Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3334203d3e20323639313435.roa
File:                     323830343a363031383a3a2f33322d3334203d3e20323639313435.roa (raw, json)
Hash identifier:          M0LcOOmMZo8QOyi2wAEmMI1eLKe5vGXnwQKZCmnT6zo=
Subject key identifier:   11:4A:41:3B:DF:79:10:A5:77:79:13:40:A2:07:7C:F2:39:5E:1A:A7
Certificate issuer:       /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial:       3B0EFC40C71FE452EAD71DC53222C598A15A83A2
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3334203d3e20323639313435.roa
Signing time:             Tue 11 Aug 2026 19:11:04 +0000
ROA not before:           Tue 11 Aug 2026 19:06:04 +0000
ROA not after:            Tue 10 Aug 2027 19:11:04 +0000
asID:                     269145
IP address blocks:        2804:6018::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
                          rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0e:fc:40:c7:1f:e4:52:ea:d7:1d:c5:32:22:c5:98:a1:5a:83:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
        Validity
            Not Before: Aug 11 19:06:04 2026 GMT
            Not After : Aug 10 19:11:04 2027 GMT
        Subject: CN=114A413BDF7910A577791340A2077CF2395E1AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:fa:09:5a:6b:a1:b0:05:08:dd:a8:5c:ec:
                    ae:d3:15:62:38:7f:cb:50:f9:27:da:e3:56:1f:ff:
                    8a:06:ae:3f:a5:f1:e6:46:e8:70:51:a6:29:d0:85:
                    5e:b0:b7:85:4c:70:52:bd:ee:84:f1:38:4d:56:4f:
                    92:65:d9:0f:75:4f:55:79:3d:35:81:1c:89:dd:21:
                    fe:f4:5e:64:e6:8a:dd:c3:0e:7d:70:8e:f0:57:10:
                    ba:c0:c4:c5:92:ed:d1:2c:58:fe:92:e8:72:90:50:
                    a9:2c:42:52:87:ab:0e:00:2a:88:06:16:9f:80:34:
                    11:26:af:2e:0a:65:1e:f0:5e:25:a8:0f:2f:7f:ba:
                    ef:19:bb:74:3f:2a:7e:f4:68:0e:48:71:32:44:f7:
                    08:68:d0:26:2f:90:ea:fd:52:d1:b4:a2:24:f1:52:
                    73:8a:ef:42:4b:d2:9b:5f:03:3e:1d:9f:f7:25:82:
                    c8:b3:d7:5c:fa:81:2b:13:7a:d8:4a:10:12:14:f4:
                    83:ce:de:93:e7:e7:f0:b3:ac:bf:d4:da:b7:ac:e8:
                    59:82:4d:b9:dd:c0:be:86:63:dd:39:b6:ab:93:08:
                    da:40:49:ce:9c:39:e0:90:c7:b7:50:f6:cf:1f:02:
                    be:a4:23:dd:39:23:66:e0:cf:8e:77:d1:4d:57:e2:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4A:41:3B:DF:79:10:A5:77:79:13:40:A2:07:7C:F2:39:5E:1A:A7
            X509v3 Authority Key Identifier:
                keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3334203d3e20323639313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6018::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:f6:63:0c:fa:b5:83:7f:fd:17:e6:52:d9:38:2d:82:80:
         65:c7:4c:88:88:90:cf:28:45:f8:f2:36:b9:40:41:cc:f4:61:
         fb:8f:2e:75:0f:9b:8a:bc:55:83:db:05:a4:81:16:60:e8:8e:
         8d:4b:86:6a:3d:6b:33:d4:16:6f:92:b3:3d:da:5d:1f:98:b4:
         98:5e:38:78:e0:d0:93:d4:ab:f7:a9:1d:2e:68:33:10:34:d8:
         d7:be:d2:3c:be:1a:cf:8c:79:54:a0:93:68:88:54:a9:28:50:
         8c:57:76:51:5c:d7:a8:13:cf:1c:28:38:f8:f7:83:4b:bc:6d:
         bc:ef:fe:cb:28:b0:21:21:53:2f:62:7c:4f:fb:08:db:eb:19:
         51:50:ab:59:5c:5f:05:9b:f7:c3:00:d0:53:18:f4:a8:84:21:
         38:26:9f:a0:e4:cf:53:25:57:e5:50:45:05:f9:56:0c:c4:55:
         84:ee:f2:72:89:c8:e5:06:0c:ca:f0:b9:b4:40:43:be:a8:7f:
         1e:61:35:82:48:15:e1:fe:e6:db:f4:13:a6:dc:de:1f:b8:44:
         24:ae:d6:02:33:f1:1a:63:44:af:59:d2:d3:20:50:2b:86:ff:
         78:29:e2:a1:7b:ea:f2:5b:ab:1c:f3:6b:b8:a9:e1:3f:85:77:
         2d:72:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----