Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
File:                     323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (raw, json)
Hash identifier:          lkRz6dClDfpyHVrAmxB1U+7jfvgNQQD9DY7qcPUaTU0=
Subject key identifier:   4D:C1:88:6F:1C:75:17:B8:F7:16:62:E2:E7:A0:C2:29:C6:65:D8:B7
Certificate issuer:       /CN=606B63310A957E2DF94EADB06715C2E1D7904737
Certificate serial:       0347A96F150BBDA0D47969D36009B80EBC990810
Authority key identifier: 60:6B:63:31:0A:95:7E:2D:F9:4E:AD:B0:67:15:C2:E1:D7:90:47:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/606B63310A957E2DF94EADB06715C2E1D7904737.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa
Signing time:             Tue 04 Aug 2026 18:29:39 +0000
ROA not before:           Tue 04 Aug 2026 18:24:39 +0000
ROA not after:            Tue 03 Aug 2027 18:29:39 +0000
asID:                     268669
IP address blocks:        2804:54c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/606B63310A957E2DF94EADB06715C2E1D7904737.crl
                          rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/606B63310A957E2DF94EADB06715C2E1D7904737.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/606B63310A957E2DF94EADB06715C2E1D7904737.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:47:a9:6f:15:0b:bd:a0:d4:79:69:d3:60:09:b8:0e:bc:99:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606B63310A957E2DF94EADB06715C2E1D7904737
        Validity
            Not Before: Aug  4 18:24:39 2026 GMT
            Not After : Aug  3 18:29:39 2027 GMT
        Subject: CN=4DC1886F1C7517B8F71662E2E7A0C229C665D8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:7b:0f:16:f0:87:b4:46:a6:3b:28:19:80:
                    e8:4d:25:bb:9a:dc:3d:48:2c:7c:f7:f8:6d:dd:89:
                    c0:bb:41:21:e6:5f:9b:8d:3d:a3:7d:ad:b3:56:ef:
                    74:80:94:c9:0d:51:aa:fe:6a:11:1a:b4:28:e9:0f:
                    87:61:5e:ca:f3:2b:6a:eb:a4:ae:60:db:5f:c3:01:
                    5e:f3:00:fc:36:67:a2:55:35:8c:dd:8b:de:56:d2:
                    55:0b:b3:39:da:e4:cf:b1:49:38:b3:c9:fa:17:46:
                    2a:14:cd:9e:5c:6d:9c:82:e0:11:8b:f3:60:7e:a5:
                    49:63:82:72:92:9c:6e:da:b4:41:7a:7f:34:f9:5b:
                    09:d7:ac:08:16:7f:0b:34:d1:07:32:70:d2:77:b0:
                    88:f9:7b:40:94:e6:9b:4b:22:17:ee:54:bd:60:9e:
                    af:89:16:57:1a:0f:e3:ce:9f:33:7f:ca:e7:72:fa:
                    16:ff:ef:66:92:99:1e:59:53:bf:d8:20:15:11:37:
                    71:70:0e:40:8e:af:c2:97:a8:ee:4b:5c:94:f4:ec:
                    2d:c5:7a:dd:ea:e4:21:46:50:d4:f4:f2:cb:88:88:
                    a7:dc:7c:c2:9b:24:13:de:21:2a:db:00:7d:76:e3:
                    f3:15:8d:c8:22:0f:5c:f8:71:50:99:29:99:29:bc:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:88:6F:1C:75:17:B8:F7:16:62:E2:E7:A0:C2:29:C6:65:D8:B7
            X509v3 Authority Key Identifier:
                keyid:60:6B:63:31:0A:95:7E:2D:F9:4E:AD:B0:67:15:C2:E1:D7:90:47:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/606B63310A957E2DF94EADB06715C2E1D7904737.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/606B63310A957E2DF94EADB06715C2E1D7904737.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/323830343a353463343a3a2f33322d313238203d3e20323638363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:95:71:72:ef:e5:91:8f:23:67:56:b5:b9:42:1f:94:5c:90:
         ab:c0:f6:a8:c9:ce:a7:5c:6d:36:3e:e0:83:12:6e:5b:49:ee:
         1e:7d:b3:88:5b:eb:17:91:ff:7b:3d:45:ff:41:cc:e0:32:ac:
         9f:f5:2f:30:95:ae:d7:aa:cc:47:75:f8:87:52:f5:63:f9:68:
         8a:62:65:27:3b:a9:85:3d:44:b3:8f:a8:9b:de:61:d0:ed:ca:
         5d:30:40:4e:9b:a4:63:af:14:eb:9a:80:f8:14:5a:31:cb:5e:
         c4:3a:99:0c:a8:77:ae:f2:e4:0b:76:8b:c7:49:6b:b7:b9:d5:
         c8:6b:7a:5d:2a:ab:04:ed:bc:25:12:a5:dd:2a:e6:91:11:48:
         d8:d6:e8:41:a1:16:7e:39:64:15:ef:c9:6c:fc:8a:a4:57:96:
         00:17:09:b9:e9:9d:9e:5a:30:04:5f:7d:1e:8a:f2:f8:97:f2:
         93:c5:7e:8a:be:01:6b:8f:dd:c2:38:9f:3b:50:36:64:e2:6d:
         c7:2f:f7:8a:3b:d2:dd:ce:2a:ee:13:fc:0a:9a:ee:e3:d5:23:
         0a:d1:f6:98:c8:14:1f:c9:49:81:a1:e1:19:6e:bd:d6:db:1a:
         81:7d:06:83:cf:92:54:3f:b5:a6:42:b9:92:ae:de:51:e0:4d:
         f9:21:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:26:30 2026 by rpki-client