Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a383030303a3a2f33332d3333203d3e20323633353633.roa
File:                     323830343a6630383a383030303a3a2f33332d3333203d3e20323633353633.roa (raw, json)
Hash identifier:          dtUbV32OTqNGXdckTG1F3wCN6/iR6nswOPz59VuYlnw=
Subject key identifier:   6A:25:09:35:2E:D1:CC:13:CE:1C:B9:B0:BF:9D:64:D5:DE:0D:AF:D8
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       6EEB6279EA633C3D9BE175CD4499156B2E19C507
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a383030303a3a2f33332d3333203d3e20323633353633.roa
Signing time:             Fri 13 Mar 2026 15:23:27 +0000
ROA not before:           Fri 13 Mar 2026 15:18:27 +0000
ROA not after:            Fri 12 Mar 2027 15:23:27 +0000
asID:                     263563
IP address blocks:        2804:f08:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:eb:62:79:ea:63:3c:3d:9b:e1:75:cd:44:99:15:6b:2e:19:c5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar 13 15:18:27 2026 GMT
            Not After : Mar 12 15:23:27 2027 GMT
        Subject: CN=6A2509352ED1CC13CE1CB9B0BF9D64D5DE0DAFD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:a1:d9:02:30:b7:11:29:75:cc:de:5e:0a:
                    45:35:72:1a:56:cf:14:fb:5b:6a:f6:d3:ef:36:61:
                    e6:00:85:1c:33:63:93:5e:d0:04:f7:80:8d:31:2a:
                    fa:f3:f1:b7:e8:b3:d2:cf:2f:9e:55:b7:51:86:89:
                    f1:a6:8f:d4:da:d2:b5:f4:fa:49:d6:29:c1:e0:4c:
                    df:5f:2c:a0:3e:79:4a:34:c8:14:08:4a:9a:41:6d:
                    f6:41:c9:de:bb:3d:16:32:88:9a:75:24:c5:69:5d:
                    38:96:46:cf:16:59:a7:f2:e5:5c:a4:27:75:4d:ab:
                    b6:cd:1c:83:30:f8:04:d0:96:7c:1c:c3:7c:7e:f8:
                    72:c8:ae:51:d6:8e:98:47:d8:17:f4:ef:b3:28:62:
                    d8:a0:b8:47:72:1e:d1:95:61:3d:79:19:e5:c6:e4:
                    d3:f8:56:dc:4e:13:2b:7a:1c:d0:d7:0b:f3:f9:5a:
                    c2:ce:77:93:1f:b5:80:00:9f:b2:2f:5c:a0:01:ad:
                    ed:bc:d2:0b:7a:cb:7d:6f:85:2c:55:85:aa:c7:ed:
                    eb:ef:8b:e2:da:cc:5b:4a:95:cd:2d:a2:a0:05:3c:
                    df:28:24:18:7b:92:12:45:94:8f:0d:3f:da:1b:47:
                    19:eb:91:39:32:f9:d5:39:3e:d1:ef:6e:93:52:8a:
                    f4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:09:35:2E:D1:CC:13:CE:1C:B9:B0:BF:9D:64:D5:DE:0D:AF:D8
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a383030303a3a2f33332d3333203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:7c:82:0e:08:e2:c5:a1:40:66:b4:44:1e:f8:42:74:54:
         92:7e:76:23:58:a1:28:ee:24:7c:99:c6:0b:84:3f:1e:18:bc:
         40:a7:38:b6:c0:7c:b4:3c:2a:b3:ee:93:b3:58:a3:62:be:36:
         a5:b2:36:0e:4a:94:82:f6:de:3f:fc:d4:fd:d6:8e:4c:4a:1c:
         da:c3:b3:7e:84:84:78:7b:da:3b:74:0d:66:3a:77:0c:9a:69:
         16:29:39:5d:49:a7:e2:96:dd:ea:d1:08:e5:40:73:7f:ed:40:
         7a:fc:52:47:eb:0f:0a:62:49:ef:89:59:16:c1:af:1d:c8:ee:
         66:2b:30:b1:81:d1:bd:00:47:63:8d:d4:4c:e3:02:33:f8:8c:
         c3:9d:03:e1:c7:3c:48:d5:fe:7f:f1:2c:e0:20:98:3b:07:08:
         ab:ba:a2:79:0b:c7:3a:d0:2f:41:39:95:29:cf:d3:51:f5:ad:
         e9:a8:3b:30:3c:5a:06:28:5d:25:b5:10:4b:8f:7f:c2:9c:e3:
         aa:6c:0b:89:fd:f0:c1:56:22:09:f6:38:a1:44:6f:bf:c0:8d:
         8a:52:c0:ae:4c:9e:c8:7e:ac:ef:e0:b2:bb:97:1f:7d:7c:d3:
         83:3a:7f:4f:c4:92:ca:47:5b:72:20:0f:4e:87:be:1b:e6:82:
         70:84:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:17 2026 by rpki-client