Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
File:                     323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (raw, json)
Hash identifier:          3Jx/ydpDgAIaYBfX4HzoCu53GKmkKQIYK6x4cFgIeXo=
Subject key identifier:   6C:B2:59:AC:CD:A5:B5:7E:C0:8F:F0:2C:59:67:CB:01:CA:B5:40:BB
Certificate issuer:       /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
Certificate serial:       4400DAB5C11FDE5795592D64D535FFDBFA4F72DC
Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa
Signing time:             Wed 09 Sep 2026 15:53:27 +0000
ROA not before:           Wed 09 Sep 2026 15:48:27 +0000
ROA not after:            Wed 08 Sep 2027 15:53:27 +0000
asID:                     274640
IP address blocks:        2804:916c::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl
                          rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 03:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:da:b5:c1:1f:de:57:95:59:2d:64:d5:35:ff:db:fa:4f:72:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7
        Validity
            Not Before: Sep  9 15:48:27 2026 GMT
            Not After : Sep  8 15:53:27 2027 GMT
        Subject: CN=6CB259ACCDA5B57EC08FF02C5967CB01CAB540BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:a3:3a:b0:87:eb:fb:ea:ba:09:ee:9a:d9:
                    aa:19:db:53:1c:8c:f3:7e:ca:e6:16:a8:55:50:a4:
                    97:c7:53:90:d0:6f:ac:1c:38:fe:14:f5:65:b9:9b:
                    e0:8e:4d:a0:d8:9c:d0:5c:3b:6b:44:6a:2a:15:f3:
                    d4:68:3a:d1:f5:72:d2:21:85:53:6f:32:44:04:ba:
                    1a:8b:46:76:c8:cc:bc:43:86:d8:05:bb:78:8d:8b:
                    ea:4b:0a:8c:45:7d:1c:c4:9a:37:48:4d:fe:58:c5:
                    11:31:98:ec:9b:09:4e:ef:9e:e8:43:24:01:93:c8:
                    fb:f0:31:25:2a:c6:2b:ea:32:9a:6c:4d:92:72:d1:
                    0e:29:dd:0c:ed:76:cb:ee:99:aa:b1:12:01:4d:bd:
                    81:b9:91:53:ed:20:12:a4:d9:a9:73:77:fc:59:6a:
                    7f:6f:f1:c7:31:ec:28:f8:ff:60:72:bd:2a:e6:90:
                    31:c0:22:3f:d7:91:3f:e5:24:07:85:13:c0:b1:b7:
                    19:49:52:79:c1:af:d2:c7:89:ef:9e:fe:60:88:27:
                    76:04:0c:a9:7c:d1:21:03:7d:2c:44:e4:09:cd:0c:
                    45:9e:6c:a6:e8:bf:4a:e5:ed:d3:44:d9:ef:4f:6a:
                    c3:10:71:57:1f:6c:32:60:e0:9a:91:cc:a2:df:db:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:59:AC:CD:A5:B5:7E:C0:8F:F0:2C:59:67:CB:01:CA:B5:40:BB
            X509v3 Authority Key Identifier:
                keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/323830343a393136633a3a2f33322d3335203d3e20323734363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:916c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:71:0d:df:00:b1:f0:94:ba:a2:a3:f4:a9:5b:20:3a:b1:c6:
         5a:62:30:3f:58:2d:1d:1d:4f:0d:2a:78:6f:a3:60:6d:74:55:
         cf:0d:6b:37:2a:6a:01:9b:97:94:44:1c:39:03:eb:ea:81:35:
         62:a4:db:03:69:5f:86:f6:e5:4d:49:4d:7f:5a:03:fd:f1:3e:
         40:20:5c:23:e0:e5:e2:1b:75:b3:ff:c5:f1:6a:1e:81:ff:93:
         30:ec:c3:fa:77:19:c5:d0:40:07:9b:06:3e:78:5d:d2:f3:c3:
         08:62:75:d5:48:ca:a6:80:b9:3c:03:37:e6:48:9c:3d:6b:b4:
         e5:2e:22:d1:ad:9f:c6:31:ac:cf:04:01:65:5e:9e:2e:da:e0:
         c3:95:73:bc:00:85:3e:f4:43:41:f1:df:8b:4d:1d:3c:e0:ac:
         85:29:a4:27:49:63:a8:34:9d:63:8a:82:d1:25:7f:13:24:ee:
         4d:85:9e:a1:a7:70:fb:36:ae:1d:28:75:29:28:10:7c:20:8c:
         5b:d9:c6:eb:fa:5f:87:53:6a:c4:f8:fd:b2:58:58:cc:de:dd:
         b5:2a:5f:95:ee:9a:2a:8d:22:9a:e5:4c:a1:83:fe:bc:f5:be:
         f8:69:c0:72:75:69:b4:54:2c:6d:25:5f:52:eb:09:63:0f:a3:
         36:35:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----