Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a383030303a3a2f33342d3334203d3e20323634383934.roa
File:                     323830343a326637633a383030303a3a2f33342d3334203d3e20323634383934.roa (raw, json)
Hash identifier:          3JV+0ygoizMyujciVJPsvli4NULGhGUks0zKy5PcMLI=
Subject key identifier:   C4:28:E9:BA:D4:F8:5B:4D:95:19:A3:EE:AA:A0:37:5E:DC:7F:04:36
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       5A5AD95173E05DE94D8CF5A288FD36C803207000
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a383030303a3a2f33342d3334203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:14:10 +0000
ROA not before:           Sat 31 Oct 2026 20:09:10 +0000
ROA not after:            Sat 30 Oct 2027 20:14:10 +0000
asID:                     264894
IP address blocks:        2804:2f7c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5a:d9:51:73:e0:5d:e9:4d:8c:f5:a2:88:fd:36:c8:03:20:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:09:10 2026 GMT
            Not After : Oct 30 20:14:10 2027 GMT
        Subject: CN=C428E9BAD4F85B4D9519A3EEAAA0375EDC7F0436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:5e:cb:38:29:66:b1:69:b3:ee:48:3e:53:
                    6c:4f:13:07:61:d1:7a:7c:dd:d6:9d:89:9b:79:a3:
                    b2:fe:76:2b:59:6d:b2:c4:dc:a3:0b:b0:4f:d0:80:
                    f3:84:13:07:40:7a:49:8d:fb:32:2c:e5:5b:60:41:
                    10:03:e6:ec:92:be:6b:2d:b0:98:b7:36:5f:3d:cc:
                    df:ff:a5:2b:9a:3d:32:13:fa:a0:83:d1:a6:97:23:
                    93:2a:45:37:fd:7b:93:d5:e9:ed:bc:3d:83:69:0e:
                    68:3a:2b:2b:be:fe:0b:5d:88:b7:e1:d4:ee:5c:a2:
                    82:06:4b:3e:c0:e5:4e:a4:09:e6:36:fd:22:4a:b3:
                    14:8f:00:b0:a6:ff:63:e4:5e:00:44:ad:bd:c9:b3:
                    9d:bb:c4:3c:39:e7:b2:bd:85:c6:68:6c:c3:32:b0:
                    0a:72:4b:7d:0e:2b:2a:14:f6:3d:c4:31:37:3c:1b:
                    f5:bf:7b:87:d0:32:e4:7d:b3:55:af:65:35:3c:64:
                    77:62:fb:9f:ec:16:09:43:7c:b6:90:70:d8:9a:db:
                    43:69:78:a7:a8:39:6c:fe:37:01:e5:ce:0a:09:9c:
                    ef:c4:f9:fe:48:54:59:2b:c1:ff:72:ed:c1:52:bd:
                    5b:da:85:ba:92:0c:48:e4:83:b9:26:d1:68:66:de:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:28:E9:BA:D4:F8:5B:4D:95:19:A3:EE:AA:A0:37:5E:DC:7F:04:36
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a383030303a3a2f33342d3334203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b0:7b:50:6a:82:08:f8:66:71:0b:df:3a:24:66:1e:f4:bc:9b:
         fa:f1:3b:72:de:72:58:11:5f:c1:28:15:9b:38:0b:3c:6b:b1:
         24:e0:0f:65:78:aa:a7:3e:9f:a9:05:6d:c3:a1:91:a3:c2:ab:
         f7:2a:c5:1f:c4:1a:e1:44:7d:ae:a0:56:ee:83:b9:a4:f9:5b:
         f8:e4:c2:7d:a6:4b:8f:cd:b2:8f:4f:fe:95:72:55:f8:07:cc:
         6f:0d:4c:b9:95:67:5c:66:6b:f6:14:1c:4d:54:68:72:93:53:
         26:23:3c:c1:ad:45:7a:88:e2:7b:c5:19:d5:3f:1d:5c:6c:f1:
         4f:b8:34:db:9a:0f:38:8c:22:0c:f2:61:37:4a:f3:47:ed:16:
         ef:44:54:da:fb:da:78:3f:e9:f4:02:8b:f5:bb:f7:e5:35:eb:
         00:4b:28:1b:7f:46:d2:5a:1a:a1:bf:3c:58:28:eb:95:68:c7:
         ae:a6:a9:88:48:b1:f5:51:e1:94:09:f3:cc:61:38:c3:99:00:
         41:66:96:66:32:f1:82:56:ca:30:5e:65:e2:29:24:68:e4:22:
         55:4a:a1:a3:3a:55:7a:80:df:67:17:8c:ce:ad:6b:75:ac:c8:
         9a:c5:d4:66:19:94:46:a0:30:d4:79:b8:fd:70:30:ba:22:b2:
         f8:6b:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----