Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33332d3333203d3e20323636303238.roa
File:                     323830343a333936343a3a2f33332d3333203d3e20323636303238.roa (raw, json)
Hash identifier:          uvLsp01ZJV5v2o5N1IaspoTZ/1mMkFxIn1B0jLUX6Mk=
Subject key identifier:   3E:3D:F6:35:7D:8E:1A:7F:AF:34:5D:DA:90:69:F6:48:40:AB:8A:C5
Certificate issuer:       /CN=126CBB2E01C90415CAD8020379862F937CB88B35
Certificate serial:       5643664A90DCF1610C433B180C77E656E13B0EC3
Authority key identifier: 12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33332d3333203d3e20323636303238.roa
Signing time:             Thu 24 Jul 2025 14:21:30 +0000
ROA not before:           Thu 24 Jul 2025 14:16:30 +0000
ROA not after:            Thu 23 Jul 2026 14:21:30 +0000
asID:                     266028
IP address blocks:        2804:3964::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl
                          rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 08:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:66:4a:90:dc:f1:61:0c:43:3b:18:0c:77:e6:56:e1:3b:0e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126CBB2E01C90415CAD8020379862F937CB88B35
        Validity
            Not Before: Jul 24 14:16:30 2025 GMT
            Not After : Jul 23 14:21:30 2026 GMT
        Subject: CN=3E3DF6357D8E1A7FAF345DDA9069F64840AB8AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:7b:77:eb:52:60:59:65:f2:2f:80:82:37:
                    56:a2:c9:bf:3f:69:d0:8b:2e:39:78:f9:fa:4f:d9:
                    e2:74:b7:e0:1b:f9:2b:6a:a7:38:e2:46:bd:1d:79:
                    22:8f:c1:d3:26:6e:97:be:c7:3e:c8:32:da:1c:a2:
                    6a:b5:0a:fe:5d:9f:c8:8f:0c:fe:98:e1:10:f0:ad:
                    86:b3:41:a7:fd:84:f3:42:10:97:a0:98:79:26:77:
                    93:55:20:68:5e:08:91:13:eb:89:ca:a1:e1:f1:d5:
                    3d:67:6c:8a:82:99:be:09:80:b8:85:30:92:d2:0a:
                    c1:7b:b2:09:0f:bd:ff:a5:59:10:2a:56:ba:a2:05:
                    6d:2a:98:a6:5d:91:47:37:28:2e:8a:5e:53:d8:03:
                    4d:44:5a:ad:50:19:57:a5:5f:ec:a0:5f:83:5a:64:
                    c5:91:25:95:2b:ce:06:b9:2a:b8:da:08:d9:93:92:
                    8c:3d:14:c8:c0:f9:5b:ad:82:95:54:28:94:6b:1f:
                    66:60:aa:4a:75:e8:64:e0:bf:a7:d0:f7:4d:63:55:
                    94:b7:50:4c:4b:4b:6e:ac:8a:6f:52:3c:94:3e:fb:
                    b2:63:ff:27:d1:ba:30:ee:ef:a9:79:9f:6b:f8:d9:
                    40:3a:08:ee:7f:24:89:ae:da:15:2c:af:99:f9:1c:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:F6:35:7D:8E:1A:7F:AF:34:5D:DA:90:69:F6:48:40:AB:8A:C5
            X509v3 Authority Key Identifier:
                keyid:12:6C:BB:2E:01:C9:04:15:CA:D8:02:03:79:86:2F:93:7C:B8:8B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/126CBB2E01C90415CAD8020379862F937CB88B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126CBB2E01C90415CAD8020379862F937CB88B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6gBRuz7jBYdMmehGq5E6YpU82jo1TKjpV9dQunVkVwg/0/323830343a333936343a3a2f33332d3333203d3e20323636303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3964::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:75:b2:71:a6:b9:10:64:9d:10:1d:c9:8f:c2:a4:f8:3a:33:
         a8:38:af:99:da:56:00:d5:6c:37:e4:91:7e:7a:41:69:e2:4b:
         43:9d:25:ed:b7:24:50:6b:22:2c:cc:91:2d:fc:cb:ec:e9:13:
         5d:53:47:6e:ad:29:97:03:a7:21:41:2c:45:3b:70:c7:39:fc:
         4a:78:cc:85:13:2e:89:19:fc:73:e3:eb:0c:ed:23:e6:a8:a3:
         40:34:bd:ad:a5:86:78:fd:a3:d8:18:32:9f:d6:12:98:bb:a9:
         d7:f0:97:5b:6f:d5:48:ad:22:31:a6:af:70:e6:18:ba:e7:ee:
         01:c7:be:fb:e3:86:97:ff:0a:3a:80:83:c2:04:25:39:bf:d2:
         78:22:78:6f:0c:49:16:3f:7b:ea:10:fd:5f:c3:31:51:e3:05:
         f7:74:e0:f3:75:73:db:62:7e:a6:d0:6b:63:e8:21:3c:d4:ee:
         c3:ad:d2:77:45:de:11:31:5d:83:7a:9a:79:33:48:6b:3d:da:
         0b:f0:76:7c:3f:ba:b0:fb:d5:55:b5:eb:03:5f:2b:aa:59:08:
         b2:2d:c5:8f:7d:81:12:bc:28:ed:d1:02:f0:9f:9a:24:45:18:
         d5:e5:44:ce:58:49:a4:c0:b1:09:d6:93:53:8d:63:fe:91:a7:
         af:96:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:01 2025 by rpki-client