Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33342d3334203d3e203631383531.roa
File:                     323830343a316134633a383030303a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier:          2hMdjEtFsQRHBbw1QhnIHDOaaFm28Q/sXrl7joOFIUc=
Subject key identifier:   C5:AC:EA:49:8C:0A:96:CB:B6:12:F6:4A:04:83:2E:6E:C9:72:00:48
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       06F9B874903A52B160BDBDAEB37987DFC067B3F1
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33342d3334203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:10 +0000
ROA not before:           Wed 22 Jul 2026 21:57:10 +0000
ROA not after:            Wed 21 Jul 2027 22:02:10 +0000
asID:                     61851
IP address blocks:        2804:1a4c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f9:b8:74:90:3a:52:b1:60:bd:bd:ae:b3:79:87:df:c0:67:b3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:10 2026 GMT
            Not After : Jul 21 22:02:10 2027 GMT
        Subject: CN=C5ACEA498C0A96CBB612F64A04832E6EC9720048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:2e:6b:be:f9:55:33:e5:09:ca:8c:95:e3:
                    57:f7:22:9f:77:5f:d5:60:49:03:20:b8:2e:11:6b:
                    2e:ce:bc:fb:ad:ea:24:14:a7:43:ef:56:b2:08:83:
                    8b:72:46:39:26:0a:2d:6a:34:81:f2:0d:ae:5c:e9:
                    eb:11:51:ea:f2:df:87:c1:ad:80:48:80:a4:af:5d:
                    76:a3:c8:87:55:19:1c:86:42:38:27:3c:1e:3e:34:
                    d8:4c:2f:0e:8f:b0:f8:58:21:1e:8d:d5:77:7d:5b:
                    ca:ef:d7:89:ef:f7:79:29:72:7c:d0:1d:78:c7:97:
                    9f:44:6a:2d:ca:78:31:fa:bc:d3:6c:b9:b0:d1:fc:
                    e2:92:83:c5:c3:c6:41:7b:e1:e3:27:1e:27:84:28:
                    e6:a2:42:26:54:d6:b1:03:30:6b:7b:8b:4c:b6:aa:
                    b8:25:a6:7a:b2:1b:bb:b6:7f:b5:a4:89:3a:31:84:
                    0c:0d:cd:2f:18:6f:30:29:4d:de:5b:a4:86:9f:ea:
                    05:7b:89:b9:cc:82:96:d0:83:12:4a:d4:35:ae:8d:
                    d8:e0:fa:f7:51:88:79:30:2b:3b:bd:1c:45:a5:bb:
                    66:d1:5a:02:78:f5:2e:35:46:8c:60:3a:a9:fd:2d:
                    2a:f6:e7:d2:60:bc:86:b9:71:06:eb:93:24:d3:d3:
                    c7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:EA:49:8C:0A:96:CB:B6:12:F6:4A:04:83:2E:6E:C9:72:00:48
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33342d3334203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:58:44:0d:6e:2e:e0:dc:a6:26:46:27:81:30:c0:95:1c:70:
         9f:15:ba:cf:13:6c:fa:d0:0a:95:7c:4d:f6:58:f0:50:4b:a9:
         be:ac:5f:82:08:24:09:0c:30:f7:06:46:9a:8d:db:d7:7f:14:
         56:1a:79:e6:fa:c9:e3:3f:5c:0b:8a:09:2b:32:93:c0:a4:4b:
         94:f5:95:c5:a1:cc:86:da:2a:98:21:04:ae:3e:0f:9b:83:a3:
         60:6d:6c:a0:28:e7:0e:0e:68:fa:ee:66:72:98:2b:7e:5c:65:
         a5:4b:b7:44:55:cd:39:a4:3a:e6:bd:ef:46:4d:ba:e0:39:38:
         9a:4b:f7:c8:3d:5a:47:98:fd:89:49:19:2d:5b:4a:9b:f2:a0:
         38:d0:5b:c0:f5:16:6c:ae:cf:d2:51:64:75:75:97:b3:19:e1:
         8d:e8:5f:d5:08:b9:77:48:9d:94:45:59:e8:00:34:ab:b9:78:
         42:59:0c:cf:ee:19:68:e2:d7:0c:ce:9d:69:03:19:98:d8:73:
         f5:3b:ed:d2:0b:af:05:55:71:3c:ca:77:7c:7f:09:15:4e:02:
         f4:6a:1c:f1:7a:17:bd:8c:38:cd:f2:23:7d:c1:82:17:ff:01:
         30:ef:40:5e:3c:11:64:9a:00:d9:4b:dd:f8:da:0e:b6:df:0a:
         a6:fd:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:03:03 2026 by rpki-client