Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a383030303a3a2f33332d3333203d3e203532373632.roa
File:                     323830343a6237633a383030303a3a2f33332d3333203d3e203532373632.roa (raw, json)
Hash identifier:          BykH8OEa+Gf8Fw2Qw+ETuwZp27PsspQOs3JgMr7QbuQ=
Subject key identifier:   EF:F5:C3:BB:AA:13:5F:BA:D0:FF:C1:68:94:B3:47:24:DA:57:E7:20
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       67BFFFB38F37AB6E9E5A5E2CE596060FAF2CB394
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a383030303a3a2f33332d3333203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:33 +0000
ROA not before:           Thu 06 Aug 2026 13:31:33 +0000
ROA not after:            Thu 05 Aug 2027 13:36:33 +0000
asID:                     52762
IP address blocks:        2804:b7c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:ff:b3:8f:37:ab:6e:9e:5a:5e:2c:e5:96:06:0f:af:2c:b3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:33 2026 GMT
            Not After : Aug  5 13:36:33 2027 GMT
        Subject: CN=EFF5C3BBAA135FBAD0FFC16894B34724DA57E720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:3c:35:bd:9e:8c:5a:59:dd:58:7f:79:90:
                    5e:09:a9:27:4a:b9:43:27:3c:7a:1f:14:23:6f:82:
                    50:a6:e8:46:bf:d2:51:b5:23:bc:cc:fa:39:73:75:
                    72:b3:62:f0:0e:ad:60:78:9f:8e:62:9d:a9:11:56:
                    8d:c0:eb:b0:b5:4d:20:8e:e2:92:8e:81:2a:bc:c1:
                    93:b9:d2:24:28:4d:e3:40:70:69:7c:83:fb:01:f0:
                    7d:d9:dc:41:3a:f6:46:aa:66:0e:9b:e4:5a:ae:b5:
                    ad:90:e2:0f:f1:47:ef:c4:38:36:1b:26:1f:93:1f:
                    0d:f4:d9:06:fb:c4:3c:06:dd:f9:77:0c:44:37:4f:
                    79:bc:fb:71:cd:62:7c:64:ab:85:d7:b2:59:66:1c:
                    be:c9:95:a3:b1:c4:56:22:ff:0a:d5:10:60:66:07:
                    69:2d:1c:53:b7:58:af:f4:90:07:52:22:40:51:0a:
                    07:2a:40:65:73:0c:95:2f:0e:9d:fc:a7:f0:c4:5f:
                    49:a9:3d:f1:d7:c4:b8:93:f2:98:88:2c:f0:28:8e:
                    7b:e1:47:55:76:17:bd:78:51:bd:db:1b:5a:e3:c3:
                    31:5c:7d:96:3f:00:69:d4:02:c7:d9:30:5d:2c:76:
                    c5:35:9a:de:bc:4e:3e:e7:7f:ae:f6:29:b8:01:b3:
                    2a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F5:C3:BB:AA:13:5F:BA:D0:FF:C1:68:94:B3:47:24:DA:57:E7:20
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/323830343a6237633a383030303a3a2f33332d3333203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b7c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:bf:29:8e:c6:d7:e4:e0:ab:b9:dc:d8:34:59:06:c2:bf:
         f8:a1:d4:53:c6:2c:97:71:a5:44:e3:ec:df:3b:a1:4a:7b:5e:
         ea:97:e4:29:1a:29:94:86:6e:bd:66:f8:5c:f5:cb:73:36:6d:
         8f:c4:c9:3f:ed:d1:0b:5d:65:b3:e8:9e:41:c1:f6:12:37:e5:
         18:7c:9f:81:be:2f:ed:cf:af:72:ea:2c:66:39:5b:0a:d0:1b:
         18:bb:20:50:ca:49:91:5f:f2:75:9b:e8:60:fa:08:01:57:5c:
         bb:e9:9d:de:85:f3:a6:d0:28:59:1f:40:18:16:e4:86:2e:c6:
         86:05:b6:3f:b5:77:db:e6:09:fc:d8:e2:18:1f:b9:f2:32:8a:
         59:50:7f:93:8e:7b:7c:fa:d0:a3:a7:9c:c5:21:c8:92:5f:39:
         7f:c8:09:bb:2a:04:f3:f9:9d:bf:e5:2a:01:f4:29:97:86:52:
         d0:c8:b0:4b:b1:25:05:fc:cd:6d:20:1d:da:36:ed:d8:29:7b:
         96:ca:f8:8a:19:22:cf:84:0c:f8:4f:1b:30:f8:f0:db:4e:4c:
         72:85:f8:93:75:46:8a:b6:b9:6c:59:cf:05:b9:35:85:57:49:
         45:9d:b9:51:38:5e:d8:85:b3:a9:87:8f:fe:30:d5:24:63:e3:
         ea:c8:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:46:10 2026 by rpki-client