Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          vHvfUFjtSI/kpj5B5M1Apgi3swF1MMabJxmp6YsCW60=
Subject key identifier:   50:21:BF:F2:20:59:48:05:21:FA:DD:AF:28:93:A3:0B:45:E9:84:88
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       650C80270184210D7A370CBDE3021453118661D2
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:15 +0000
ROA not before:           Tue 21 Jul 2026 22:59:15 +0000
ROA not after:            Tue 20 Jul 2027 23:04:15 +0000
asID:                     270615
IP address blocks:        2804:6eb8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:80:27:01:84:21:0d:7a:37:0c:bd:e3:02:14:53:11:86:61:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:15 2026 GMT
            Not After : Jul 20 23:04:15 2027 GMT
        Subject: CN=5021BFF22059480521FADDAF2893A30B45E98488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:e3:f9:2a:29:cd:a0:3f:af:39:55:82:18:
                    5e:c0:8f:d5:bf:cc:c4:cd:eb:17:ba:17:4c:a8:73:
                    57:3a:a9:cf:9b:ae:63:6e:35:99:0a:b9:c0:89:c1:
                    8b:fd:48:3d:c9:31:ce:da:41:2a:a8:93:ac:84:d4:
                    5f:e2:f4:f5:21:c3:98:1b:e9:06:0d:fa:3d:ad:e8:
                    ef:91:04:db:44:48:14:64:6f:66:26:b8:87:2d:8e:
                    b0:a3:a6:6f:0c:1e:23:d4:1a:c8:53:3e:23:30:6a:
                    5c:95:51:8e:e5:e9:48:53:f8:12:ee:77:9e:f6:be:
                    a5:16:50:d0:74:4f:e8:4b:7a:9a:8c:37:88:7a:ad:
                    00:9e:d9:94:41:c0:98:37:30:0e:83:aa:91:e2:ce:
                    53:a0:f4:45:ec:88:61:91:2f:a9:e4:2f:2d:a4:9c:
                    20:d8:7d:f3:ac:7f:a0:45:1e:d1:e2:bf:a5:ad:c5:
                    92:57:25:ab:20:3c:1e:2e:17:1e:1a:93:0b:12:6f:
                    ca:bd:8b:f0:bb:5d:09:b5:a0:0c:eb:00:da:81:c4:
                    8a:e3:67:43:0a:2d:0a:fa:a0:47:6c:81:f9:a8:88:
                    3d:19:70:17:a5:63:c6:b1:98:50:c8:92:16:4f:11:
                    5d:e9:c8:28:1c:e1:49:4a:07:d6:fc:da:2f:aa:9c:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:21:BF:F2:20:59:48:05:21:FA:DD:AF:28:93:A3:0B:45:E9:84:88
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:c2:08:95:b9:fa:c8:e7:5c:2f:a7:6e:90:e0:95:fc:ce:
         8b:4a:ff:fd:08:16:69:d1:12:2c:a9:6a:8e:d7:bb:fc:f3:24:
         d5:b9:63:af:3a:19:6c:a6:50:72:7d:2c:ba:47:f8:96:cf:f6:
         60:61:94:55:5f:49:c8:c2:47:9e:59:95:5c:4b:10:44:dd:89:
         e0:69:80:d3:c3:27:93:6c:83:4d:13:ea:bd:9f:d7:ab:4d:16:
         ba:d4:56:97:60:4c:cc:50:d2:6a:89:e7:0a:08:08:c2:90:8c:
         14:2b:b6:e5:d6:e1:65:6c:b3:79:b3:7e:4f:7b:c2:9c:f0:4d:
         85:d1:b7:05:d2:fc:65:d5:26:10:12:20:35:80:d1:fa:ee:41:
         e2:b4:44:4a:44:35:be:f8:21:7c:be:a3:60:66:e8:20:51:c8:
         b7:30:1f:7c:40:1f:42:ee:d5:ae:59:28:95:e9:db:b2:50:08:
         e2:bf:94:78:f2:d5:cb:da:18:11:1c:93:ea:4f:5a:37:d4:67:
         0c:d9:36:23:11:74:04:3b:6e:9c:77:0d:62:2d:ff:0f:78:21:
         70:a2:84:42:a5:82:8a:07:c5:b5:ec:8a:2d:d7:2f:71:2a:08:
         0b:f2:8c:05:f7:42:a4:1e:4e:e7:51:9f:29:77:0a:8f:65:8f:
         91:a9:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:18 2026 by rpki-client