Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
File:                     323830343a373531633a3a2f33322d3438203d3e20323731303234.roa (raw, json)
Hash identifier:          9C9QXYUuldeJz2l7r9IHoql46QFBHoTtnD14V69MHr8=
Subject key identifier:   4D:B3:BF:1B:39:A9:BC:27:94:40:ED:FE:4E:9C:40:FE:AF:34:DD:89
Certificate issuer:       /CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
Certificate serial:       3706ED81ED3A6CA446F49AFCB2B27488AD58DB74
Authority key identifier: 66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa
Signing time:             Sat 11 Jul 2026 15:02:46 +0000
ROA not before:           Sat 11 Jul 2026 14:57:46 +0000
ROA not after:            Sat 10 Jul 2027 15:02:46 +0000
asID:                     271024
IP address blocks:        2804:751c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl
                          rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:ed:81:ed:3a:6c:a4:46:f4:9a:fc:b2:b2:74:88:ad:58:db:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66FDB876CBA2E3E1C1208045E990B39BD097EBCF
        Validity
            Not Before: Jul 11 14:57:46 2026 GMT
            Not After : Jul 10 15:02:46 2027 GMT
        Subject: CN=4DB3BF1B39A9BC279440EDFE4E9C40FEAF34DD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:5d:8b:d9:e6:48:ca:61:e7:d4:21:89:f0:
                    21:b1:a4:a8:a8:c5:08:d0:9d:6a:cb:61:2b:e2:18:
                    74:96:21:22:b1:97:25:96:06:c4:16:b0:f1:92:4c:
                    23:41:c3:18:80:34:b6:b6:67:df:2e:66:22:cd:ce:
                    9a:f1:8e:96:00:a0:ec:e4:b8:59:f8:78:37:0d:a9:
                    7a:1a:61:4d:19:4f:77:8b:7c:f5:3e:ef:0e:76:c9:
                    73:c5:57:74:dc:ea:c6:ce:0a:ef:83:66:a7:94:a9:
                    24:49:be:6e:3c:ea:7e:73:2b:13:0e:26:ea:a9:fb:
                    07:c2:e4:05:59:88:a4:53:ea:1a:c6:68:16:7e:2b:
                    62:a6:9c:e3:aa:dd:08:d5:97:6a:e5:8d:7d:e7:cc:
                    44:9e:2e:d9:12:2c:fe:13:4c:86:a2:61:42:04:81:
                    f8:f5:ca:90:59:43:6f:94:22:a8:65:32:d4:02:71:
                    2d:5d:e1:8e:42:8a:0d:22:2f:09:a9:51:93:eb:5a:
                    ab:4d:47:53:a6:8c:c1:45:a6:6f:f6:ea:5c:e6:38:
                    28:10:14:b7:c0:ab:27:5c:e6:81:08:0e:c8:ae:53:
                    ab:a7:e5:d1:97:ed:56:e3:c1:b2:36:88:e4:29:72:
                    35:e2:43:78:ff:7c:1a:33:2f:d4:5d:84:a4:39:22:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B3:BF:1B:39:A9:BC:27:94:40:ED:FE:4E:9C:40:FE:AF:34:DD:89
            X509v3 Authority Key Identifier:
                keyid:66:FD:B8:76:CB:A2:E3:E1:C1:20:80:45:E9:90:B3:9B:D0:97:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66FDB876CBA2E3E1C1208045E990B39BD097EBCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aRzaHqj7Fb971dA7hcpEvLbVwCYu2NKm8VCV6Lw18pr/0/323830343a373531633a3a2f33322d3438203d3e20323731303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:751c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:7b:9b:92:b0:98:55:72:db:ae:da:70:fd:cf:24:cb:83:
         7a:1e:17:b4:5d:4e:67:84:bf:a3:cf:f9:22:1a:d5:54:69:6a:
         10:77:7b:2f:84:fe:2b:ad:b8:a0:84:12:fc:46:e2:12:14:95:
         54:95:b9:ea:d0:fb:04:10:68:01:79:83:01:03:3b:c1:1f:cf:
         63:a4:98:2e:b3:41:68:1e:e2:c7:5e:49:c1:20:36:63:ab:5a:
         45:1a:23:36:e1:73:2b:2f:c2:de:84:c2:52:49:0b:68:06:22:
         c6:1f:2d:8a:4b:aa:68:ac:4a:68:26:64:46:64:35:8e:04:82:
         e9:af:73:8b:cf:14:51:98:39:68:61:8b:a9:fd:00:82:16:b1:
         d5:9a:87:d1:2c:15:d7:0a:13:e9:42:02:c2:60:28:a3:df:94:
         f5:83:61:be:84:5f:89:58:0a:0b:6e:dd:1b:c3:fd:e0:0f:8e:
         bb:4c:20:f0:45:85:84:a4:a3:02:f6:73:7c:31:67:3e:7d:6e:
         0f:52:89:76:f1:fb:a7:47:62:e3:ac:cd:97:4c:a3:5e:af:a0:
         59:e0:0a:2e:da:34:49:6d:97:46:0a:ae:e1:83:a4:f0:a2:6f:
         48:ba:f1:7f:a8:c5:b6:0f:7b:37:a6:e7:6a:e0:6e:91:cc:c9:
         e4:54:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:28:38 2026 by rpki-client