Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a633030303a3a2f33342d3334203d3e20323633363134.roa
File:                     323830343a313030343a633030303a3a2f33342d3334203d3e20323633363134.roa (raw, json)
Hash identifier:          D1zzMmpi0L3WNYLmmrm95lWMZYjIKwMNsQTum0DlTK0=
Subject key identifier:   7F:37:E2:01:0E:6E:D7:34:22:B6:BF:4D:17:4A:75:40:48:88:0D:33
Certificate issuer:       /CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
Certificate serial:       70250200FC9986271EA1ACF35E1B7D9407012E86
Authority key identifier: 9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a633030303a3a2f33342d3334203d3e20323633363134.roa
Signing time:             Tue 25 Aug 2026 15:30:00 +0000
ROA not before:           Tue 25 Aug 2026 15:25:00 +0000
ROA not after:            Tue 24 Aug 2027 15:30:00 +0000
asID:                     263614
IP address blocks:        2804:1004:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:25:02:00:fc:99:86:27:1e:a1:ac:f3:5e:1b:7d:94:07:01:2e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667
        Validity
            Not Before: Aug 25 15:25:00 2026 GMT
            Not After : Aug 24 15:30:00 2027 GMT
        Subject: CN=7F37E2010E6ED73422B6BF4D174A754048880D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:79:0e:75:6f:f6:72:42:6e:68:c1:e4:cd:
                    5a:3d:dc:95:1d:74:18:6d:9f:fb:40:34:72:90:21:
                    d0:4c:32:9b:31:ec:38:d6:89:88:b5:f8:65:e5:cd:
                    cc:cc:bc:c4:cb:b0:9e:88:74:86:d8:69:58:ae:47:
                    bd:9c:8b:c9:04:86:92:35:fa:e6:6e:bb:2e:5d:22:
                    c9:39:22:ad:28:e9:0d:61:ff:4c:74:00:cf:f8:35:
                    4a:c5:b5:cc:15:cc:61:5d:ba:06:7d:da:2b:61:e3:
                    19:bf:ed:22:29:da:50:60:61:06:cf:41:b3:ab:84:
                    0d:7c:0a:f4:fe:4a:41:3c:78:00:06:2c:a7:3b:aa:
                    a0:1f:a0:50:01:3c:5b:ed:85:f2:83:76:f3:35:4f:
                    b6:34:57:aa:ac:2c:3c:10:07:31:54:94:d3:80:9b:
                    60:1c:c1:26:db:26:df:30:da:e5:9f:cf:67:fb:bb:
                    4d:ee:a8:e2:36:e8:c5:bc:65:d7:44:f2:12:c1:f2:
                    7e:51:00:8f:5f:b1:a8:f6:67:52:70:48:bd:e9:17:
                    de:be:bb:6c:14:7b:3d:e0:35:1a:a8:ca:fb:45:d9:
                    04:0d:0a:8c:45:38:ef:bd:2a:08:af:90:20:ec:7c:
                    0e:86:40:aa:99:b8:58:02:8d:03:e6:c5:a8:c0:e2:
                    3f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:E2:01:0E:6E:D7:34:22:B6:BF:4D:17:4A:75:40:48:88:0D:33
            X509v3 Authority Key Identifier:
                keyid:9D:0F:DE:C9:F8:EE:23:DE:9A:1C:B1:F2:47:C0:DD:9D:67:05:56:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D0FDEC9F8EE23DE9A1CB1F247C0DD9D67055667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/323830343a313030343a633030303a3a2f33342d3334203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1004:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:24:88:00:3d:d8:be:70:1f:eb:e6:b6:e4:6c:88:32:23:e4:
         fb:8b:e3:3f:62:c9:30:3e:95:ca:0b:73:6c:b2:b2:da:99:c3:
         5b:08:2a:7e:df:59:a3:eb:42:a1:8a:a6:31:f9:40:16:3a:94:
         ac:86:74:65:03:80:40:15:5f:c6:c3:4a:05:36:d0:28:d4:e6:
         22:b9:4a:2e:c5:2c:31:64:4f:54:8a:40:7c:bc:e4:91:29:73:
         88:51:ae:96:e5:9f:60:91:42:ce:77:7f:c1:9f:30:0e:2e:62:
         31:c8:00:dd:3b:b3:c4:ea:c7:1f:3a:5c:73:b3:63:04:74:9a:
         17:94:59:3b:7e:33:45:9a:66:26:2b:a2:e5:db:fa:b3:d5:c6:
         d3:00:f4:9b:5e:26:a8:1a:53:2a:b6:af:08:e7:f1:e2:b7:ca:
         b0:33:fb:8c:57:dd:95:4d:0d:88:ff:c0:4f:eb:38:ee:3f:40:
         4a:84:ba:10:8a:c0:6e:fe:15:f4:ba:b2:c1:b5:89:58:5c:e9:
         ab:04:49:7f:5b:dd:f2:ba:01:fe:e6:b4:d2:db:aa:14:83:09:
         64:f1:e5:47:3d:04:14:73:f8:7a:32:32:36:3d:dc:11:ed:bc:
         5b:23:de:91:e4:6b:cf:3b:94:a2:99:58:d7:af:2e:df:30:cf:
         09:db:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:04:58 2026 by rpki-client