Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a383030303a3a2f33342d3334203d3e20323634393936.roa
File:                     323830343a333132343a383030303a3a2f33342d3334203d3e20323634393936.roa (raw, json)
Hash identifier:          SDVJ5KFCQ68jJkS+hY3RNUsewDpBPq8IpqT4VN5TmOc=
Subject key identifier:   46:47:AE:78:EB:67:6C:11:04:DE:45:86:D1:50:13:82:6D:67:31:54
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       6D395099D04010D85C1CB38D62F157FB537B8E71
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a383030303a3a2f33342d3334203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:30:59 +0000
ROA not before:           Fri 28 Aug 2026 18:25:59 +0000
ROA not after:            Fri 27 Aug 2027 18:30:59 +0000
asID:                     264996
IP address blocks:        2804:3124:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:50:99:d0:40:10:d8:5c:1c:b3:8d:62:f1:57:fb:53:7b:8e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:25:59 2026 GMT
            Not After : Aug 27 18:30:59 2027 GMT
        Subject: CN=4647AE78EB676C1104DE4586D15013826D673154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:2d:57:ae:15:32:97:59:ea:d2:93:34:10:
                    b0:ca:34:ac:5d:da:c4:26:6d:db:85:c1:be:05:cb:
                    be:73:78:a0:3e:b4:d4:19:9e:2d:58:85:4f:b3:e3:
                    ea:5c:af:20:63:9d:9c:96:9c:4a:ca:8e:8c:94:44:
                    43:ae:81:5a:72:46:97:b5:c7:5c:4d:b2:66:c0:00:
                    bf:78:5c:d5:2b:99:be:d5:28:5d:18:a6:54:55:e3:
                    ef:79:b1:df:be:af:6f:ee:9a:e2:3d:10:a3:d8:26:
                    af:80:3b:a2:09:4c:14:81:9c:2f:5b:e9:1b:86:8d:
                    05:23:e8:64:2f:43:43:f4:45:2e:dd:32:82:4f:81:
                    9f:72:42:07:20:10:0f:6d:24:f1:c6:0e:77:f5:2d:
                    0b:bf:9b:48:4e:4a:db:90:b8:54:f0:09:71:57:16:
                    54:ef:f8:1c:68:38:92:67:f6:a6:e9:26:74:64:de:
                    1a:36:ef:76:6d:43:6e:3c:0c:ad:d0:e2:bc:4b:80:
                    3d:c3:da:27:a3:60:77:b4:59:4c:67:44:bc:a3:54:
                    5c:b0:83:d9:51:bf:05:dd:09:ba:78:2e:d5:9b:bb:
                    ff:a9:b1:a9:2a:07:ae:52:78:c2:57:b3:e3:6f:be:
                    c9:7a:13:a4:88:67:cc:32:19:ea:9c:c5:e2:94:5f:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:47:AE:78:EB:67:6C:11:04:DE:45:86:D1:50:13:82:6D:67:31:54
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a383030303a3a2f33342d3334203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:82:09:c7:6d:83:c1:93:d3:a2:95:a7:3e:40:b0:07:41:
         7f:37:95:90:00:1a:04:a0:66:eb:1e:7f:13:4e:5a:94:7c:80:
         8e:b9:59:c7:9d:af:40:c0:f9:56:27:72:d8:5b:76:83:1b:0d:
         4a:de:af:bc:50:04:bb:1b:9c:51:87:e6:a1:c8:4a:3a:03:48:
         7f:ea:04:fd:87:2e:0c:c9:75:2d:64:e1:a4:78:af:a4:62:16:
         3a:18:f7:d6:ef:34:e0:f6:b1:04:ad:66:8a:98:33:ce:3d:1e:
         53:27:53:76:db:b7:70:dd:ef:ce:36:bf:20:e8:0f:18:89:e6:
         63:24:5b:49:cf:54:70:05:c4:31:90:d5:6f:2d:8d:b4:20:d8:
         be:5c:4e:8f:7e:b1:a1:05:2d:10:7c:72:98:2d:21:9e:e3:3f:
         76:d6:a4:78:96:b2:91:bf:d4:18:4b:13:c3:3f:13:1f:c2:5e:
         44:57:5e:f8:85:6a:fa:1c:88:40:bb:d7:2f:b3:19:66:48:a1:
         24:df:42:d1:4b:6f:25:d7:74:b8:22:ca:0c:77:20:cf:ac:ef:
         85:b9:16:c0:b1:d2:1f:c7:51:d4:11:13:61:95:c8:86:bd:2a:
         8b:54:df:ad:9a:51:ce:2e:b9:e9:9a:c1:3c:b1:2e:91:60:8b:
         c0:ea:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:40 2026 by rpki-client