Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/323830343a3965633a373830303a3a2f33372d3337203d3e20323633303032.roa
File:                     323830343a3965633a373830303a3a2f33372d3337203d3e20323633303032.roa (raw, json)
Hash identifier:          ST7qSAfMr7oSIukZTK18bA6PaEP9T7lYz8FjUzuaeKk=
Subject key identifier:   AD:E2:65:A5:5E:54:14:78:EA:FB:32:D6:64:96:24:11:DB:D1:A3:CC
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       6DCB60A8223460B3C5F5E7063346B74AE0146AAB
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/323830343a3965633a373830303a3a2f33372d3337203d3e20323633303032.roa
Signing time:             Tue 04 Aug 2026 14:13:47 +0000
ROA not before:           Tue 04 Aug 2026 14:08:47 +0000
ROA not after:            Tue 03 Aug 2027 14:13:47 +0000
asID:                     263002
IP address blocks:        2804:9ec:7800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:60:a8:22:34:60:b3:c5:f5:e7:06:33:46:b7:4a:e0:14:6a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  4 14:08:47 2026 GMT
            Not After : Aug  3 14:13:47 2027 GMT
        Subject: CN=ADE265A55E541478EAFB32D664962411DBD1A3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:61:29:8f:dd:da:27:9e:f8:f2:02:4e:72:
                    f1:14:fe:80:2b:00:18:b6:6e:e0:65:ac:b6:82:9f:
                    27:a4:37:84:7b:e1:d2:88:80:26:58:ef:0f:c7:6c:
                    a6:28:b3:78:b9:b1:ee:ac:42:cf:05:8a:a2:ff:d2:
                    0b:1b:a6:04:c0:db:24:c2:2a:47:63:39:b2:ce:75:
                    e6:bf:74:8e:0d:a4:24:26:8e:ce:7a:a0:28:db:53:
                    ce:98:3f:f5:3a:0b:5f:a8:2d:42:24:28:30:7b:67:
                    02:cd:c5:85:d9:30:cf:09:fc:2d:ec:8e:d5:32:c3:
                    8b:d9:ee:af:12:db:8b:cb:ad:cd:12:7b:b9:b8:8e:
                    41:66:44:0e:a0:fc:22:b3:29:b1:49:2a:6a:3a:75:
                    e5:25:69:10:66:46:1a:eb:29:d9:d4:a7:b0:32:12:
                    c7:7c:30:2a:be:7b:74:79:f7:19:de:98:28:07:55:
                    26:0f:12:6d:a4:10:93:1f:c6:3a:6f:63:d9:1f:03:
                    af:88:4e:f2:a4:c2:a8:17:eb:c1:c7:af:6d:57:8d:
                    9c:a6:45:59:23:20:ce:b5:41:42:2c:48:65:63:f1:
                    69:d0:21:1d:d0:0e:61:41:81:e5:da:6e:b2:70:c1:
                    89:12:c9:95:2b:9a:97:2b:b0:77:5e:7a:72:63:32:
                    25:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:65:A5:5E:54:14:78:EA:FB:32:D6:64:96:24:11:DB:D1:A3:CC
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/323830343a3965633a373830303a3a2f33372d3337203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9ec:7800::/37

    Signature Algorithm: sha256WithRSAEncryption
         be:58:c1:02:b5:18:9f:b8:4f:4f:02:eb:61:cf:6f:ba:07:f1:
         5f:c3:4e:e8:95:53:ee:fc:29:60:6d:9a:eb:1d:5c:b2:18:c9:
         6f:47:74:7f:29:24:87:c9:5d:96:98:19:82:0d:ce:28:27:ac:
         16:74:b7:35:0a:48:50:d5:ec:ea:47:cc:eb:a9:2b:a1:d3:13:
         27:28:7c:8c:ec:d8:92:85:17:70:3f:9e:e2:a2:a6:2e:22:d2:
         7e:4a:11:c1:1a:f8:f3:9a:54:97:18:aa:8e:34:08:25:01:61:
         0d:29:27:af:07:14:28:8f:9c:55:49:43:c0:c6:8d:29:19:41:
         1f:8a:b7:92:e4:86:75:f1:bf:22:1d:d7:19:8c:62:fb:2b:a3:
         c8:5d:65:82:76:f7:1c:df:47:aa:d0:ca:ad:f8:c9:c9:43:df:
         4f:d9:f2:bc:d4:fc:d5:2d:64:65:54:a4:8b:4a:4e:49:dc:e6:
         bf:54:e8:c3:7b:b5:c7:d5:9e:0c:09:90:4f:fd:c4:06:14:a1:
         00:15:8d:09:80:5c:67:57:e0:8c:3e:d1:df:f2:a8:2e:6e:fa:
         58:f9:02:20:37:d7:9a:e3:39:66:eb:87:e4:7f:59:02:fe:f0:
         50:dd:dd:0e:a4:55:4b:8d:5f:72:aa:ac:5a:b1:ca:e1:f4:6c:
         42:7b:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:10:51 2026 by rpki-client