Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33352d3335203d3e20323634383934.roa
File:                     323830343a326637633a633030303a3a2f33352d3335203d3e20323634383934.roa (raw, json)
Hash identifier:          KwGvsJprB7SDUDOgY/YZhgI21U4YrJo74He5UBtGmU4=
Subject key identifier:   AA:D9:7E:58:32:48:6F:F0:69:8F:CC:2C:BB:34:BA:A4:0C:55:7E:26
Certificate issuer:       /CN=5534C39A465F9E5D47762E20F30C75897285DDAF
Certificate serial:       6D39F7C7464344D9CE7D2A002547A6D7FA73D51B
Authority key identifier: 55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33352d3335203d3e20323634383934.roa
Signing time:             Sat 31 Oct 2026 20:15:16 +0000
ROA not before:           Sat 31 Oct 2026 20:10:16 +0000
ROA not after:            Sat 30 Oct 2027 20:15:16 +0000
asID:                     264894
IP address blocks:        2804:2f7c:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl
                          rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 19:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:f7:c7:46:43:44:d9:ce:7d:2a:00:25:47:a6:d7:fa:73:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534C39A465F9E5D47762E20F30C75897285DDAF
        Validity
            Not Before: Oct 31 20:10:16 2026 GMT
            Not After : Oct 30 20:15:16 2027 GMT
        Subject: CN=AAD97E5832486FF0698FCC2CBB34BAA40C557E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:90:ab:c6:5b:78:71:70:a2:86:63:78:55:
                    32:09:5e:11:f2:ce:f3:a3:ec:c9:d0:a0:ee:f6:f3:
                    03:96:2f:f8:e7:e3:57:70:59:14:b2:93:b7:e7:31:
                    f9:9f:3a:b3:54:ad:22:a8:b1:50:92:00:95:eb:59:
                    72:cb:46:a8:b7:5d:4e:14:9a:48:4f:0b:2f:73:31:
                    b8:8a:9e:f7:31:34:ee:c8:8b:f3:9f:e9:11:36:97:
                    37:38:8b:a8:4a:a1:de:c8:42:b1:fb:00:db:3c:58:
                    56:91:5b:b2:43:1f:cf:b0:f8:45:b0:c1:06:25:30:
                    92:7a:68:b9:40:bd:a4:03:c4:96:e0:36:20:72:62:
                    ce:1d:ac:d4:8c:c0:8d:1b:e4:4a:9e:69:91:51:14:
                    ac:bd:d9:e6:ea:63:0e:65:5f:88:23:0f:8b:14:de:
                    a8:7b:ca:12:dd:47:ad:8e:64:56:c7:a3:8e:ad:af:
                    1a:bc:3d:34:25:df:43:ae:81:1d:26:8e:c1:aa:07:
                    08:f2:83:94:51:1b:46:3e:78:9c:91:f4:de:94:c9:
                    4d:a2:32:9d:62:3d:63:59:90:55:e5:55:40:bf:7a:
                    ff:79:a3:22:62:44:51:21:39:3d:83:f5:17:95:05:
                    99:c8:32:6b:11:db:11:19:37:86:80:cc:2c:e4:a0:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D9:7E:58:32:48:6F:F0:69:8F:CC:2C:BB:34:BA:A4:0C:55:7E:26
            X509v3 Authority Key Identifier:
                keyid:55:34:C3:9A:46:5F:9E:5D:47:76:2E:20:F3:0C:75:89:72:85:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/5534C39A465F9E5D47762E20F30C75897285DDAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5534C39A465F9E5D47762E20F30C75897285DDAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ZG7fZoNxeaapeGYgiUT3WMb14FDoqRnxwuJzKn7d42H/1/323830343a326637633a633030303a3a2f33352d3335203d3e20323634383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f7c:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:ea:5e:20:7c:12:e7:2f:7c:aa:07:7b:23:f6:72:7b:fd:
         77:13:fb:b9:95:65:fa:b6:40:8c:a1:30:4b:86:14:a8:63:95:
         78:6c:5a:0f:bb:17:f6:b0:81:0b:51:45:91:fa:64:83:d3:87:
         16:2d:8a:4a:38:ce:67:d6:75:42:08:1d:7f:56:67:2a:84:13:
         60:6a:c6:99:0b:f4:26:d7:2f:64:1a:f4:c6:df:5b:66:2c:cc:
         32:d1:eb:37:f9:46:5a:1f:f6:e4:82:77:b2:d6:0f:35:ae:27:
         e8:9d:49:87:03:83:76:b1:a4:26:26:7d:39:57:fc:a4:2f:a8:
         ee:43:08:86:26:4f:a7:b5:a6:4c:e8:7a:3c:47:a2:04:8e:34:
         57:75:56:28:02:47:67:6d:1f:77:b8:43:cf:e6:41:da:13:73:
         89:d5:7f:2e:0e:26:56:08:1e:01:e9:49:05:1e:84:4a:c1:88:
         21:ac:34:36:ab:de:c9:42:60:5a:0b:6a:46:4b:98:8e:af:69:
         0c:29:38:0c:8f:10:4b:52:51:06:d8:13:ad:47:e8:f2:5e:13:
         34:72:13:a0:b5:84:9b:c1:5f:bb:d9:a0:90:f6:30:2a:2b:3e:
         fe:0b:4a:42:54:56:8e:bc:39:2f:c2:2c:e8:ee:71:18:43:79:
         7b:37:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----