Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/323830343a343139633a383030303a3a2f33332d3333203d3e20323637343434.roa
File:                     323830343a343139633a383030303a3a2f33332d3333203d3e20323637343434.roa (raw, json)
Hash identifier:          /t6X/TmKE2gF/YbxYaFX8wFaCUPYnl3d/I8EiN+H0Ko=
Subject key identifier:   73:4A:E1:06:D0:E1:D4:12:92:E7:A2:0D:C9:EB:79:56:7F:56:32:FC
Certificate issuer:       /CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
Certificate serial:       619C3589777DCAA3F824E70C66989586C60CCF04
Authority key identifier: 23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/323830343a343139633a383030303a3a2f33332d3333203d3e20323637343434.roa
Signing time:             Wed 29 Jul 2026 00:07:21 +0000
ROA not before:           Wed 29 Jul 2026 00:02:21 +0000
ROA not after:            Wed 28 Jul 2027 00:07:21 +0000
asID:                     267444
IP address blocks:        2804:419c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl
                          rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9c:35:89:77:7d:ca:a3:f8:24:e7:0c:66:98:95:86:c6:0c:cf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
        Validity
            Not Before: Jul 29 00:02:21 2026 GMT
            Not After : Jul 28 00:07:21 2027 GMT
        Subject: CN=734AE106D0E1D41292E7A20DC9EB79567F5632FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:93:05:4e:58:de:3f:45:59:b4:0f:e4:73:
                    83:b9:d9:f8:f1:54:ac:76:88:3b:ab:0b:91:4d:d9:
                    dd:72:22:b3:41:6a:4e:5c:b8:db:d2:53:02:11:f0:
                    7b:5a:43:ee:3f:2f:63:36:1d:02:65:14:26:b8:b5:
                    cc:e3:0c:28:70:b1:47:07:be:dd:2d:e2:ad:a5:fc:
                    45:49:c4:07:90:43:bb:8e:48:a7:28:f2:0d:bd:ac:
                    77:ea:f5:a6:15:28:36:6d:71:5e:6a:9b:c6:70:5d:
                    7f:98:ec:7a:1f:49:cd:19:37:cb:48:2c:0a:65:61:
                    f0:b5:9e:5f:18:e3:9d:cb:45:59:eb:8d:5f:aa:bb:
                    63:73:52:88:4d:94:4b:6d:ab:4d:30:57:90:11:b8:
                    de:0a:c2:6b:7a:94:e0:c4:c0:20:c9:d1:df:3b:f8:
                    b6:78:ce:fc:b7:58:78:04:a8:5b:bd:e5:fc:5e:17:
                    e8:10:26:9b:44:b8:c8:a8:82:1c:49:00:08:89:c4:
                    07:76:66:b1:dd:b8:79:c4:62:5b:48:61:ef:3a:87:
                    9b:17:37:dd:fb:87:fc:d2:28:50:d6:67:bc:b1:f0:
                    21:43:ad:07:9f:70:db:be:46:1d:60:12:17:ae:b5:
                    ed:b6:81:6a:3e:3d:b3:17:15:e1:1d:38:f8:8d:36:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:E1:06:D0:E1:D4:12:92:E7:A2:0D:C9:EB:79:56:7F:56:32:FC
            X509v3 Authority Key Identifier:
                keyid:23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/323830343a343139633a383030303a3a2f33332d3333203d3e20323637343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:419c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:ae:d3:04:ea:d7:62:a1:44:6b:f0:d2:1e:da:67:9f:fb:c4:
         fb:25:da:31:5d:d7:a9:3a:87:c3:8a:36:69:8c:c3:a7:25:eb:
         34:b0:53:16:10:61:13:01:06:93:b9:c4:91:6b:7a:d8:6e:3e:
         20:6d:f9:e1:38:03:41:e1:28:10:e5:ec:bb:80:51:16:33:97:
         48:32:55:7a:ed:52:9d:cc:53:31:1d:9c:2a:fc:3e:30:15:55:
         5e:1b:cc:5e:99:07:03:82:26:77:f6:af:3c:24:52:b9:b9:94:
         61:82:5b:00:90:9e:41:81:a6:90:23:9d:70:dc:9e:9b:12:9b:
         5b:5f:27:0b:7d:59:cb:d5:5a:4f:b8:98:ff:1d:6d:da:c9:fd:
         cf:7c:b3:bb:91:af:d7:74:d3:62:4c:ad:68:69:8d:2c:db:04:
         10:20:f9:75:d7:07:ae:7d:7f:f3:28:20:20:f9:b8:c6:82:7f:
         f2:57:86:1c:2c:9f:0b:12:13:c2:04:7c:ee:69:b4:ee:4a:3e:
         ed:96:16:02:2f:a3:82:53:0f:12:14:25:12:65:4e:47:c2:6a:
         0a:32:b4:81:d9:89:10:40:68:b1:aa:d8:93:08:59:43:ea:2a:
         96:26:c5:47:b4:9c:44:c4:64:08:fa:79:74:94:a7:dc:91:79:
         bc:c0:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:43:04 2026 by rpki-client