Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa
File:                     323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa (raw, json)
Hash identifier:          dxURXMSiMoKN8I3v11j59TBZDHMhuaBC04LyFRQ9fJ0=
Subject key identifier:   08:34:5D:AC:09:CD:C8:85:AA:E0:83:3D:6B:D8:06:0F:61:63:2A:3B
Certificate issuer:       /CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
Certificate serial:       6CDC21097A3F8583B7B23013374EE5FF67255126
Authority key identifier: DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa
Signing time:             Tue 21 Jul 2026 23:04:14 +0000
ROA not before:           Tue 21 Jul 2026 22:59:14 +0000
ROA not after:            Tue 20 Jul 2027 23:04:14 +0000
asID:                     270615
IP address blocks:        2804:6eb8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl
                          rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:21:09:7a:3f:85:83:b7:b2:30:13:37:4e:e5:ff:67:25:51:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85469981D62F9ABEE701953EC3BE74F4D6E638
        Validity
            Not Before: Jul 21 22:59:14 2026 GMT
            Not After : Jul 20 23:04:14 2027 GMT
        Subject: CN=08345DAC09CDC885AAE0833D6BD8060F61632A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:b0:90:27:26:5f:3d:52:ff:31:67:d9:8c:
                    a4:fe:dd:fd:57:77:38:a4:46:d6:6c:b2:ad:89:9e:
                    a6:01:4e:85:09:be:a7:81:46:5e:6e:c5:a0:d9:5a:
                    2c:09:95:cb:33:cb:47:16:f3:db:42:d3:cb:2e:41:
                    ca:55:40:cf:72:05:a0:9b:cd:1c:e4:d5:a2:5e:1f:
                    08:d9:75:1e:04:7a:cd:84:a0:56:df:e1:55:9b:3b:
                    18:ba:29:3f:08:69:e7:fb:c1:6e:41:47:a8:c5:20:
                    c9:e3:97:32:c8:ff:b1:f9:7b:1c:be:72:f0:ba:cc:
                    a5:74:26:08:82:e7:40:94:f2:d9:52:bc:5e:df:e0:
                    90:d1:f5:4c:af:8f:0e:38:3f:94:43:a8:cd:4d:b9:
                    29:26:ce:45:ef:1f:48:b0:5b:79:82:f4:00:3d:3f:
                    ee:c2:c9:0e:bf:5d:b2:e4:29:28:41:63:c1:c5:28:
                    ae:23:e1:54:56:a5:bb:56:93:cb:95:49:e6:54:df:
                    e3:a0:10:2f:39:10:7a:18:4a:f3:dc:a0:27:7a:4e:
                    2e:80:1b:6d:d3:59:5d:89:7e:72:ce:cd:2c:b5:77:
                    13:ea:7f:0c:79:e2:3d:b4:12:d9:0b:10:99:4f:aa:
                    93:64:80:7f:f0:ab:13:e9:99:99:46:f8:6c:b0:ff:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:34:5D:AC:09:CD:C8:85:AA:E0:83:3D:6B:D8:06:0F:61:63:2A:3B
            X509v3 Authority Key Identifier:
                keyid:DB:85:46:99:81:D6:2F:9A:BE:E7:01:95:3E:C3:BE:74:F4:D6:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/DB85469981D62F9ABEE701953EC3BE74F4D6E638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB85469981D62F9ABEE701953EC3BE74F4D6E638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6dP22zA9Y2gjrh4XbUTREzquhDDcGUcNbBrHCC6jcrr6/0/323830343a366562383a633030303a3a2f33342d3334203d3e20323730363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6eb8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:46:81:3c:83:36:4f:b1:17:df:64:10:d6:06:e4:60:9e:9c:
         ec:d8:90:de:a7:d5:5f:b2:59:d3:81:3a:4d:bb:8e:68:3f:13:
         37:a5:9f:5c:9b:6f:fd:1a:d3:cf:c8:ce:e1:ed:17:0f:4c:71:
         bd:8e:6a:4a:8a:c0:78:49:ac:07:36:88:da:6d:88:69:d9:94:
         45:9a:9a:c1:c7:58:37:49:c3:0a:d0:37:3e:5f:33:ab:cf:70:
         e6:1c:fe:f9:61:c6:13:ab:75:a8:25:19:2f:c0:a9:84:43:5b:
         18:82:ba:18:d8:33:3e:8a:c4:d3:dd:73:81:6a:d7:36:5b:e4:
         d8:00:7f:4b:ec:9c:ae:7b:68:f8:62:ba:c0:c6:08:a0:51:c9:
         10:1a:cd:3a:a6:d6:83:a7:05:f4:1d:6b:9a:44:ec:d0:aa:66:
         f1:22:c1:b7:d1:96:49:39:aa:08:f0:e9:9d:85:de:a1:31:df:
         a3:c6:71:77:04:d2:ff:04:ef:ea:58:1e:e4:30:fb:ab:0b:84:
         d6:d0:f4:e6:de:10:25:bf:ec:55:55:a5:35:ed:06:b3:cd:32:
         fa:d7:7e:7d:a3:33:ac:70:66:5c:0b:0a:73:ba:ee:15:55:27:
         80:af:17:64:33:0a:d4:21:2f:9f:49:2b:c2:93:78:a7:8f:21:
         10:88:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:59 2026 by rpki-client