Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33322d3332203d3e20323730363135.roa (raw, json)
Hash identifier:          ol05IxZgn1JMkF0MIYE7Ej9KE3v/hS7gJMbRbGCFzEA=
Subject key identifier:   A3:26:34:51:8B:B8:63:13:0E:12:6E:71:39:B0:FA:D5:DA:16:F8:87
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       1EB7EAAF9891FA71C4DA04C14989FDF4C1E59E37
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:14 +0000
ROA not before:           Tue 21 Jul 2026 22:59:14 +0000
ROA not after:            Tue 20 Jul 2027 23:04:14 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:ea:af:98:91:fa:71:c4:da:04:c1:49:89:fd:f4:c1:e5:9e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:14 2026 GMT
            Not After : Jul 20 23:04:14 2027 GMT
        Subject: CN=A32634518BB863130E126E7139B0FAD5DA16F887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:54:e3:06:1f:65:dc:9e:a1:ef:7a:8b:74:
                    0b:c8:f6:99:b4:1d:b4:0e:77:c3:31:79:dc:76:8f:
                    67:df:95:df:9c:d4:ec:7c:cb:52:93:d4:2c:57:4a:
                    86:03:54:3c:15:d4:da:3f:a4:45:f9:63:1d:07:c8:
                    93:0f:67:5d:d1:5b:73:57:4a:8c:c3:97:5a:96:1e:
                    f5:80:78:e2:c0:46:d4:31:ed:c8:39:46:ec:19:bc:
                    ad:7b:6c:e0:12:d3:8b:bd:86:85:b0:e6:95:57:4c:
                    11:a5:62:f1:2d:fd:e4:90:1e:01:84:cf:bc:7e:60:
                    f6:b8:6d:77:46:cd:0a:73:b9:9d:24:e2:46:ef:00:
                    b8:a2:d0:c3:60:f1:6f:60:a3:07:66:ef:e3:d4:97:
                    86:9e:40:a9:98:ee:e3:0e:b7:f6:19:38:99:a1:cf:
                    91:5d:14:55:be:ba:a2:69:57:32:15:62:da:11:37:
                    1d:1b:8c:f9:12:74:dc:bd:b3:5e:30:b8:e2:5c:3e:
                    29:c2:22:35:b9:f9:e1:38:8b:34:1e:0e:68:c2:32:
                    c4:8d:83:48:4d:34:cb:1c:ee:47:fd:1d:4a:42:26:
                    d1:54:d3:0f:3a:7a:37:8e:72:90:7f:6d:ef:d3:6d:
                    46:65:6f:48:ac:04:bb:21:50:34:45:e2:58:cc:23:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:26:34:51:8B:B8:63:13:0E:12:6E:71:39:B0:FA:D5:DA:16:F8:87
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33322d3332203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:7f:51:b5:b3:62:97:35:d5:c2:93:2b:2b:b2:e6:6f:28:
         e4:fb:8e:6b:6a:0f:48:b5:e3:6c:12:a2:99:14:50:16:c8:07:
         54:24:e2:e6:e2:86:04:59:ed:5a:75:34:c1:18:0e:44:f8:bb:
         c4:ab:d3:a0:19:4f:5d:d9:fb:81:82:7d:90:79:54:0b:0f:88:
         82:4f:9a:e2:58:93:c0:48:4b:d4:3f:bc:2d:c0:5d:53:2a:17:
         96:62:7d:1d:32:f5:e5:56:80:d2:c6:a3:11:ac:c1:16:6d:f9:
         8c:3e:84:fc:e2:32:c2:d2:ab:e3:e9:0d:3f:34:59:50:f6:3b:
         4a:08:ec:56:88:5b:72:d1:fe:5e:15:c9:65:2b:24:65:94:84:
         99:c8:77:f6:20:1e:6f:46:ab:66:bd:df:2b:eb:bc:db:29:c6:
         fd:02:3f:d2:6d:cd:d7:fd:45:41:62:ef:68:29:b7:0c:c8:03:
         0d:3c:13:43:b5:6e:b9:56:f7:a9:7d:06:04:7a:0c:de:ff:55:
         c8:1d:a1:0f:cc:6d:c5:53:cc:e9:3b:ce:5f:f3:79:8a:23:27:
         c6:77:d2:62:a4:00:08:40:bb:3f:97:f2:cf:75:49:3b:ab:87:
         04:37:d8:77:6d:17:4e:80:b8:b9:bb:a4:03:19:28:b8:04:bf:
         a0:61:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:55 2026 by rpki-client