FE5443DE37319DDE9963A8794F
Authority key identifier: 61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a383030303a3a2f33332d3333203d3e20323636313534.roa
Signing time:             Wed 08 Jul 2026 12:45:32 +0000
ROA not before:           Wed 08 Jul 2026 12:40:32 +0000
ROA not after:            Wed 07 Jul 2027 12:45:32 +0000
asID:                     266154
IP address blocks:        2804:3b84:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7b:39:a5:f6:4c:45:fe:54:43:de:37:31:9d:de:99:63:a8:79:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
        Validity
            Not Before: Jul  8 12:40:32 2026 GMT
            Not After : Jul  7 12:45:32 2027 GMT
        Subject: CN=D873E247A31952BA086B398D2FCB00CFE9ACD6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:0e:8e:85:63:8e:a7:54:4b:84:e9:cc:84:
                    57:41:b3:19:33:d0:e8:2f:40:0c:f2:b9:47:79:3b:
                    a9:4d:57:e6:f8:1d:53:a1:c1:1d:5e:eb:f5:aa:b6:
                    e1:9d:a0:a7:4b:28:87:fe:70:d1:bd:41:1c:ad:e2:
                    25:f6:4d:56:41:10:fe:8b:b8:3a:9c:31:f6:48:60:
                    33:61:7c:e7:df:68:e4:59:12:44:e3:59:6d:4c:67:
                    f6:0d:35:0a:c3:68:9f:d4:75:26:67:99:b3:6f:d4:
                    18:d1:e3:7e:70:05:d6:9f:53:63:49:ad:74:5e:80:
                    84:cc:bf:85:af:b5:d2:7d:f4:8d:66:1d:5e:59:67:
                    0b:f3:dd:9c:9d:6e:24:ef:44:d4:77:14:5f:88:4c:
                    e2:0b:c9:14:97:8a:36:dd:fb:39:7c:3f:50:5b:8b:
                    f6:f9:7f:5d:ac:57:c5:6e:75:ad:58:fc:fe:5f:86:
                    a8:38:32:07:32:5f:dd:75:41:72:19:03:3e:6d:e5:
                    7a:11:7b:ab:7c:5f:32:72:7e:75:cf:7d:c1:97:e9:
                    45:5b:51:b7:54:bf:a8:99:47:9c:41:e1:68:fa:e9:
                    ca:93:b1:31:17:53:ae:bc:45:7c:da:16:68:45:5b:
                    24:4e:69:03:2b:7a:ec:4d:1e:b0:7b:5f:38:53:78:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:E2:47:A3:19:52:BA:08:6B:39:8D:2F:CB:00:CF:E9:AC:D6:BD
            X509v3 Authority Key Identifier:
                keyid:61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/323830343a336238343a383030303a3a2f33332d3333203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:d8:ff:43:bc:3b:b1:53:f7:a6:17:f5:87:20:59:34:20:
         1c:8b:e9:10:e0:5a:c5:45:16:94:a4:16:91:8a:5a:cd:8e:9f:
         5f:36:25:8f:a3:39:c1:cf:24:b4:81:1f:14:4f:46:36:f3:37:
         ef:16:1b:1f:d5:18:b7:c6:53:80:dc:ab:be:a8:13:86:e0:4d:
         77:7a:5f:a8:68:b9:76:d6:48:7d:5b:46:b4:1f:e2:9a:30:bb:
         48:5b:48:a2:bb:4c:76:34:d4:1c:19:8e:79:85:e1:ba:b1:0f:
         68:04:28:02:7f:9e:49:9b:3c:23:4e:4c:b0:52:2c:d3:21:b1:
         f5:7a:9f:c8:7d:f9:1e:5d:a1:69:5a:89:db:ba:51:4a:49:01:
         51:6f:0b:a0:06:3c:97:c0:3d:68:72:d1:ce:71:8a:8c:17:c4:
         b9:b8:92:40:e3:81:ea:5f:30:84:4d:6d:eb:6a:33:3d:4e:e8:
         23:84:15:21:3f:b1:d4:77:08:9a:50:fc:93:6b:13:bf:df:1d:
         fe:a2:0d:07:84:d4:05:df:7a:c5:2e:38:54:b3:fe:23:9d:fc:
         84:3e:e1:28:a1:86:47:c0:8e:3d:30:09:02:79:00:6c:93:f9:
         44:86:e4:51:e5:0d:12:16:a3:32:ca:9b:a1:9c:05:3f:24:bb:
         0f:9c:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:16:29 2026 by rpki-client