Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33352d3335203d3e20323634383934.roa
File:                     323830343a326637633a343030303a3a2f33352d3335203d3e20323634383934.roa (raw, json)
Hash identifier:          IE8FnaaEOySRM9BPjaAKiQA/Uhn+IrdPgrOEgzTgP68=
Subject key identifier:   17:99:02:44:CA:8D:AE:B2:BD:37:46:42:FD:04:A4:94:DC:AC:74:30
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       4ABCDDBF80C116D3FBB184A790A2008EB25A42BE
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33352d3335203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:12:18 +0000
ROA not before:           Sat 31 Oct 2026 20:07:18 +0000
ROA not after:            Sat 30 Oct 2027 20:12:18 +0000
asID:                     264894
IP address blocks:        2804:2f7c:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bc:dd:bf:80:c1:16:d3:fb:b1:84:a7:90:a2:00:8e:b2:5a:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:07:18 2026 GMT
            Not After : Oct 30 20:12:18 2027 GMT
        Subject: CN=17990244CA8DAEB2BD374642FD04A494DCAC7430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:d1:9b:f5:4c:91:33:62:9c:f8:28:9f:5a:
                    21:07:c3:aa:eb:80:7a:76:67:7c:11:ed:01:a7:95:
                    bb:45:89:a3:c9:9d:43:b8:47:a3:17:af:ad:17:82:
                    56:53:43:38:96:bc:2a:49:2f:58:d7:1d:40:5a:40:
                    60:2d:5e:d2:d6:1d:26:c8:83:2c:58:dd:38:2a:78:
                    68:b6:2d:44:0e:6f:ed:bf:03:03:86:78:66:9a:b5:
                    90:7d:a5:46:f4:f3:85:bf:bc:1a:fd:46:0e:7b:d3:
                    d9:ff:2f:15:63:82:7d:be:71:81:3c:c3:82:f3:db:
                    ea:ae:22:10:35:d2:f5:35:68:5b:69:57:9f:8d:65:
                    07:49:ea:04:22:13:7e:d9:f7:53:b9:6b:42:ba:0a:
                    08:c0:29:83:e2:bf:34:ab:63:f5:ae:97:11:55:1f:
                    6e:82:2b:d5:4c:9f:08:47:54:d9:e2:6d:a7:88:f3:
                    db:66:9e:3d:73:88:a6:0c:31:b1:ee:b0:0f:c7:63:
                    1e:29:eb:9b:af:f6:d3:bf:92:ca:4e:e4:55:ec:6b:
                    0c:26:bf:7d:07:f6:95:54:4a:0e:0c:b4:c7:8d:bf:
                    9b:ad:3f:79:ed:9b:92:65:2b:3f:48:ff:35:1a:95:
                    e0:ba:db:ec:db:8b:f7:28:91:e7:1e:4a:0f:0a:43:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:02:44:CA:8D:AE:B2:BD:37:46:42:FD:04:A4:94:DC:AC:74:30
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a343030303a3a2f33352d3335203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         d6:63:96:a4:20:6c:53:18:23:63:0c:2f:cc:2e:b5:d2:a4:4f:
         c6:c2:ef:0a:f0:45:aa:b6:43:c7:3a:1f:a7:bd:b5:c0:13:c8:
         52:fe:7e:4f:a4:b5:eb:13:9b:2e:cd:a9:68:a8:f3:fd:4f:ab:
         c9:d3:8e:e4:e7:7c:cd:13:03:b4:d3:29:49:2a:8b:05:94:77:
         3e:34:9d:10:3e:be:c7:66:59:59:26:c5:af:4e:5c:ff:98:44:
         c5:5d:56:6b:e5:77:ac:b4:2f:a3:20:e5:71:68:ae:0f:20:f3:
         19:fe:5a:0a:3f:df:a3:10:c4:aa:73:02:a3:5d:f2:f9:a8:10:
         27:4a:6b:d0:37:94:7f:33:85:37:42:0e:2b:61:1f:03:ef:84:
         11:50:66:51:21:7e:96:1c:42:7a:9d:88:70:4b:8d:00:c6:d8:
         a1:0a:a4:66:f8:49:8b:06:44:93:fb:bd:56:18:5d:cc:94:f8:
         3a:96:27:9d:af:17:73:4d:16:54:6d:d6:ff:44:b3:19:96:d4:
         c2:55:df:55:36:d0:14:72:9f:76:ba:33:de:5e:f7:54:a2:03:
         a3:14:d8:d3:33:c4:c1:e4:ea:b7:37:26:b9:9c:18:83:de:0a:
         1d:fe:04:6e:3b:1b:09:55:77:08:94:94:fa:df:48:54:dd:70:
         f0:18:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----