Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33322d3332203d3e20323636303238.roa
File:                     323830343a333936343a3a2f33322d3332203d3e20323636303238.roa (raw, json)
Hash identifier:          ST3SFkbglICdRzLq7ccJpm+WWKmfL9rXv94rQcpxD0w=
Subject key identifier:   A3:06:CB:CE:68:7D:71:E5:51:83:6A:36:C6:0A:CE:B1:DB:3F:3B:2B
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       6A56CAAA9D8DE22D5A219D89609BEE1490376BF9
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33322d3332203d3e20323636303238.roa
Signing time:             Thu 24 Jul 2025 14:21:30 +0000
ROA not before:           Thu 24 Jul 2025 14:16:30 +0000
ROA not after:            Thu 23 Jul 2026 14:21:30 +0000
asID:                     266028
IP address blocks:        2804:3964::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:56:ca:aa:9d:8d:e2:2d:5a:21:9d:89:60:9b:ee:14:90:37:6b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Jul 24 14:16:30 2025 GMT
            Not After : Jul 23 14:21:30 2026 GMT
        Subject: CN=A306CBCE687D71E551836A36C60ACEB1DB3F3B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:26:e0:03:f8:91:3b:90:5d:f9:73:28:ce:
                    78:4e:5d:d0:a7:a5:df:f9:d2:9f:41:08:33:fe:87:
                    26:c2:62:1a:8d:f9:29:0c:f2:eb:0b:cb:ea:d2:2f:
                    55:06:41:a2:cb:a7:91:7b:ed:b3:b2:09:f4:2b:d5:
                    4a:62:d2:d0:4b:9e:9a:7f:12:4d:28:b3:a7:32:bc:
                    71:55:ac:dc:38:5f:cd:bb:30:6c:0c:00:f5:f6:78:
                    dd:56:0b:68:ae:58:ee:ae:f4:fd:53:8d:a4:3b:f6:
                    5c:7d:98:c2:bb:df:ff:7d:c1:90:0a:9a:d3:ba:ba:
                    c0:92:e5:f8:dc:02:0f:38:65:dc:14:bc:37:89:c2:
                    a8:b8:4f:78:3f:bc:c3:e1:df:79:c6:80:53:d7:ab:
                    1b:d6:bf:47:fc:b1:a0:fa:c1:d2:ef:fa:91:73:02:
                    f3:57:f4:9e:91:c6:6a:c1:73:9e:43:f8:7e:9a:55:
                    d9:ec:a0:f6:36:63:52:d1:c1:26:d4:f6:68:60:d4:
                    de:6e:81:be:fc:f7:0a:de:f4:42:80:0d:87:a3:04:
                    79:63:2f:ce:32:ac:85:4b:55:be:a6:08:7c:83:3b:
                    1f:9f:d7:05:1a:11:b3:6d:dc:4f:f3:8a:0e:31:4e:
                    9a:90:f3:2c:1a:f4:d4:7c:f2:a7:25:48:a2:0a:1e:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:CB:CE:68:7D:71:E5:51:83:6A:36:C6:0A:CE:B1:DB:3F:3B:2B
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33322d3332203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3964::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:08:4a:dd:00:b3:ca:4e:39:2c:34:af:4a:36:a3:a5:93:
         5e:2f:9d:9d:0e:7c:3e:9c:32:91:d7:36:95:7d:73:3c:4c:cd:
         dc:04:b3:44:ba:47:37:98:3c:fe:00:b9:fa:73:c0:c3:42:59:
         99:74:55:ca:f7:0a:a2:f5:6e:31:2b:b7:28:e1:5d:0a:82:e4:
         50:32:3e:95:37:45:0f:98:78:d4:fb:d2:98:d6:9b:77:2a:e9:
         52:ee:45:3f:06:0f:97:a8:04:42:12:74:70:29:de:89:55:97:
         19:34:2f:9d:a0:50:49:54:3e:4c:67:cf:f4:f5:cc:77:94:21:
         e6:44:1e:09:78:64:30:c8:88:2d:d0:20:f7:2d:9b:69:aa:2e:
         fb:9d:aa:2d:a7:0f:b8:1f:7e:85:62:9a:47:a1:e7:f6:41:b4:
         06:27:7c:c7:ca:4d:e8:94:48:8a:c9:e0:69:9e:93:ab:b6:db:
         70:a5:ce:18:d1:e8:8e:ee:fb:9a:b6:d7:8b:29:e9:32:34:ce:
         3f:88:ba:2e:9d:d1:4f:e0:ca:86:93:ce:9a:a8:d7:ab:bc:96:
         20:a0:0a:da:d2:7c:ab:f9:fa:bf:04:ae:32:e2:ed:fa:e9:4d:
         fe:ea:79:d3:12:27:8b:51:8b:5b:f1:53:e4:40:b5:08:b7:51:
         02:37:24:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:00:00 2025 by rpki-client