Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa
File:                     323830343a386163303a3a2f33322d3332203d3e203532383230.roa (raw, json)
Hash identifier:          PW9CN0vO7mRLsSnw43hchpt/HBSXLk837KRnznECyus=
Subject key identifier:   AE:C8:DA:E0:B9:BB:2A:C3:BF:A0:80:FC:D3:A6:58:1D:D3:B7:CE:C7
Certificate issuer:       /CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
Certificate serial:       24F94098CD57965591D89A196163CC4C148B0879
Authority key identifier: 7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa
Signing time:             Wed 08 Jul 2026 14:53:39 +0000
ROA not before:           Wed 08 Jul 2026 14:48:39 +0000
ROA not after:            Wed 07 Jul 2027 14:53:39 +0000
asID:                     52820
IP address blocks:        2804:8ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl
                          rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f9:40:98:cd:57:96:55:91:d8:9a:19:61:63:cc:4c:14:8b:08:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C
        Validity
            Not Before: Jul  8 14:48:39 2026 GMT
            Not After : Jul  7 14:53:39 2027 GMT
        Subject: CN=AEC8DAE0B9BB2AC3BFA080FCD3A6581DD3B7CEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:0a:24:88:47:b7:49:fa:c0:74:3f:9c:44:
                    f8:06:04:82:ed:76:b2:d9:1e:83:11:e6:ea:51:cb:
                    e3:ec:c2:9a:05:ea:57:42:73:1c:41:ae:54:a7:6e:
                    05:78:a5:9d:9d:16:68:19:0a:66:d6:73:4a:e9:8b:
                    75:fd:a3:aa:2e:2b:9f:dd:50:d2:a8:70:60:0c:45:
                    76:ef:68:9b:6b:7b:a5:21:f0:68:88:88:82:4d:d8:
                    20:ac:de:4a:c5:fb:6f:78:87:34:f0:8e:b2:26:22:
                    c2:06:f0:a8:6d:ab:73:1f:1d:76:e7:1a:3e:dd:3c:
                    e0:8e:10:93:f7:71:b2:6a:11:a7:a8:f3:36:b5:5f:
                    6e:7b:11:0f:d4:b5:e8:b7:e4:f4:9f:32:8a:a1:67:
                    97:5e:e4:0e:ec:66:26:e8:c6:b3:32:5a:ea:7a:0b:
                    8a:83:bf:d2:fc:00:e0:eb:ec:ec:09:46:65:f0:26:
                    d1:13:20:10:18:57:0b:73:e1:22:7c:2a:a2:9e:77:
                    f0:14:9e:e7:53:1a:42:2d:f6:c0:43:0c:42:6e:60:
                    9b:bc:ab:aa:d1:f7:7e:3e:f0:b5:9d:3f:37:89:50:
                    43:4e:39:f5:aa:9a:b5:66:61:a7:b3:18:87:09:03:
                    ad:af:48:e3:18:2f:af:d8:db:fd:fe:a5:5d:14:97:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C8:DA:E0:B9:BB:2A:C3:BF:A0:80:FC:D3:A6:58:1D:D3:B7:CE:C7
            X509v3 Authority Key Identifier:
                keyid:7E:6A:8B:A1:85:D7:FF:FD:93:58:C3:39:2F:91:4C:26:DB:EC:CD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E6A8BA185D7FFFD9358C3392F914C26DBECCD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/323830343a386163303a3a2f33322d3332203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:48:e1:14:d2:c9:f7:bf:a4:30:17:23:63:40:ff:eb:51:92:
         ec:8b:20:2c:9f:33:8d:c3:f5:73:8b:9b:38:52:c9:47:16:65:
         07:70:37:b9:2e:2d:31:bd:a8:75:42:aa:7f:19:e8:9d:7c:0c:
         7a:7f:78:d0:3c:20:c9:72:9e:61:eb:a4:32:aa:39:06:c5:af:
         3e:80:f7:45:1e:37:8a:0c:bb:4c:bb:cd:ac:36:f2:62:71:fa:
         a6:cd:2f:6b:10:e3:0c:4a:ef:41:9d:ea:ca:a6:b0:eb:f8:0c:
         11:a8:63:76:ab:5a:92:1a:c6:ab:36:18:4a:59:4a:34:4f:a8:
         8e:63:44:02:00:54:6a:bd:83:18:2e:67:42:93:3c:ae:49:e5:
         85:66:30:1a:0b:1e:b9:a9:76:aa:79:2d:0b:07:2d:ce:b3:7c:
         7d:6a:1b:2c:2f:12:bb:83:d4:75:29:48:23:d8:95:36:bf:f9:
         e6:8f:36:08:f8:48:2c:f1:a5:44:ec:c7:08:e2:0f:03:86:fa:
         ad:ef:cc:53:d0:d6:09:9e:14:73:7e:75:5c:df:7b:43:f6:cd:
         f8:26:c9:de:f1:3f:15:ec:26:0c:f8:e3:68:ad:5a:31:98:16:
         d2:8a:7f:e9:d3:14:af:f8:b5:e8:07:cb:f6:2c:e3:b1:c4:d6:
         09:bc:fe:27
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJPlAmM1XllWR2JoZYWPMTBSLCHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2QThCQTE4NUQ3RkZGRDkzNThDMzM5MkY5MTRDMjZE
QkVDQ0Q3QzAeFw0yNjA3MDgxNDQ4MzlaFw0yNzA3MDcxNDUzMzlaMDMxMTAvBgNV
BAMTKEFFQzhEQUUwQjlCQjJBQzNCRkEwODBGQ0QzQTY1ODFERDNCN0NFQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LwokiEe3SfrAdD+cRPgGBILt
drLZHoMR5upRy+PswpoF6ldCcxxBrlSnbgV4pZ2dFmgZCmbWc0rpi3X9o6ouK5/d
UNKocGAMRXbvaJtre6Uh8GiIiIJN2CCs3krF+294hzTwjrImIsIG8Khtq3MfHXbn
Gj7dPOCOEJP3cbJqEaeo8za1X257EQ/Utei35PSfMoqhZ5de5A7sZiboxrMyWup6
C4qDv9L8AODr7OwJRmXwJtETIBAYVwtz4SJ8KqKed/AUnudTGkIt9sBDDEJuYJu8
q6rR934+8LWdPzeJUENOOfWqmrVmYaezGIcJA62vSOMYL6/Y2/3+pV0Ul93PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUrsja4Lm7KsO/oID806ZYHdO3zscwHwYDVR0j
BBgwFoAUfmqLoYXX//2TWMM5L5FMJtvszXwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNDTmt1d3V5RUUzdFJMZEV3VEs3aTVrN3h6NXM0SjNNeFQ0ZXY0SlFY
UzEvMC83RTZBOEJBMTg1RDdGRkZEOTM1OEMzMzkyRjkxNEMyNkRCRUNDRDdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFNkE4QkExODVEN0ZGRkQ5
MzU4QzMzOTJGOTE0QzI2REJFQ0NEN0MuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDQ05rdXd1eUVFM3RSTGRFd1RLN2k1azd4ejVzNEozTXhUNGV2NEpRWFMxLzAv
MzIzODMwMzQzYTM4NjE2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMjM4
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgEisAwDQYJKoZIhvcNAQELBQADggEBANBI4RTSyfe/
pDAXI2NA/+tRkuyLICyfM43D9XOLmzhSyUcWZQdwN7kuLTG9qHVCqn8Z6J18DHp/
eNA8IMlynmHrpDKqOQbFrz6A90UeN4oMu0y7zaw28mJx+qbNL2sQ4wxK70Gd6sqm
sOv4DBGoY3arWpIaxqs2GEpZSjRPqI5jRAIAVGq9gxguZ0KTPK5J5YVmMBoLHrmp
dqp5LQsHLc6zfH1qGywvEruD1HUpSCPYlTa/+eaPNgj4SCzxpUTsxwjiDwOG+q3v
zFPQ1gmeFHN+dVzfe0P2zfgmyd7xPxXsJgz442itWjGYFtKKf+nTFK/4tegHy/Ys
47HE1gm8/ic=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:32:48 2026 by rpki-client