Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa
File:                     323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa (raw, json)
Hash identifier:          f0qN3nzZp4Kq0WjBX8Kpo//fCfARoTh5dvhAJtpimqk=
Subject key identifier:   CE:2D:5D:9D:10:A0:9E:09:F2:CC:BA:9E:47:36:15:78:6F:4D:AB:8C
Certificate issuer:       /CN=434F36A7682F1C0B36BEEDA7D466801534075702
Certificate serial:       6BF1E5C672C3B18DA6EE0AFE61F5AF9E5017660A
Authority key identifier: 43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa
Signing time:             Tue 27 Oct 2026 13:11:04 +0000
ROA not before:           Tue 27 Oct 2026 13:06:04 +0000
ROA not after:            Tue 26 Oct 2027 13:11:04 +0000
asID:                     268674
IP address blocks:        2804:54dc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl
                          rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:e5:c6:72:c3:b1:8d:a6:ee:0a:fe:61:f5:af:9e:50:17:66:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=434F36A7682F1C0B36BEEDA7D466801534075702
        Validity
            Not Before: Oct 27 13:06:04 2026 GMT
            Not After : Oct 26 13:11:04 2027 GMT
        Subject: CN=CE2D5D9D10A09E09F2CCBA9E473615786F4DAB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:11:da:b6:85:64:23:7e:fb:39:ec:2e:2b:
                    bf:09:f3:03:98:46:90:a5:01:92:9b:1d:44:c7:91:
                    92:19:df:3f:e4:c3:99:26:64:e5:18:ee:02:08:8c:
                    2a:29:a4:7f:55:9b:49:0e:0c:52:7a:77:f3:9e:30:
                    0d:44:ea:79:00:e6:7d:93:3e:41:3a:c7:f3:0a:e4:
                    bc:05:b6:ce:ec:f1:b6:56:a0:48:95:3e:15:14:31:
                    6d:f6:4a:b7:a3:e8:91:3f:43:c9:74:d2:e3:0f:59:
                    02:b7:80:a6:fc:8b:da:4a:4a:d4:bf:b9:79:3d:81:
                    d6:4b:97:4f:25:58:5b:63:c3:a4:8d:c8:c6:ad:0b:
                    4c:7f:e5:ae:0f:ff:0c:4d:52:bb:94:9d:ca:03:e6:
                    64:8f:96:88:96:4b:76:0d:ee:a3:9b:17:39:e0:cd:
                    8b:db:25:01:39:ba:ed:e3:aa:39:c8:07:fa:93:80:
                    f9:c8:99:ac:b9:47:56:64:16:9b:8b:54:0e:e2:53:
                    be:71:72:fa:14:f7:d2:eb:2c:06:ce:00:57:02:5a:
                    74:34:bc:c7:fd:87:3d:77:74:95:c6:9c:e1:56:12:
                    bb:55:15:08:b2:e6:ab:85:97:ac:90:94:09:b6:65:
                    3e:5e:d4:8b:04:ee:a1:91:08:d3:d6:92:49:6d:60:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:5D:9D:10:A0:9E:09:F2:CC:BA:9E:47:36:15:78:6F:4D:AB:8C
            X509v3 Authority Key Identifier:
                keyid:43:4F:36:A7:68:2F:1C:0B:36:BE:ED:A7:D4:66:80:15:34:07:57:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/434F36A7682F1C0B36BEEDA7D466801534075702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/434F36A7682F1C0B36BEEDA7D466801534075702.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/2/323830343a353464633a383030303a3a2f33332d3333203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54dc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:36:c1:37:67:c3:e4:9a:1b:e9:79:ec:52:70:f8:b7:7d:19:
         00:82:48:eb:44:87:64:6b:8c:c9:5d:04:a9:11:ea:97:bd:71:
         b5:c6:36:b1:af:33:a4:79:f0:57:50:77:37:b6:25:2c:6f:d1:
         cf:6e:05:36:35:a2:15:8e:1e:31:34:80:6f:a1:ee:0e:ea:f8:
         c9:a1:51:3b:1a:b5:32:1f:89:d2:5a:8b:79:81:66:ac:fc:94:
         af:9f:10:9b:69:23:fb:c2:64:5f:d1:a2:46:a1:e7:31:32:2c:
         b0:9c:09:16:a7:5d:70:52:91:de:3e:4c:a5:e7:61:16:73:d9:
         07:8b:b5:2b:e7:3c:42:0c:98:52:5f:93:42:14:2d:8b:c4:36:
         6b:a0:97:8f:db:a7:d8:5a:aa:d5:83:76:ec:91:c1:0a:38:13:
         34:e2:f7:72:63:bf:b9:f6:ad:be:f2:0b:1b:48:46:28:96:92:
         26:0e:ba:dc:8e:ad:b6:b8:28:cf:a1:7b:99:53:e1:6c:d6:45:
         da:d3:56:32:4a:02:48:58:d1:8b:60:e3:ff:10:1a:38:d2:aa:
         d3:72:51:2b:b4:09:d3:3f:b3:ab:48:b1:f6:0d:e4:fe:0a:da:
         b3:e8:56:e9:c1:ba:85:9a:7b:f2:1c:ea:31:76:65:63:c9:82:
         63:c1:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----