Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a343030303a3a2f33342d3334203d3e203532373632.roa
File:                     323830343a6237633a343030303a3a2f33342d3334203d3e203532373632.roa (raw, json)
Hash identifier:          /ZuWwheJSc50moJkCccimcpsbHOV6gFb+VGwpm9rwWQ=
Subject key identifier:   E7:46:9C:71:95:39:79:C3:99:2D:3F:A9:FE:3C:C9:CE:3D:C1:CA:0B
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       0A3EBEE154204C84C9DA092AD689F5051C33918C
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a343030303a3a2f33342d3334203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:32 +0000
ROA not before:           Thu 06 Aug 2026 13:31:32 +0000
ROA not after:            Thu 05 Aug 2027 13:36:32 +0000
asID:                     52762
IP address blocks:        2804:b7c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3e:be:e1:54:20:4c:84:c9:da:09:2a:d6:89:f5:05:1c:33:91:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:32 2026 GMT
            Not After : Aug  5 13:36:32 2027 GMT
        Subject: CN=E7469C71953979C3992D3FA9FE3CC9CE3DC1CA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:1c:a4:d4:b8:5c:f6:47:da:f4:b8:c7:9e:
                    4f:ba:a2:29:0a:db:3d:d6:51:b1:2e:a7:61:aa:88:
                    24:df:fb:c0:b5:8e:e7:e8:18:53:65:4a:44:4b:22:
                    26:a3:7e:0d:c0:ad:ca:f6:e3:0b:d3:f6:87:66:3c:
                    ce:eb:9f:01:a5:38:1e:a7:b9:0d:8f:f6:0d:03:c9:
                    d3:29:2a:1c:95:bf:ce:fb:a4:99:56:3e:80:83:57:
                    19:f8:7e:01:1a:67:a8:31:10:f3:01:69:9c:83:84:
                    34:ab:01:58:59:fd:3d:25:78:b4:45:d1:f9:50:a7:
                    0f:22:6d:f3:80:95:1f:47:37:2a:8c:cc:36:39:3d:
                    39:ba:4f:e1:b1:38:53:01:b3:cb:b3:c8:2b:f9:39:
                    e7:63:ff:d4:6b:0a:c8:8c:88:42:86:80:e7:6f:9a:
                    68:39:d3:d0:be:8d:ae:be:c1:02:41:ee:29:48:aa:
                    87:43:21:87:97:fe:fa:07:41:02:d3:52:cf:7e:1e:
                    73:9c:53:16:1e:c9:59:6b:6d:1b:61:19:01:d5:15:
                    db:c3:4c:bf:9b:5f:02:90:c7:32:ab:dc:08:7e:d8:
                    66:a9:01:56:a7:90:c1:0e:09:0a:82:0f:2c:47:90:
                    c6:14:0a:78:4e:73:19:4e:76:29:b9:95:d3:bd:e8:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:9C:71:95:39:79:C3:99:2D:3F:A9:FE:3C:C9:CE:3D:C1:CA:0B
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a343030303a3a2f33342d3334203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b7c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:d5:da:d0:b2:93:ef:22:22:a7:83:be:b1:67:7e:23:89:
         52:3b:59:b1:69:a8:68:67:8e:df:b0:25:23:86:ca:2f:06:cf:
         08:a9:6a:4c:6c:80:d6:43:78:f3:9b:c5:ac:d7:1c:bd:d4:0e:
         4d:58:ef:82:ad:ff:66:79:83:85:bb:3e:07:3e:a6:c7:7b:26:
         2b:bf:21:c4:e3:9c:69:96:e2:da:22:8e:a5:22:6d:21:c4:83:
         1a:10:d9:a0:f6:da:85:60:60:15:de:3d:d7:eb:15:7c:bf:5e:
         57:3c:df:ea:d9:ae:7a:0c:17:11:ac:5f:fc:2e:17:66:2d:c9:
         4c:72:b2:bf:a4:cc:b2:cc:76:aa:79:5a:ae:29:66:0d:e6:8d:
         b3:90:d9:39:b1:b4:04:3f:a8:ae:32:9b:9b:51:3f:23:93:82:
         99:f4:c3:bd:c0:4c:ca:13:9b:f1:78:bc:84:fc:af:71:2c:47:
         66:ff:63:06:c7:ce:00:09:62:5d:cd:ae:ff:ba:7b:74:f1:db:
         3a:75:e6:6f:a6:98:01:d3:fa:fb:e2:54:dd:9d:1c:46:fe:af:
         34:33:74:0b:9e:51:02:7f:6c:44:94:2b:c2:01:d6:1c:c0:45:
         d5:c2:10:da:8d:6d:c3:0e:d8:5e:e6:df:ba:d7:bf:db:7c:d4:
         e0:78:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:45:44 2026 by rpki-client