Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
File:                     323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa (raw, json)
Hash identifier:          tToPiroScmdHzwDq0ASj7dPv/DpShfZ0AkrspEYGg+E=
Subject key identifier:   3E:0F:D2:25:A2:7C:FB:55:B9:4F:7C:59:A1:7B:9A:44:BB:7E:26:44
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       35E5699ACF95C02B1EE3000B951965F3211D2F07
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa
Signing time:             Wed 08 Jul 2026 14:53:39 +0000
ROA not before:           Wed 08 Jul 2026 14:48:39 +0000
ROA not after:            Wed 07 Jul 2027 14:53:39 +0000
asID:                     52820
IP address blocks:        2804:8ac0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e5:69:9a:cf:95:c0:2b:1e:e3:00:0b:95:19:65:f3:21:1d:2f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Jul  8 14:48:39 2026 GMT
            Not After : Jul  7 14:53:39 2027 GMT
        Subject: CN=3E0FD225A27CFB55B94F7C59A17B9A44BB7E2644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:c8:c1:58:f8:2f:9a:40:e3:dd:7c:51:e8:
                    4b:f3:1c:46:81:4c:80:96:7c:e8:53:da:8e:26:de:
                    1b:81:67:e0:f9:88:cd:fd:3f:2b:b1:29:7b:05:08:
                    14:49:7e:c2:13:da:b3:45:4c:bf:e8:c8:dc:61:28:
                    65:bf:9d:00:d0:01:c0:a0:3c:c2:26:99:8e:20:b9:
                    03:0b:b1:84:03:ec:9c:72:fe:56:b2:f6:52:3d:0b:
                    ca:a6:dd:98:7a:6b:77:61:4e:11:26:c5:71:ad:87:
                    90:d4:32:ff:16:c6:d4:b5:36:f9:1c:db:d1:d2:36:
                    44:f5:f1:09:a9:af:be:04:fe:0d:8c:39:79:ed:c8:
                    55:41:1b:18:f5:a6:99:23:91:b7:40:e0:12:01:5b:
                    22:a8:fb:f3:4f:e7:2d:f3:4d:59:f3:97:98:9c:1c:
                    0f:c3:b1:1d:f1:6e:d9:57:e6:01:85:c5:e6:30:22:
                    3d:e5:35:26:78:80:9d:fb:e6:e3:d8:40:47:e1:c5:
                    a7:af:70:b6:da:1c:cd:e9:64:57:66:c7:6c:4d:67:
                    ad:84:5c:93:8e:49:2b:69:a3:b3:dc:f7:58:c7:0b:
                    84:e5:eb:07:e5:3e:1d:3a:1e:c8:26:18:6a:10:f0:
                    f3:ce:6e:36:eb:f7:db:2b:5f:fc:9a:65:ae:fc:c9:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0F:D2:25:A2:7C:FB:55:B9:4F:7C:59:A1:7B:9A:44:BB:7E:26:44
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a383030303a3a2f33342d3334203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         51:95:ad:e3:e8:b6:d2:cf:1b:62:93:6a:8c:f0:f6:82:74:fc:
         ea:3c:71:9d:8f:22:0e:d4:78:9a:18:55:71:0e:8c:63:e6:bf:
         64:aa:b3:93:3b:4b:14:c7:37:c7:ec:c2:a5:11:ce:1a:79:2e:
         fb:2b:56:87:07:bf:c1:14:c6:29:47:99:01:1a:bb:e4:db:c9:
         6a:1e:eb:1c:4d:26:3e:c8:c6:1c:95:87:64:09:a2:60:68:3a:
         21:4a:d5:dc:35:09:53:94:cb:fa:03:43:97:c6:12:c4:72:af:
         6e:10:71:21:be:67:6e:18:5b:af:50:5d:ba:9b:02:e3:8a:ff:
         f1:00:8c:04:a3:9f:43:db:34:16:f0:ec:ef:2b:bf:a5:42:2d:
         da:8f:6b:ac:fd:b3:e1:58:e2:8a:61:06:6d:5f:0c:83:5a:92:
         1c:90:0e:bf:48:f5:23:cd:80:a4:bf:d4:bc:de:dc:5b:cd:4a:
         fd:6c:78:c4:99:e0:99:d8:3c:ec:b0:61:d6:41:f8:42:76:08:
         79:bf:69:4c:cd:39:5c:93:26:7e:62:52:ae:e5:2f:b6:50:2e:
         d5:35:c4:78:d6:53:d9:4d:c8:9b:83:7d:98:43:66:f9:90:aa:
         f7:9e:91:20:3f:4e:1e:5b:8a:90:fb:56:2c:8a:55:61:91:19:
         60:f6:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:57 2026 by rpki-client