Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a343030303a3a2f33342d3334203d3e20323633363134.roa
File:                     323830343a313030343a343030303a3a2f33342d3334203d3e20323633363134.roa (raw, json)
Hash identifier:          +6MDXqo4GAGqUlUFZ60Mm5fV67A+nm8SagoAfwwI2NQ=
Subject key identifier:   4B:4E:87:18:EE:A1:69:D4:89:DF:FA:F4:7F:C1:72:9F:06:80:5C:52
Certificate issuer:       /CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
Certificate serial:       6B1EAA72188464A2B4063B0B5512B0C8D96C048A
Authority key identifier: 9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a343030303a3a2f33342d3334203d3e20323633363134.roa
Signing time:             Tue 25 Aug 2026 15:29:52 +0000
ROA not before:           Tue 25 Aug 2026 15:24:52 +0000
ROA not after:            Tue 24 Aug 2027 15:29:52 +0000
asID:                     263614
IP address blocks:        2804:1004:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:aa:72:18:84:64:a2:b4:06:3b:0b:55:12:b0:c8:d9:6c:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
        Validity
            Not Before: Aug 25 15:24:52 2026 GMT
            Not After : Aug 24 15:29:52 2027 GMT
        Subject: CN=4B4E8718EEA169D489DFFAF47FC1729F06805C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:84:81:47:09:7e:4b:2e:58:22:6a:b0:d7:
                    e4:b4:08:1f:5e:61:fb:79:a5:8c:b6:e9:4b:ea:d8:
                    84:f6:c2:c0:6a:42:1a:4f:ce:fe:79:2a:96:85:24:
                    f5:22:26:77:ee:45:3f:04:ea:cc:42:e3:2f:a9:4a:
                    2e:d1:6f:00:0f:af:3e:ac:a8:de:2a:ad:a8:51:11:
                    68:86:b0:a4:5d:aa:23:3b:02:5e:b2:4e:a0:fd:da:
                    60:c9:09:41:e4:99:69:73:10:bc:e6:ae:80:30:ac:
                    5b:9b:90:37:76:b0:5c:32:44:9d:c7:e2:02:a2:60:
                    a6:e4:9c:61:85:6b:1c:ef:e7:d1:06:d5:ee:dd:01:
                    ba:ae:1f:da:20:dd:75:8c:42:b4:a9:60:18:0e:97:
                    b2:ba:03:f0:fe:15:6b:82:82:1e:6e:be:ba:38:a8:
                    87:24:15:1d:ab:e1:bd:1e:29:ea:6a:7d:c5:c9:e0:
                    1d:8c:e9:e3:de:52:c3:a1:96:a5:00:94:d6:60:22:
                    f4:0b:7a:55:bf:5e:87:f4:91:a0:c9:56:8a:dc:79:
                    9b:21:c6:95:3b:61:aa:eb:5b:6c:06:c4:f7:28:38:
                    e5:03:d8:65:3b:18:02:16:0c:37:ad:8d:b2:c8:a4:
                    96:fc:b1:eb:e3:0b:d6:ef:ba:38:44:c9:11:13:ba:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:87:18:EE:A1:69:D4:89:DF:FA:F4:7F:C1:72:9F:06:80:5C:52
            X509v3 Authority Key Identifier:
                keyid:9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a343030303a3a2f33342d3334203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:17:ef:93:f7:3c:d2:e9:2b:18:78:36:81:e2:3a:cf:6f:61:
         7b:b2:49:bf:5d:38:15:d2:29:cf:2f:b7:2d:b9:98:3a:90:40:
         f3:7e:b9:21:6d:21:29:30:ab:91:31:6f:12:e9:7e:cf:a1:f3:
         f0:dc:c6:4b:ac:5c:d0:99:e8:0d:44:79:aa:ed:f8:77:a5:e6:
         5e:f8:fc:60:f3:a8:e8:6b:b9:b3:f2:bb:04:27:bf:fc:c7:f6:
         64:b1:da:db:9f:31:5f:16:59:6a:7d:1f:48:95:3b:0a:f8:9c:
         ea:6e:4b:8b:80:a4:02:a0:c5:e8:5e:a6:86:54:5d:66:3d:95:
         97:e0:6b:a3:0f:f9:e8:aa:a8:d6:56:6e:85:2a:8e:2c:04:76:
         ce:45:f4:b7:c5:4a:10:8f:6a:cc:a0:ce:dd:22:c1:28:b9:4e:
         a8:52:00:51:c7:f8:1d:8d:7a:c8:d3:af:57:8a:ca:b0:25:08:
         be:04:f5:ba:ce:2d:37:69:9f:f1:11:3e:2b:5f:f4:71:cd:b2:
         ea:e1:99:77:ca:bd:6f:17:e5:de:96:81:d7:46:3f:c6:d5:2a:
         ae:f8:86:67:3a:aa:fe:f7:c1:67:34:0d:03:4a:16:b6:aa:00:
         de:48:6f:0e:f9:32:a2:f5:13:78:ba:c0:b7:0f:dd:76:2a:47:
         7e:0c:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:06:21 2026 by rpki-client