Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33342d3334203d3e20323634383934.roa
File:                     323830343a326637633a633030303a3a2f33342d3334203d3e20323634383934.roa (raw, json)
Hash identifier:          L9zP1oXAYMmtSLKy4Oo+gisYERFnYYhbV9VKz1EXHOI=
Subject key identifier:   C6:3A:66:A6:31:D6:82:32:FE:9E:85:D8:15:D3:95:5D:19:92:7A:D9
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       526DBFE4EDDC1CF51A6C89395879D1436FE8D3BE
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33342d3334203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:14:57 +0000
ROA not before:           Sat 31 Oct 2026 20:09:57 +0000
ROA not after:            Sat 30 Oct 2027 20:14:57 +0000
asID:                     264894
IP address blocks:        2804:2f7c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6d:bf:e4:ed:dc:1c:f5:1a:6c:89:39:58:79:d1:43:6f:e8:d3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:09:57 2026 GMT
            Not After : Oct 30 20:14:57 2027 GMT
        Subject: CN=C63A66A631D68232FE9E85D815D3955D19927AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:30:a3:e1:96:3a:12:51:27:e5:ea:bf:13:
                    dd:76:33:0b:f0:ac:dc:f6:d8:15:26:9b:f1:77:a2:
                    cd:fb:2e:2b:97:29:53:0d:6f:86:15:7e:bf:ed:2e:
                    51:e6:29:dd:51:24:de:aa:bd:9e:1d:f2:e5:97:6d:
                    3d:95:40:2d:5f:da:74:e3:5f:0a:56:1a:8e:7b:d2:
                    22:9a:cc:66:a5:a2:95:49:49:e3:18:a1:60:e0:a9:
                    29:62:01:f8:34:71:ef:fe:61:65:9b:eb:da:52:7a:
                    a5:08:fb:a7:d4:1a:e7:bd:40:eb:08:48:83:78:6b:
                    37:48:27:33:9f:9e:10:f9:c4:c1:60:39:b6:3d:5f:
                    72:2f:0d:6f:7c:8c:7c:3e:64:e8:22:55:a4:97:26:
                    d4:d0:8a:3b:0e:0a:da:76:09:a8:c2:e8:59:24:3c:
                    05:00:f1:b7:01:1b:bf:09:42:2e:37:88:5b:25:2d:
                    9c:8d:05:ab:d9:93:8e:f2:82:47:16:20:4e:77:6f:
                    f6:7a:c7:3b:59:59:2f:bf:3d:18:4e:75:d4:91:9f:
                    f0:0d:54:44:20:a4:7d:8b:3b:6b:fd:ac:b1:dc:fe:
                    f6:a2:88:3a:ee:04:63:8c:29:a5:bc:9a:29:a9:59:
                    55:d9:60:32:76:6a:64:38:40:9a:e7:27:48:eb:e8:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3A:66:A6:31:D6:82:32:FE:9E:85:D8:15:D3:95:5D:19:92:7A:D9
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33342d3334203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:58:ed:61:5f:cc:9b:1d:a4:53:67:71:70:d6:d9:eb:aa:
         f1:b8:ae:50:fa:15:a9:b9:ed:0e:b3:07:11:05:f7:0c:08:44:
         e7:b2:65:a2:09:55:aa:94:ae:9d:cd:c0:47:d0:19:8b:76:75:
         b1:2f:32:72:dd:01:74:bf:b9:3a:3c:aa:a0:1b:6f:49:c5:23:
         fb:74:d2:8a:3e:1e:68:37:8c:30:7f:8a:07:8e:6c:41:7c:8c:
         c0:f6:fc:fe:31:92:1c:31:2c:ec:ab:0e:85:ba:7e:1e:08:f4:
         dc:7e:ba:0f:40:dc:c3:fb:e5:3b:7d:f0:f1:6d:b7:6a:22:b2:
         84:e1:ea:57:f8:69:2f:85:b0:04:a2:78:55:d9:0b:bc:05:4c:
         72:20:1e:73:6f:44:2f:91:9f:33:cc:52:e8:65:7c:67:5e:18:
         d5:82:73:82:84:b9:58:03:f2:6e:37:93:cc:be:43:d2:d0:3a:
         3c:f2:49:eb:6d:38:c9:9f:0a:bc:3d:e7:2f:90:44:07:9d:b3:
         8f:78:57:56:20:98:54:b9:96:ce:e9:47:7d:91:6a:24:95:9d:
         66:a7:56:34:5d:6f:a7:b6:72:b8:5d:5e:c4:ae:ac:fe:99:ab:
         fa:13:97:1a:54:e8:30:0e:ac:45:ef:e7:88:c1:ab:30:3e:d1:
         b6:dc:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----