Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa
File:                     323830343a383632633a3a2f33332d3333203d3e20323732363236.roa (raw, json)
Hash identifier:          1F3VMNDtbUT8US0kqlWgUKnxqDlCjVq3D75pgvEnFQk=
Subject key identifier:   82:3E:F2:02:BD:DA:E5:72:AE:B8:93:2E:8F:A4:30:57:BA:1C:BA:A7
Certificate issuer:       /CN=694E6B5038C6280BEF2DB8486172C168470A9FA8
Certificate serial:       68B4352833695735F0856902BA7F3C6C0B9CC7B4
Authority key identifier: 69:4E:6B:50:38:C6:28:0B:EF:2D:B8:48:61:72:C1:68:47:0A:9F:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E6B5038C6280BEF2DB8486172C168470A9FA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa
Signing time:             Wed 15 Jul 2026 17:31:49 +0000
ROA not before:           Wed 15 Jul 2026 17:26:49 +0000
ROA not after:            Wed 14 Jul 2027 17:31:49 +0000
asID:                     272626
IP address blocks:        2804:862c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/694E6B5038C6280BEF2DB8486172C168470A9FA8.crl
                          rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/694E6B5038C6280BEF2DB8486172C168470A9FA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E6B5038C6280BEF2DB8486172C168470A9FA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:35:28:33:69:57:35:f0:85:69:02:ba:7f:3c:6c:0b:9c:c7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E6B5038C6280BEF2DB8486172C168470A9FA8
        Validity
            Not Before: Jul 15 17:26:49 2026 GMT
            Not After : Jul 14 17:31:49 2027 GMT
        Subject: CN=823EF202BDDAE572AEB8932E8FA43057BA1CBAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:f5:17:6c:86:13:49:c3:b6:df:0f:e9:b9:
                    c1:2a:b7:d4:30:57:3f:d2:a0:f1:09:48:4e:5f:9c:
                    7f:40:fd:f4:09:31:e6:d5:2d:01:d8:22:5d:17:14:
                    5a:f6:e6:7f:81:11:19:83:84:d1:0b:3b:2a:cb:c5:
                    97:b8:e6:ff:e3:d6:4c:d4:92:33:7b:fd:38:d2:d4:
                    2a:1f:ce:f0:4b:8a:b3:7a:10:c0:73:e7:4a:cd:56:
                    45:95:67:ee:b2:3d:01:1f:de:3c:2b:ea:6d:28:e1:
                    09:ba:68:82:2e:86:e5:f3:ea:bc:c4:99:9c:ac:84:
                    6d:9b:2d:f2:87:2e:74:97:4a:6f:37:98:ca:4c:39:
                    e3:d9:eb:91:12:a4:53:8d:86:84:ae:24:06:4a:eb:
                    1e:f7:b5:24:14:a9:1d:37:91:3a:33:91:e6:86:a6:
                    ce:8e:f3:e3:ce:1b:1f:15:43:04:18:52:a8:4e:60:
                    6f:81:7d:04:93:98:47:b4:75:4b:f3:7b:45:ad:b1:
                    90:0e:df:07:79:78:b9:4e:02:d7:b3:61:f8:15:1d:
                    35:3a:7e:b3:84:a2:8f:d6:d0:ac:dd:2b:59:60:8f:
                    34:53:3f:f4:79:30:97:a1:b0:93:53:2d:2f:f0:67:
                    b2:b4:47:30:a3:08:97:23:ea:42:68:9f:b1:b9:f7:
                    8c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:F2:02:BD:DA:E5:72:AE:B8:93:2E:8F:A4:30:57:BA:1C:BA:A7
            X509v3 Authority Key Identifier:
                keyid:69:4E:6B:50:38:C6:28:0B:EF:2D:B8:48:61:72:C1:68:47:0A:9F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/694E6B5038C6280BEF2DB8486172C168470A9FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E6B5038C6280BEF2DB8486172C168470A9FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/0/323830343a383632633a3a2f33332d3333203d3e20323732363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:862c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8c:c9:77:bd:36:87:50:2c:00:22:af:aa:71:2a:3a:f7:b3:ee:
         20:1c:bf:de:f0:52:3d:1d:23:6d:e3:52:49:de:f4:5d:d7:ca:
         ad:56:4c:6d:49:ae:98:3a:a2:e3:21:c0:07:61:5e:f0:da:94:
         4f:22:f6:81:63:98:2c:78:98:44:a8:c6:32:62:25:3b:1b:c6:
         43:b3:c1:76:07:5c:de:f9:52:58:77:6a:90:99:b4:cf:ee:3b:
         e9:3e:01:a5:22:17:a7:de:fd:9d:c7:58:a9:96:59:f0:11:3a:
         ff:6b:26:5e:a9:e3:7f:3b:a6:b3:41:b1:ae:c2:56:41:6b:11:
         8b:d2:6f:f2:da:c4:fc:9f:14:50:e5:fc:83:f9:5d:80:82:67:
         60:e6:d2:c4:a2:2c:0b:c3:5d:e8:f9:bb:ac:52:3c:5b:b0:33:
         f6:29:c7:b8:42:80:19:eb:e0:34:77:b4:e1:47:53:46:ac:9a:
         85:43:03:c1:50:33:c6:0e:fd:8f:7f:3f:68:b8:d0:67:0c:02:
         ff:d7:d8:02:14:e7:c6:92:bc:67:3e:db:e2:a2:a4:0f:85:a1:
         04:87:32:e1:26:68:b1:43:ef:04:19:2c:91:ce:91:d6:f0:bd:
         9e:20:15:ca:6c:8e:bc:03:2e:62:4a:06:cc:b2:0e:bd:4d:2b:
         7e:0a:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:52 2026 by rpki-client