Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
File:                     323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa (raw, json)
Hash identifier:          ber5PkBuyyoD5DJji0n2kB+hmJREEjKCqgN3bDwBaqU=
Subject key identifier:   DF:96:DE:4C:6B:20:5B:A2:38:C7:BE:A5:C0:DD:4B:40:1A:CA:00:9D
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       592DB0F9A4686707422204A46088954451D5BCDB
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa
Signing time:             Tue 15 Sep 2026 14:14:51 +0000
ROA not before:           Tue 15 Sep 2026 14:09:50 +0000
ROA not after:            Tue 14 Sep 2027 14:14:50 +0000
asID:                     273467
IP address blocks:        2804:8f18:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 23:13:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2d:b0:f9:a4:68:67:07:42:22:04:a4:60:88:95:44:51:d5:bc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: Sep 15 14:09:50 2026 GMT
            Not After : Sep 14 14:14:50 2027 GMT
        Subject: CN=DF96DE4C6B205BA238C7BEA5C0DD4B401ACA009D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:b1:9c:cb:1c:7c:bb:9a:1a:8a:cd:fe:be:
                    9e:e9:37:5e:59:56:49:b4:4a:eb:e0:9d:6f:b1:18:
                    be:56:76:db:b1:ce:12:89:93:d0:65:a0:27:ea:16:
                    96:ce:a4:6a:0a:11:3c:5f:88:89:79:d6:37:d5:3e:
                    96:c6:81:df:68:45:4f:8f:8d:09:49:91:82:8a:9c:
                    86:47:84:5f:4a:9c:ae:5c:35:f1:13:d2:22:e1:e5:
                    93:89:7f:ed:59:75:b7:20:b0:3e:29:81:d2:a4:6d:
                    c1:f3:02:a4:b2:b7:10:81:4f:3f:5f:fd:06:3f:7a:
                    d7:ef:db:c1:07:5e:55:93:2f:b4:2d:38:c2:7e:13:
                    68:3c:98:71:9f:3e:e8:a5:a2:28:4e:ec:eb:5a:e5:
                    13:c6:c9:65:20:cb:fd:9e:68:48:ae:28:1e:1e:ac:
                    90:c6:a2:99:57:31:8d:54:8d:13:e0:55:de:a8:44:
                    b2:16:2c:2f:ad:6b:ab:52:1a:4a:90:f5:01:ac:a5:
                    f5:39:2f:26:e6:d9:aa:5a:30:a1:93:20:db:aa:cc:
                    eb:ae:63:82:fa:da:de:e9:43:8c:60:c6:34:cc:c2:
                    fa:31:84:2c:b9:7d:ef:cf:0e:a8:43:60:18:bf:06:
                    2c:ee:6e:43:08:b8:3d:8f:6d:6f:0c:0c:fc:b8:10:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:DE:4C:6B:20:5B:A2:38:C7:BE:A5:C0:DD:4B:40:1A:CA:00:9D
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/323830343a386631383a383030303a3a2f33332d3333203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:c2:37:bc:4e:4d:d8:ac:13:41:ff:a2:e0:cf:34:f2:13:
         90:db:7b:09:74:eb:27:bc:01:50:0d:2c:88:fe:b2:cd:88:35:
         89:ff:93:b2:25:d2:89:39:50:5c:0a:31:f0:6e:94:6c:86:e8:
         75:4c:a6:24:cb:b9:ec:1f:84:20:34:aa:4f:ed:6d:07:aa:1f:
         6d:89:a5:03:bc:9a:0a:0b:e4:98:f2:9a:14:65:67:70:1e:59:
         fb:f9:eb:de:a9:43:17:e2:9e:d9:ce:4a:ce:11:fa:b2:60:c5:
         b6:98:d2:c1:13:aa:c5:89:ef:77:d3:5c:38:3e:da:37:06:37:
         94:40:d7:f9:18:2d:61:f7:fd:8d:52:64:e3:c2:04:af:26:62:
         b0:e9:45:41:95:31:f7:a0:5e:0a:fe:ab:c7:30:7a:ab:4e:af:
         1b:82:2e:14:75:6a:7f:64:84:63:7b:19:88:91:18:75:e3:6e:
         92:6e:27:f8:3c:f9:c5:1a:3b:46:4a:cd:7f:9d:e6:a3:b9:b3:
         89:0d:77:d1:45:07:51:d4:5a:d8:d1:68:67:83:87:5b:a0:98:
         d1:64:0c:cc:b0:72:e8:1e:f5:fe:4c:e1:9b:08:e1:4f:8f:ee:
         a4:0a:22:96:ba:6c:64:2f:e6:45:bb:75:96:fa:6b:14:48:10:
         26:c8:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:32:50 2026 by rpki-client