Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d3333203d3e20323639363139.roa
File:                     323830343a363734633a383030303a3a2f33332d3333203d3e20323639363139.roa (raw, json)
Hash identifier:          u8myqjmO2+Wwv03PfBY/6ahYUqi+ePEV36DnavFHVxI=
Subject key identifier:   F8:36:58:3E:ED:AF:51:42:E8:B0:AF:71:19:85:06:CE:9E:F5:F1:66
Certificate issuer:       /CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
Certificate serial:       3D72E172474D0CE2181E4482B7B09575D361D27F
Authority key identifier: 6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d3333203d3e20323639363139.roa
Signing time:             Wed 07 Oct 2026 17:49:21 +0000
ROA not before:           Wed 07 Oct 2026 17:44:21 +0000
ROA not after:            Wed 06 Oct 2027 17:49:21 +0000
asID:                     269619
IP address blocks:        2804:674c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl
                          rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 20:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:72:e1:72:47:4d:0c:e2:18:1e:44:82:b7:b0:95:75:d3:61:d2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C
        Validity
            Not Before: Oct  7 17:44:21 2026 GMT
            Not After : Oct  6 17:49:21 2027 GMT
        Subject: CN=F836583EEDAF5142E8B0AF71198506CE9EF5F166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:d0:f8:73:48:4f:9e:cc:b0:67:ab:dc:c1:
                    af:73:c1:e7:12:41:81:c9:f1:47:47:b7:99:f4:7b:
                    7e:47:9b:0f:f1:61:b1:79:c1:87:1d:1e:ac:bd:51:
                    fd:77:9d:b2:84:b0:b6:fc:e2:f0:97:75:8f:c0:ac:
                    b2:58:94:d0:1a:00:3d:05:36:31:32:cd:f1:fa:84:
                    61:1f:8f:2c:20:b6:67:5d:6f:67:3c:41:0f:00:47:
                    b0:e8:4f:fb:9d:97:ed:96:74:6b:c0:a4:b3:c0:d2:
                    32:da:65:67:44:e0:f3:b5:95:63:ea:00:f8:b3:d2:
                    b6:f1:8e:53:9c:f7:4a:29:08:d6:51:5b:ad:20:b0:
                    c6:5f:50:2f:73:90:3d:f9:99:6a:bb:2c:63:33:3f:
                    44:eb:27:24:a7:e1:71:3b:a7:3f:81:8c:31:6c:ba:
                    c0:d8:16:1b:b5:ca:65:9a:8d:be:a4:e1:ce:e1:3f:
                    03:f8:05:c2:2a:af:ab:bd:1c:b4:1b:b3:4d:e9:37:
                    c4:4d:6f:06:53:53:3b:ae:e0:d8:51:ce:46:cd:e4:
                    73:1d:b4:8a:91:b5:a4:67:47:17:ef:d4:40:3b:98:
                    f3:a0:99:aa:94:50:22:df:35:6d:bc:2d:ae:ab:ee:
                    55:aa:31:7e:d7:3e:3b:16:70:58:c0:bf:aa:78:3b:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:36:58:3E:ED:AF:51:42:E8:B0:AF:71:19:85:06:CE:9E:F5:F1:66
            X509v3 Authority Key Identifier:
                keyid:6C:D8:93:41:A3:EB:F4:F4:BA:4F:7B:13:21:A7:18:2E:4C:DD:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD89341A3EBF4F4BA4F7B1321A7182E4CDDE39C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d3333203d3e20323639363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:27:39:d6:80:f8:98:39:20:c4:19:e7:80:1f:fe:70:9c:b2:
         96:bd:ee:2a:be:0f:c7:81:c9:92:4b:5c:9f:94:67:b9:05:a5:
         a4:79:aa:fa:e2:bf:f4:ce:67:99:1f:68:59:57:5b:f2:48:5c:
         25:7a:ea:04:36:1d:74:3d:2f:be:7f:4b:40:e2:4f:42:18:55:
         90:62:d6:7b:83:5c:43:9c:c2:c8:f0:a3:2a:53:5a:80:8e:ac:
         87:54:61:c7:ac:86:20:3d:f3:e0:bd:3e:d8:b8:dd:b5:ce:f6:
         c7:be:d0:77:82:50:03:11:01:68:86:5f:8f:5c:00:9d:d6:68:
         2e:b5:61:ea:e5:b9:ae:59:f0:ba:0e:39:7e:6d:8d:6b:41:a8:
         97:52:de:56:3e:ed:b0:66:22:d1:ec:4b:81:c9:94:6e:1e:75:
         f1:ba:65:5e:87:32:6d:01:5f:b8:8d:5b:25:dd:aa:8e:b0:d5:
         e3:9b:a1:53:b6:16:ac:c0:c9:f2:0c:c5:aa:47:a1:e8:89:f2:
         6e:e5:3c:8f:c0:16:06:90:a5:0a:1e:84:f6:5a:e0:36:8f:f1:
         62:fa:1f:65:92:ec:da:70:74:76:94:4c:04:4c:1e:97:04:ff:
         14:11:53:8c:7b:9a:db:1e:8b:39:05:75:76:0a:e5:46:1a:ef:
         2e:3e:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:01:54 2026 by rpki-client