Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33342d3334203d3e20323634383934.roa
File:                     323830343a326637633a343030303a3a2f33342d3334203d3e20323634383934.roa (raw, json)
Hash identifier:          p37x/ejAgsnREBtNwGuoVkKXAfd1D5B0SFr9MzhvoLg=
Subject key identifier:   EC:88:D6:89:22:A8:D2:A0:4A:4E:3A:23:F3:8E:E8:06:B2:B7:19:1A
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       3D7F500214A9321BB43825D7FB98E699F8073910
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33342d3334203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:11:56 +0000
ROA not before:           Sat 31 Oct 2026 20:06:56 +0000
ROA not after:            Sat 30 Oct 2027 20:11:56 +0000
asID:                     264894
IP address blocks:        2804:2f7c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7f:50:02:14:a9:32:1b:b4:38:25:d7:fb:98:e6:99:f8:07:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:06:56 2026 GMT
            Not After : Oct 30 20:11:56 2027 GMT
        Subject: CN=EC88D68922A8D2A04A4E3A23F38EE806B2B7191A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:85:0d:d5:a1:c6:39:c6:30:81:ba:63:3b:
                    05:70:9f:d0:c8:2f:71:76:7e:0c:36:fc:6b:6d:91:
                    1c:bf:4a:5e:84:d6:2d:0f:33:d6:35:47:b7:82:3a:
                    b8:01:9f:4c:59:63:35:17:ea:47:ed:d7:7f:5d:bc:
                    53:5c:14:90:76:0c:b5:c9:ca:1d:31:d9:fc:f8:21:
                    6c:08:ce:46:2d:5f:a8:3a:ab:1e:a0:e9:15:10:33:
                    c7:4a:f1:3f:65:a6:90:f8:4c:8c:3d:64:60:32:a4:
                    c7:92:1e:c6:69:4a:77:81:1e:51:e9:4b:ab:6a:5c:
                    eb:fe:b5:e8:30:f2:77:e8:ea:16:ab:d1:2f:df:7f:
                    74:93:4d:cc:ed:09:19:fa:17:76:e8:7d:8c:80:3f:
                    50:35:65:e4:14:39:ae:22:75:5f:e4:c0:50:31:8d:
                    b3:7a:ad:b6:2d:18:7b:66:fd:7a:65:2c:c9:c9:11:
                    a2:a9:6f:be:00:4d:75:c0:76:df:30:65:3d:f1:82:
                    2f:c5:0c:ea:0b:10:0e:c2:0f:ff:81:6b:4c:df:4c:
                    82:30:27:38:74:a6:6d:c6:45:4c:29:8d:ff:3d:ca:
                    ed:9d:01:3a:c8:d1:96:9a:79:0a:f2:84:2f:26:53:
                    87:0b:9f:9c:46:84:f8:f3:1d:b3:52:4b:8a:4f:f4:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:D6:89:22:A8:D2:A0:4A:4E:3A:23:F3:8E:E8:06:B2:B7:19:1A
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33342d3334203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         27:04:2d:2a:aa:ce:16:de:c6:36:af:bb:1e:b4:6c:94:3d:1c:
         17:ec:cb:6a:f1:f7:65:a0:3b:8a:45:ec:ae:bf:6f:b9:6b:9b:
         f1:50:86:00:20:4a:40:2e:07:86:2b:73:45:c1:09:2d:5d:75:
         82:2e:4a:6c:d0:23:75:17:f0:25:d2:7a:21:d4:41:58:89:a6:
         53:01:a2:3f:c6:4c:47:37:bb:d0:76:f3:bf:58:20:6b:c0:a4:
         49:f8:ed:28:2c:a8:aa:79:b8:bc:33:6c:a4:95:44:ef:90:89:
         f0:1a:80:af:b3:ed:21:66:3f:3d:9e:41:14:9e:9e:87:87:e8:
         35:fa:db:67:fc:02:00:51:75:d6:9c:7d:4b:e1:07:62:27:68:
         a4:42:d2:a6:87:a5:30:08:59:0a:e8:ba:34:75:0e:13:10:d2:
         6e:82:fa:1c:e7:11:20:40:72:e3:c4:53:bf:f2:59:1a:ac:a6:
         a3:90:96:87:d0:31:aa:bb:5d:e0:c4:b9:48:21:2c:08:c6:f0:
         21:61:ae:c8:ae:05:fd:c0:3e:78:1e:14:59:74:84:06:dc:c7:
         e5:85:e2:b7:95:a7:68:ac:50:36:b6:b5:97:9f:e8:b4:30:da:
         c0:ff:7c:25:99:20:2a:05:fa:01:43:5e:ea:66:7c:92:45:8d:
         2f:15:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----