Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa
File:                     323830343a343834343a3a2f33322d3438203d3e20323637313038.roa (raw, json)
Hash identifier:          32gNTbH8APrzcoxKb74eCwk/1epmBcqWspt+n6yV0HQ=
Subject key identifier:   24:D6:76:7F:68:94:A7:B0:CF:03:DB:18:5B:D2:B5:61:FC:36:A6:7B
Certificate issuer:       /CN=15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078
Certificate serial:       30F2D936542633CFEBFBB8BC6FFF4FD6E4DB58D6
Authority key identifier: 15:F9:B3:FE:DF:A0:38:63:C8:A6:C2:27:A0:B0:18:FC:4F:3B:40:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa
Signing time:             Sun 26 Jul 2026 07:20:01 +0000
ROA not before:           Sun 26 Jul 2026 07:15:01 +0000
ROA not after:            Sun 25 Jul 2027 07:20:01 +0000
asID:                     267108
IP address blocks:        2804:4844::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.crl
                          rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 17:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:d9:36:54:26:33:cf:eb:fb:b8:bc:6f:ff:4f:d6:e4:db:58:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078
        Validity
            Not Before: Jul 26 07:15:01 2026 GMT
            Not After : Jul 25 07:20:01 2027 GMT
        Subject: CN=24D6767F6894A7B0CF03DB185BD2B561FC36A67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:00:45:3b:c7:b9:a7:88:bf:92:d2:be:16:
                    99:f8:ac:ce:75:52:15:f5:ba:b5:47:c6:e5:8f:06:
                    cf:bb:89:52:53:3a:d8:d2:85:81:bd:5b:28:72:85:
                    7a:50:06:9d:b0:4b:d2:25:77:5b:e2:11:8d:df:77:
                    b5:97:0d:14:68:48:d8:a8:56:58:d6:24:e1:06:50:
                    3b:38:6a:0c:a7:c8:55:eb:4c:d5:8e:4e:fe:04:40:
                    d9:37:45:15:7a:e9:89:8e:0b:02:cd:ab:50:2a:dd:
                    57:c0:10:2e:be:bf:3a:91:26:85:ed:2e:00:50:6c:
                    ec:ce:a9:56:a3:8c:08:6c:9f:c1:89:b3:29:d3:be:
                    0d:b0:ab:7c:d1:4d:5b:68:ac:c4:d4:63:bd:6c:13:
                    fd:86:f0:73:a7:83:bf:5f:9d:13:06:f0:2f:26:81:
                    1b:96:48:11:9a:3d:d1:a9:ac:75:1f:87:b9:67:c2:
                    5c:45:a2:44:69:b6:bd:f7:fa:b6:91:7f:39:9b:95:
                    f1:88:fd:e4:33:c6:a3:1e:da:ba:1d:d8:83:22:4c:
                    bd:11:b0:4f:e1:9d:c8:49:15:81:7a:34:99:d5:55:
                    0b:6e:2f:00:3c:fc:e4:a1:96:95:c6:bf:87:1a:67:
                    d6:63:7f:73:f2:65:16:36:c9:32:d3:c6:61:eb:e2:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:76:7F:68:94:A7:B0:CF:03:DB:18:5B:D2:B5:61:FC:36:A6:7B
            X509v3 Authority Key Identifier:
                keyid:15:F9:B3:FE:DF:A0:38:63:C8:A6:C2:27:A0:B0:18:FC:4F:3B:40:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F9B3FEDFA03863C8A6C227A0B018FC4F3B4078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pfLY7bt5RghXtMQQqXZLaUdjFrqWbYLv3gJDU2Bg3kM/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4844::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:79:b8:3e:85:e9:93:c3:b4:80:cc:cb:06:e9:64:d9:d2:ed:
         9e:2f:c3:f1:27:85:6e:8a:0a:52:a3:f4:38:13:96:16:d6:64:
         43:68:b3:1c:4f:42:7c:40:91:14:b8:35:ab:52:cd:2f:fc:0f:
         2a:b2:0c:1f:13:33:10:4c:67:94:14:9e:53:c8:45:e5:cd:5a:
         20:8c:91:2e:a5:33:78:5a:fc:cd:3f:8e:dc:d1:92:24:29:c5:
         84:27:0b:ec:35:e2:d1:ca:a2:29:a9:a9:fd:57:c0:84:df:72:
         e1:88:8c:3d:19:9b:c6:d6:03:2e:f8:d4:17:15:b4:af:88:31:
         9f:74:d2:11:5b:9d:b4:64:30:d7:f5:06:71:43:dd:41:51:f9:
         5a:17:08:c5:9e:d4:ee:b3:c1:2e:f2:ce:3e:64:5f:14:83:e2:
         70:b2:e6:58:16:fa:25:7f:c7:1d:27:00:67:a5:a3:ac:a7:77:
         0f:4a:4b:c8:17:b7:c3:c5:87:c3:1e:dd:17:b1:f3:f6:ae:f4:
         1b:54:42:3b:e1:00:0c:9e:55:23:33:1e:ad:74:0b:af:02:ba:
         6a:04:46:1b:3a:4f:77:6a:03:19:c0:e2:e8:f1:90:99:59:8c:
         37:9f:42:a8:56:5f:9c:e1:10:3c:af:e4:9b:16:49:24:b7:9d:
         8a:eb:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:48 2026 by rpki-client