Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa
File:                     323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier:          oVdx+5falk+hmzOPdhci92pXUp/zim8hDP0C8K+HF/I=
Subject key identifier:   4F:E1:EB:CC:F9:4E:55:97:ED:34:4B:28:5D:A5:F4:9C:AE:22:FA:EC
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       738EF8691390AD1C9518C2CC2C739A0EA66ABB8B
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:10 +0000
ROA not before:           Wed 22 Jul 2026 21:57:10 +0000
ROA not after:            Wed 21 Jul 2027 22:02:10 +0000
asID:                     61851
IP address blocks:        2804:1a4c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8e:f8:69:13:90:ad:1c:95:18:c2:cc:2c:73:9a:0e:a6:6a:bb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:10 2026 GMT
            Not After : Jul 21 22:02:10 2027 GMT
        Subject: CN=4FE1EBCCF94E5597ED344B285DA5F49CAE22FAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:ca:96:d3:84:9d:39:97:8d:21:a3:41:6b:
                    2a:06:e9:69:f7:02:5b:87:d9:18:cc:b2:34:7c:a9:
                    e6:bf:b3:fe:ed:bb:80:fa:49:fd:1c:21:7c:7c:22:
                    ca:69:f9:a8:bd:fb:17:09:64:b1:01:14:20:6b:22:
                    b2:17:ef:ad:25:39:b0:81:e3:eb:f2:d5:f9:e8:5b:
                    16:72:96:c6:47:05:30:29:3e:2b:48:6f:ed:c6:73:
                    7e:81:56:e3:57:14:10:75:d3:f8:4e:65:ba:b5:d1:
                    e7:cd:09:df:a9:34:6b:03:fb:8c:c9:45:1d:91:95:
                    61:6a:a6:62:d3:49:25:4b:8c:da:26:c4:ae:d0:25:
                    cb:74:a7:71:4d:53:32:c7:28:28:72:89:18:b5:2e:
                    d4:93:7c:bf:b6:44:de:eb:05:b0:2b:2e:09:2a:09:
                    6c:13:9b:a7:f6:71:60:7b:27:bd:07:f3:c8:19:04:
                    36:d3:1f:0e:dd:e9:76:16:14:68:c6:62:fd:57:96:
                    6e:c8:0c:03:7a:e7:11:2f:d7:25:8f:85:48:9a:fc:
                    c6:44:09:24:ce:e2:78:12:bf:e6:65:74:0d:a6:28:
                    c2:22:8d:ed:36:93:8d:ea:e2:3f:4c:3d:4d:b6:16:
                    72:05:9c:a8:6c:6a:b0:9a:1f:ff:9f:e1:06:68:39:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E1:EB:CC:F9:4E:55:97:ED:34:4B:28:5D:A5:F4:9C:AE:22:FA:EC
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:e4:b9:6c:f6:f3:e4:60:ab:ec:cf:cb:ad:2a:91:a6:39:9e:
         b9:ca:8f:d0:0a:cd:9d:4b:18:e9:a9:9b:c5:a4:09:44:0a:46:
         46:22:95:9d:2d:8e:57:8f:90:9c:dc:e4:ce:80:db:43:89:4a:
         26:11:6c:1c:3f:96:6d:a4:30:99:b3:c6:6d:5d:f3:6c:2c:d7:
         77:71:53:dc:ec:ef:72:c0:95:fa:a9:79:e2:7b:a3:96:df:40:
         c9:70:1b:ab:b9:b2:58:5a:a8:58:4e:03:d5:7b:a3:99:5f:3e:
         0c:b4:e9:41:dc:52:2c:61:b0:87:03:7f:c5:95:42:fe:a5:5e:
         77:db:cd:b0:de:63:a5:07:02:c4:13:aa:8e:92:0f:f4:f2:81:
         d3:04:39:44:2b:ae:c3:e1:36:08:6f:dd:4d:8e:93:de:c0:25:
         89:a9:10:32:c5:c1:fe:68:bb:7f:9d:e1:b2:a6:d0:0c:fb:6e:
         04:7d:0c:18:b7:ba:32:43:96:da:9f:0a:49:0b:12:fa:83:2a:
         2b:56:cd:17:85:0f:73:c6:21:83:2b:7d:62:a4:0b:68:a2:c8:
         2c:84:45:b1:79:83:10:5d:f3:73:13:d4:75:d6:99:5d:1b:3e:
         78:e8:56:11:81:e9:77:da:68:b1:95:81:68:ac:3b:84:1f:2f:
         6d:97:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:17 2026 by rpki-client