Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
File:                     323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier:          99HIAS/h8h6bpTSXerdX0+hdjPYrPfS98Mx7KpnIWto=
Subject key identifier:   48:D3:32:9D:42:B5:8E:54:1C:54:5E:91:00:F2:B4:80:80:68:60:96
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       7D09551EC627BAAA7A82019BF431567BB70BF710
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:12 +0000
ROA not before:           Wed 22 Jul 2026 21:57:12 +0000
ROA not after:            Wed 21 Jul 2027 22:02:12 +0000
asID:                     61851
IP address blocks:        2804:1a4c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:55:1e:c6:27:ba:aa:7a:82:01:9b:f4:31:56:7b:b7:0b:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:12 2026 GMT
            Not After : Jul 21 22:02:12 2027 GMT
        Subject: CN=48D3329D42B58E541C545E9100F2B48080686096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:41:40:a5:4c:c9:84:44:d3:56:d5:42:d9:
                    40:65:32:82:02:d9:04:f5:d6:4a:f4:49:e7:13:c5:
                    c4:f5:3e:87:31:6d:64:43:98:eb:72:bd:ba:5f:1a:
                    d4:71:59:c3:7f:ed:53:9e:e6:2d:09:62:1a:42:f9:
                    b3:96:45:d5:f9:2e:41:ef:61:b6:14:a6:4c:f3:cd:
                    14:43:14:e3:95:94:a3:55:a3:a1:59:9a:28:05:91:
                    6a:6f:4c:b4:77:69:42:fa:e0:85:d8:b7:ab:ef:45:
                    9d:d8:98:42:04:e0:56:44:76:e6:4b:40:98:b7:db:
                    8a:56:1d:c5:5a:8e:4b:03:ba:da:c8:09:4c:53:fe:
                    0d:b7:15:6e:65:2f:a0:59:9e:4e:f9:62:d9:37:25:
                    3b:87:37:cd:1b:37:98:8f:3e:e0:d5:f9:f5:36:91:
                    e5:57:ad:19:d2:dc:40:2c:29:b9:de:2d:67:0c:d9:
                    b7:29:87:dc:b2:62:80:5e:31:e7:a5:a5:b3:67:ec:
                    ae:94:7c:df:7f:33:81:79:4e:a7:68:04:b4:e4:d4:
                    0f:e0:d2:50:80:6a:12:e8:c8:03:6e:ae:cf:5e:39:
                    dc:73:18:29:fa:cd:f5:fb:31:d1:a8:e2:4a:9d:da:
                    43:cb:d7:e6:da:72:19:9c:16:0c:3e:8e:c9:4d:7f:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D3:32:9D:42:B5:8E:54:1C:54:5E:91:00:F2:B4:80:80:68:60:96
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:92:2a:ba:5f:ec:fe:77:e1:53:9c:44:8b:6e:24:7c:d9:
         15:82:43:19:4b:d7:0b:9c:0f:02:0e:02:08:fe:c3:56:bc:00:
         f1:c2:ab:a0:d3:c9:6b:0b:ec:11:7b:a5:ed:7a:b8:67:49:2d:
         17:7a:99:9a:5a:bc:82:c0:b2:58:51:d7:f6:8a:a2:d2:c2:66:
         a8:92:58:5f:22:47:89:f0:0c:f5:07:63:68:76:5d:20:9f:ba:
         fc:7b:05:5d:ef:f0:79:5a:84:93:d3:42:5e:f3:24:48:ad:e6:
         f4:2d:35:d9:0c:ca:9a:0a:d5:b1:3c:7e:74:8e:96:4d:6b:44:
         1a:06:06:95:b6:59:34:72:f7:4d:ce:87:c9:f8:64:e3:f2:58:
         53:8d:3e:1a:bd:4e:3d:99:82:9b:de:64:c9:5b:c5:7a:e1:00:
         07:a1:b0:39:d8:f2:96:93:9f:00:d6:d1:8b:a8:b2:9e:bb:4d:
         39:7c:c2:7d:94:07:b0:71:e7:7d:48:89:f3:3b:17:2c:d6:e2:
         11:95:49:e3:85:47:9b:04:90:e2:1c:7a:59:83:e5:23:c3:fd:
         30:7f:3c:f8:7a:0b:ac:c4:10:40:d2:12:34:f6:9e:0c:fa:d2:
         11:b3:14:1f:d1:1c:01:db:8e:d0:f1:58:4e:75:0b:3a:e7:b6:
         39:f8:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:34 2026 by rpki-client