Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376638303a3a2f34312d3431203d3e20323730363131.roa
File:                     323830343a366561383a376638303a3a2f34312d3431203d3e20323730363131.roa (raw, json)
Hash identifier:          I21MHKYarJORvONnFl/zU+S/pUlkS2h5iXsrmCXbDs4=
Subject key identifier:   6C:B1:A7:83:54:72:48:5B:96:7A:58:C1:03:8A:25:AA:82:5F:42:8F
Certificate issuer:       /CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
Certificate serial:       43C4C1EC100A038EFAC98213B15340B9E4F4659E
Authority key identifier: D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376638303a3a2f34312d3431203d3e20323730363131.roa
Signing time:             Tue 21 Jul 2026 17:41:13 +0000
ROA not before:           Tue 21 Jul 2026 17:36:13 +0000
ROA not after:            Tue 20 Jul 2027 17:41:13 +0000
asID:                     270611
IP address blocks:        2804:6ea8:7f80::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c4:c1:ec:10:0a:03:8e:fa:c9:82:13:b1:53:40:b9:e4:f4:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
        Validity
            Not Before: Jul 21 17:36:13 2026 GMT
            Not After : Jul 20 17:41:13 2027 GMT
        Subject: CN=6CB1A7835472485B967A58C1038A25AA825F428F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:de:81:73:ef:b0:a0:ec:8b:59:a3:65:db:
                    79:75:df:fc:b5:06:65:b1:7c:44:6d:a2:16:7d:83:
                    d6:09:17:48:0f:53:c0:34:3f:e7:71:6b:ea:5a:2f:
                    8b:c3:8b:7a:4e:eb:d2:10:1b:de:f9:75:84:0e:29:
                    83:19:7a:58:14:ee:f7:80:b6:30:ea:db:40:fa:d1:
                    61:ee:89:0b:e2:a4:04:23:d2:b3:e6:09:9a:bc:c5:
                    95:3b:68:72:5e:f5:91:4a:00:ae:1d:d4:e5:7a:09:
                    e5:7e:4d:c8:cb:5c:2b:10:7d:84:09:d3:f6:dd:c6:
                    bc:00:76:fc:46:a6:a2:73:cc:96:f5:e8:42:a8:f9:
                    77:5f:72:c1:d4:43:75:c8:cd:e0:cd:32:dd:e2:5c:
                    39:26:03:6d:6a:4e:31:32:81:d7:0c:8a:89:62:48:
                    24:63:bf:4d:58:f7:0e:ff:ae:ab:da:3e:b6:83:4c:
                    5e:a6:bf:31:39:80:04:17:28:73:32:17:a6:61:ca:
                    bd:99:05:19:db:5b:37:28:ad:94:bc:98:26:af:d8:
                    46:70:60:c0:07:3b:89:36:d1:d2:a3:ce:db:5b:3b:
                    91:84:be:a7:9d:35:7e:98:98:00:08:e7:44:5b:06:
                    97:32:46:8d:be:d5:ab:c0:c2:f1:ae:fd:e7:e4:6c:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B1:A7:83:54:72:48:5B:96:7A:58:C1:03:8A:25:AA:82:5F:42:8F
            X509v3 Authority Key Identifier:
                keyid:D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a376638303a3a2f34312d3431203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8:7f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         06:12:ec:39:4e:d1:24:9e:48:5b:e2:5f:5b:e3:32:63:e7:8d:
         bc:ae:20:68:51:9c:f1:eb:bf:af:f8:65:ca:42:77:3e:b9:16:
         44:d3:6e:bc:36:ac:37:ae:1c:de:a1:82:f2:f0:49:c5:c6:f7:
         f3:6f:bb:86:40:2f:f6:25:f7:ec:35:ef:bc:ca:70:90:d7:ae:
         cf:9a:10:fa:93:1f:50:65:6b:2e:35:c7:88:53:57:45:14:dc:
         12:e6:40:4e:aa:d0:f2:e7:d9:18:ff:67:bb:d1:c2:4b:93:56:
         47:d6:52:cc:bd:16:1b:c2:26:27:d4:c2:2f:9a:69:98:67:c3:
         d1:dc:cf:d9:1e:a5:3f:49:ba:7d:4e:c4:14:ee:c1:e4:f3:90:
         8d:4c:40:67:ca:06:9f:b2:8f:81:c8:c4:42:ab:eb:2e:a5:2c:
         ba:44:08:09:bf:91:48:96:93:af:f5:64:c2:25:8f:75:71:1e:
         55:dc:69:4c:4e:2b:09:fe:c8:79:d8:6b:9b:0f:25:75:d9:cf:
         1f:9a:8c:dc:41:97:b0:e2:b5:9c:bf:07:24:ae:68:ef:94:14:
         d3:87:8c:1f:54:a1:61:56:cd:db:89:c1:de:16:67:95:2d:7a:
         8e:1c:6a:7c:62:7c:8e:e3:15:ce:ec:0b:0e:be:ab:c8:ff:ff:
         8f:60:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:57 2026 by rpki-client