Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          v7Dkz3oJSvnCu6Au8OWtjdY5vqgjwoy2kp+e0Kgo4yw=
Subject key identifier:   37:5E:AC:88:34:0E:AF:E1:AA:F7:B6:FE:99:95:AF:90:E7:F4:BD:61
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       26DAF71ABD522DE9E83C9A5564BC416940305D4D
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Wed 10 Sep 2025 12:48:50 +0000
ROA not before:           Wed 10 Sep 2025 12:43:50 +0000
ROA not after:            Wed 09 Sep 2026 12:48:50 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:da:f7:1a:bd:52:2d:e9:e8:3c:9a:55:64:bc:41:69:40:30:5d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Sep 10 12:43:50 2025 GMT
            Not After : Sep  9 12:48:50 2026 GMT
        Subject: CN=375EAC88340EAFE1AAF7B6FE9995AF90E7F4BD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:f3:ee:b2:5a:55:a8:9a:f2:83:0d:d6:a1:
                    80:f4:55:28:45:cc:e7:b4:d7:09:a6:14:9e:be:c8:
                    a0:0b:60:19:6a:9e:05:2e:3a:a8:4d:d5:b4:fa:f0:
                    db:54:53:1e:ba:9d:ee:04:58:f3:69:61:59:c7:b4:
                    9d:de:6a:50:b1:90:d8:13:04:22:ae:8c:e0:d8:7e:
                    b4:b6:c8:82:ba:f9:4b:7c:3c:35:43:4d:b9:dc:db:
                    fb:6b:28:f3:70:0d:38:67:52:f3:8f:25:32:f4:8a:
                    c3:02:61:24:64:50:2a:af:97:78:89:d9:31:50:25:
                    2d:7e:e4:03:57:5c:c4:bf:46:fb:c8:bd:e3:3b:17:
                    b2:bf:81:fa:11:99:ee:4c:98:40:b2:a7:82:91:0e:
                    83:75:f4:af:a6:96:c3:f8:d4:6c:61:d5:86:ed:d2:
                    90:64:d9:09:51:66:e7:b4:bc:b0:8d:93:13:fe:4c:
                    6b:3d:13:52:e9:cd:eb:c9:d5:72:66:96:53:7a:d2:
                    88:5e:ee:1a:97:11:d4:3f:bd:50:c9:5f:a1:1c:75:
                    2f:dd:88:c6:06:85:59:40:ab:82:a4:68:25:d9:87:
                    33:e7:5e:c1:7b:df:47:a2:4d:c1:99:ac:7a:e7:cb:
                    91:1f:eb:bb:23:d9:a9:8b:cf:ee:3a:7a:32:95:2e:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5E:AC:88:34:0E:AF:E1:AA:F7:B6:FE:99:95:AF:90:E7:F4:BD:61
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:e2:8a:92:cb:8d:c0:b2:a2:32:f7:50:bb:05:ec:06:64:61:
         5b:00:af:63:e6:e2:86:7c:bd:c5:7a:a6:e7:2d:ab:00:0b:04:
         e8:f5:aa:8c:54:8e:23:c0:26:b1:ff:04:15:6b:14:2d:6e:e8:
         5a:fd:51:aa:bb:d2:d0:f2:70:9c:bb:5a:b5:74:15:e9:ed:c4:
         ed:0a:9f:56:69:8f:c5:12:0f:b9:98:3f:a8:6b:ee:df:9b:b4:
         aa:41:47:28:31:be:63:99:0a:68:1f:66:7e:66:3a:27:22:a4:
         a0:c3:07:02:66:c1:ee:90:27:4f:46:f8:db:66:ef:65:d5:6a:
         b3:44:bf:5a:c0:b5:bd:b6:df:9c:f1:ab:27:d9:9d:63:56:3e:
         c6:e2:c1:1d:ab:95:b2:03:5e:3f:d2:43:22:45:c3:7e:a4:8a:
         a9:ea:4a:eb:7a:ae:f3:d4:c5:b5:8c:e0:89:28:ea:56:7d:7a:
         31:07:0c:2a:9d:1d:1c:89:22:d4:9a:38:eb:03:f6:34:95:aa:
         21:90:b7:4a:48:05:e9:f1:d1:bb:45:9a:b7:23:6b:66:5f:23:
         2f:90:05:2a:19:dc:b8:4f:77:dd:3a:40:0d:ae:57:db:a0:8e:
         a4:50:ad:72:70:b9:07:4b:ce:bf:69:6e:24:6d:b0:17:80:19:
         ca:ad:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:49:24 2025 by rpki-client