Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/323830343a333032303a3a2f33322d3333203d3e20323634393331.roa
File:                     323830343a333032303a3a2f33322d3333203d3e20323634393331.roa (raw, json)
Hash identifier:          gbg0vXXkHV6wv2rEpyZUx+jxUMHGnO5w6o33qTjdlgw=
Subject key identifier:   AD:61:63:CB:07:A9:03:0A:B6:0F:9A:A7:08:EC:4F:EE:73:5E:42:A3
Certificate issuer:       /CN=426EFD46988248FDEE178BB94A8C8EBD2B95293D
Certificate serial:       6D10947B8C38B9D44849276EC4FC165847C0621B
Authority key identifier: 42:6E:FD:46:98:82:48:FD:EE:17:8B:B9:4A:8C:8E:BD:2B:95:29:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/323830343a333032303a3a2f33322d3333203d3e20323634393331.roa
Signing time:             Mon 20 Jul 2026 18:07:38 +0000
ROA not before:           Mon 20 Jul 2026 18:02:38 +0000
ROA not after:            Mon 19 Jul 2027 18:07:38 +0000
asID:                     264931
IP address blocks:        2804:3020::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.crl
                          rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:10:94:7b:8c:38:b9:d4:48:49:27:6e:c4:fc:16:58:47:c0:62:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=426EFD46988248FDEE178BB94A8C8EBD2B95293D
        Validity
            Not Before: Jul 20 18:02:38 2026 GMT
            Not After : Jul 19 18:07:38 2027 GMT
        Subject: CN=AD6163CB07A9030AB60F9AA708EC4FEE735E42A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:c9:e1:e6:78:16:e4:d7:a6:7f:5f:7f:b3:
                    f0:e4:6d:0b:04:42:78:0b:60:bc:32:45:02:85:ee:
                    a2:e9:26:46:1a:df:a7:42:96:c4:b0:d0:2a:2d:1c:
                    5e:19:78:f0:5f:6f:b5:a3:09:c5:3a:09:57:9a:00:
                    0a:4f:84:6b:09:1b:30:66:93:f6:c6:a1:d0:55:20:
                    d7:0f:95:b7:f3:96:79:43:dc:45:91:00:53:ed:be:
                    0e:29:b7:d7:c9:00:ab:33:7b:54:89:24:45:34:0f:
                    33:27:77:95:be:68:6d:0f:75:86:41:90:5e:19:a6:
                    12:9c:b6:2c:16:5b:56:83:1f:d6:be:c2:97:f4:07:
                    67:a3:d5:8a:1d:cd:34:0e:51:5a:30:e5:55:4c:6c:
                    d9:c3:24:47:2d:37:e3:80:c6:9b:5f:6f:44:46:c9:
                    82:ae:00:d5:76:b4:68:45:f9:c0:7d:73:0c:dd:cc:
                    fe:8d:cb:f3:5c:04:c7:f3:44:a4:e5:24:df:aa:bb:
                    c9:fb:b3:dc:73:db:f0:a1:2d:d0:93:c5:2d:e7:82:
                    8d:76:57:e1:5f:f4:b6:7e:8c:79:d9:42:ed:fe:92:
                    9d:df:b9:09:f4:73:bd:ac:c6:0e:be:47:48:d8:f9:
                    d1:85:35:1b:53:5c:c5:a7:46:cc:05:a9:3d:54:70:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:61:63:CB:07:A9:03:0A:B6:0F:9A:A7:08:EC:4F:EE:73:5E:42:A3
            X509v3 Authority Key Identifier:
                keyid:42:6E:FD:46:98:82:48:FD:EE:17:8B:B9:4A:8C:8E:BD:2B:95:29:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/426EFD46988248FDEE178BB94A8C8EBD2B95293D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/426EFD46988248FDEE178BB94A8C8EBD2B95293D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuVMKttxg1WPDB4yxqepxLEyVMBPzZqMcPYPuqWK7zMe/0/323830343a333032303a3a2f33322d3333203d3e20323634393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3020::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:e1:56:7b:90:1b:fe:76:4b:2b:7c:66:9b:34:fb:15:e6:e1:
         be:4c:7b:ab:3f:fe:67:bd:a0:0f:7f:46:10:6c:4d:e0:ef:1d:
         ad:15:d7:a8:ee:04:aa:41:e3:d7:bb:89:49:12:e0:5d:42:d9:
         9e:6a:fa:b3:8e:09:67:78:46:9f:d5:24:67:af:e8:c2:8a:7e:
         04:e3:46:75:c7:e8:4e:12:0d:77:ed:58:31:82:a8:a5:ac:09:
         fa:bb:53:3f:be:b9:a1:4e:80:c2:96:9d:dd:f8:0b:4e:e4:f9:
         e3:eb:b1:7e:19:03:fa:08:e1:61:fd:23:73:7b:79:11:81:f6:
         ca:c2:78:e3:25:56:9a:aa:03:58:9d:eb:24:be:1f:de:c0:ea:
         7d:60:e8:e4:e3:bc:aa:18:24:e2:fb:76:b1:19:d3:aa:a1:f0:
         8a:8f:c7:c1:ba:45:a4:8c:1f:96:a2:6f:4a:da:59:d7:d7:80:
         1c:82:bb:40:37:81:f6:52:4b:db:c3:00:e4:d6:3a:06:0d:f7:
         e6:f3:8f:b4:bd:49:a7:dd:52:bc:a7:9e:e8:56:25:72:65:be:
         6f:46:7d:d6:a6:99:d7:45:90:97:2c:0d:33:21:11:b8:a3:ba:
         8d:f0:2f:c1:08:fa:20:3d:1d:76:fb:74:88:c9:72:2e:89:3c:
         dd:d0:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:55:06 2026 by rpki-client