Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa
File:                     323830343a366561383a3a2f33322d3332203d3e20323730363131.roa (raw, json)
Hash identifier:          TDFrEOf7PfWCxF6uKdm0HRlQTUR4sn5eNGibxyW8IZg=
Subject key identifier:   9F:B7:6C:7B:E0:8E:23:9A:13:E7:19:91:3B:F6:52:8F:80:A1:E1:25
Certificate issuer:       /CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
Certificate serial:       3AA1635FEBF86ADA36A153DAB96E29C0EBFCB747
Authority key identifier: D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa
Signing time:             Tue 21 Jul 2026 17:28:48 +0000
ROA not before:           Tue 21 Jul 2026 17:23:48 +0000
ROA not after:            Tue 20 Jul 2027 17:28:48 +0000
asID:                     270611
IP address blocks:        2804:6ea8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a1:63:5f:eb:f8:6a:da:36:a1:53:da:b9:6e:29:c0:eb:fc:b7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
        Validity
            Not Before: Jul 21 17:23:48 2026 GMT
            Not After : Jul 20 17:28:48 2027 GMT
        Subject: CN=9FB76C7BE08E239A13E719913BF6528F80A1E125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:83:56:22:67:3e:c6:01:f6:13:06:2d:3a:
                    2f:61:e2:83:63:d8:4c:6d:8e:d7:3c:c4:3b:62:ee:
                    ef:4f:ae:49:17:ab:4f:cb:67:6f:df:21:42:13:e4:
                    13:36:42:1a:e5:16:b3:85:df:b4:e5:eb:a4:9d:19:
                    c0:03:e6:11:35:eb:ee:a9:81:d1:53:31:b9:8f:dd:
                    12:dd:b1:12:b6:a1:cc:d1:c1:33:1d:d6:6e:b1:58:
                    bd:c9:de:2a:75:3e:32:32:02:93:97:6b:db:b5:83:
                    ee:4b:7c:00:36:8e:68:45:e4:ba:bf:1e:e6:b7:ee:
                    4f:79:6d:27:25:7c:f0:dc:cf:d3:d7:be:26:7e:44:
                    9d:ec:c4:8d:66:6f:ce:03:5c:3d:9e:63:42:d8:d3:
                    0c:0d:3f:31:36:2f:f6:d0:d6:bf:74:27:de:06:6b:
                    92:ef:d7:40:04:31:e8:56:67:b8:47:71:63:de:f9:
                    4e:4f:2e:af:45:47:e0:f8:fd:8d:62:51:f7:7d:cb:
                    cd:bc:c8:7b:c3:d2:66:96:5e:2f:83:da:74:1f:52:
                    82:ef:f2:be:82:c9:13:56:80:a9:4e:27:bd:ec:ed:
                    29:b9:af:2d:e9:1f:b2:69:4b:ee:bb:b8:c7:15:4e:
                    f7:c7:5d:95:0e:42:56:b5:a1:a2:ef:a7:57:61:82:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:6C:7B:E0:8E:23:9A:13:E7:19:91:3B:F6:52:8F:80:A1:E1:25
            X509v3 Authority Key Identifier:
                keyid:D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33322d3332203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:db:e7:1d:e3:1a:f9:b2:ec:09:d4:95:99:f7:60:d2:4b:c0:
         47:55:d3:5a:8d:38:ff:ef:c1:ad:d2:ec:fe:ec:26:ee:6a:c1:
         5a:78:df:f1:37:8c:67:b7:44:6f:dd:73:f5:8b:d0:ca:15:aa:
         18:8d:61:44:e8:c0:89:83:52:b6:3d:1a:eb:2c:c1:54:08:ed:
         0e:5f:e6:38:7f:1c:ba:be:2c:dc:9d:c0:44:53:cd:52:30:65:
         7a:ab:de:ff:ba:a6:be:e9:cd:0f:23:c7:8b:b7:24:6a:58:77:
         8c:2f:05:69:eb:6c:0c:3e:0d:0c:25:fb:c9:7f:de:01:ef:ff:
         7a:7d:ab:94:69:36:0a:e4:08:06:f5:74:41:57:61:77:77:77:
         b4:9a:f8:d6:88:25:76:f0:7c:94:c8:ee:9f:69:b0:1f:fc:74:
         69:2a:79:1f:70:ae:61:35:1f:e1:24:23:f0:81:64:79:16:bc:
         d8:79:b5:de:20:00:97:62:0d:07:39:7b:15:be:1c:c9:10:fe:
         b4:d9:61:ab:2a:68:cc:0d:da:e7:28:99:f5:40:b8:b3:91:e1:
         2c:ee:7a:dd:a5:ce:ed:8f:ff:ad:f3:86:a0:4c:14:38:bd:e5:
         9c:23:5b:87:c5:ef:ff:ec:ab:48:29:82:22:ec:88:de:cd:72:
         fa:69:11:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:02 2026 by rpki-client