Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33332d3333203d3e20323730363131.roa
File:                     323830343a366561383a3a2f33332d3333203d3e20323730363131.roa (raw, json)
Hash identifier:          TpXO9Cg9fUm7O/8Rvcee34s4k1JIDTZJF6fetWszVuw=
Subject key identifier:   DF:91:21:17:A0:3A:4C:18:79:7B:03:8E:11:28:7F:5A:87:A4:95:16
Certificate issuer:       /CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
Certificate serial:       10C692997E8948A81244650B5809928D1A5148F1
Authority key identifier: D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33332d3333203d3e20323730363131.roa
Signing time:             Tue 21 Jul 2026 17:41:01 +0000
ROA not before:           Tue 21 Jul 2026 17:36:01 +0000
ROA not after:            Tue 20 Jul 2027 17:41:01 +0000
asID:                     270611
IP address blocks:        2804:6ea8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:92:99:7e:89:48:a8:12:44:65:0b:58:09:92:8d:1a:51:48:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC
        Validity
            Not Before: Jul 21 17:36:01 2026 GMT
            Not After : Jul 20 17:41:01 2027 GMT
        Subject: CN=DF912117A03A4C18797B038E11287F5A87A49516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:06:0b:0b:4f:e1:70:79:ac:da:86:e8:6e:
                    f1:69:cc:c8:99:6f:7f:d5:2c:6e:28:94:6e:bf:7c:
                    ab:45:5d:60:67:6e:cf:c3:82:ca:67:c4:02:b0:ca:
                    17:f5:cf:1c:82:e3:ed:41:c8:dd:c4:13:6b:7d:f3:
                    c3:27:e5:14:36:d0:f6:bf:9b:ad:95:fd:8a:2b:74:
                    bd:03:67:8f:b1:98:ad:01:a7:0c:43:72:ee:59:92:
                    ab:a5:41:29:b8:99:20:9b:f0:dd:94:da:29:61:5a:
                    0c:da:d5:cd:15:1c:e9:b8:b9:7b:66:8e:64:05:ca:
                    bc:59:1d:c9:a4:51:6e:c3:cc:39:94:fb:05:92:17:
                    06:44:e5:44:75:19:a0:3a:79:f6:86:5e:ab:9d:82:
                    57:bd:51:f0:78:e7:ff:3c:22:1e:7d:c8:ed:85:e4:
                    e9:10:a5:a0:55:df:1b:8e:ce:03:b8:c6:7e:8a:a4:
                    a7:20:4b:39:51:b9:b3:56:25:a0:db:20:27:83:43:
                    30:e7:42:94:94:d1:96:8f:ee:64:d4:50:7e:ac:3b:
                    aa:ac:c5:af:e8:7e:a4:86:87:f3:8f:7a:2f:02:76:
                    b2:ac:82:28:82:b2:7f:e7:f9:ef:53:76:68:45:5f:
                    f9:2b:e7:31:ec:9c:7f:95:cd:cd:2b:c9:75:7a:69:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:91:21:17:A0:3A:4C:18:79:7B:03:8E:11:28:7F:5A:87:A4:95:16
            X509v3 Authority Key Identifier:
                keyid:D9:46:D3:A1:7B:DB:97:DC:8D:DD:BA:A9:D7:A5:2E:E3:96:C9:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D946D3A17BDB97DC8DDDBAA9D7A52EE396C9D1CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/323830343a366561383a3a2f33332d3333203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ea8::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:8f:31:75:a5:66:4c:de:ca:50:fb:7c:f7:4b:08:d1:7e:3a:
         4d:62:66:42:c7:b1:27:de:59:a5:67:81:41:93:4b:dd:fd:07:
         dc:31:6e:45:14:b8:9d:37:43:ce:f6:6f:83:48:b3:1c:02:95:
         c8:2a:0f:49:5c:d2:f9:48:49:fd:f4:77:17:1e:c3:f1:c0:1c:
         98:15:f1:27:e9:be:f6:0b:d3:01:c3:61:91:e7:2b:40:c2:ec:
         40:1c:fe:bc:8b:fd:96:be:bc:50:1d:48:b8:56:f0:df:3c:ee:
         9d:fc:c4:10:58:37:6b:28:b2:ae:86:75:01:20:61:90:d1:3f:
         1d:41:56:cf:8d:84:1a:43:0e:7e:20:c3:d4:59:89:a0:a6:c6:
         e7:20:f1:38:a4:80:28:0d:84:4d:69:1a:c6:1c:7a:b1:94:00:
         59:62:10:8d:cd:18:f6:71:8d:06:46:a5:3e:08:67:30:01:ab:
         3a:82:31:dc:02:73:b5:fa:e3:ac:4f:6e:6a:08:46:26:36:dc:
         d0:2e:4e:55:d2:37:0d:b5:4b:63:79:c7:bc:93:8a:b7:dc:cb:
         aa:fb:51:0d:04:a2:13:5f:3b:2f:a9:63:17:b4:2c:78:f7:e4:
         5a:55:fe:8a:cf:b6:23:d6:13:2b:6f:b8:9d:fc:6f:90:de:76:
         b8:a3:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:59 2026 by rpki-client