Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          caizVw6F0g+hq4Cb2Q+Zd53J04ou1Tx4HSX0rAT+xxU=
Subject key identifier:   35:75:B4:90:65:5E:F0:CD:2C:F6:A2:C5:61:A5:F3:0F:E5:32:EF:FF
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       5E6A5FD182034B3513D9AAB2B4CAFB3ECE2608AB
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Wed 12 Aug 2026 13:04:18 +0000
ROA not before:           Wed 12 Aug 2026 12:59:18 +0000
ROA not after:            Wed 11 Aug 2027 13:04:18 +0000
asID:                     267363
IP address blocks:        2804:4c50::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 18:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6a:5f:d1:82:03:4b:35:13:d9:aa:b2:b4:ca:fb:3e:ce:26:08:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Aug 12 12:59:18 2026 GMT
            Not After : Aug 11 13:04:18 2027 GMT
        Subject: CN=3575B490655EF0CD2CF6A2C561A5F30FE532EFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:0c:07:d5:72:d2:4a:18:37:48:c2:10:59:
                    91:fb:f1:98:ec:db:2d:64:10:f7:15:db:f9:07:53:
                    a3:3f:80:fa:d3:dd:0e:7d:70:54:cb:21:75:81:15:
                    74:76:c6:48:47:a0:f3:54:b9:29:32:86:04:b5:a2:
                    d1:3c:6c:8a:78:0b:e2:7e:20:16:8a:d6:b2:ae:ae:
                    fb:66:b9:e6:59:da:86:2a:d8:1a:36:35:3f:e7:ab:
                    ae:ac:c3:6e:d3:03:fc:50:0e:f4:a4:1d:ad:38:9c:
                    1d:bb:4f:bd:ba:94:48:55:66:67:04:a3:6d:f2:bd:
                    e3:29:95:32:05:c9:0d:d5:e5:b5:64:ad:2e:2f:a0:
                    33:4d:68:17:ed:56:bc:0c:6d:2d:62:ea:e8:55:0b:
                    62:84:8e:73:1a:96:5e:6d:df:31:d8:a7:30:ea:fb:
                    3a:9a:d5:86:d6:ee:c8:02:eb:fc:17:62:61:fb:43:
                    68:31:96:5b:0d:bf:c0:ec:be:8f:b5:f3:3a:19:5a:
                    a1:3d:91:de:e9:42:cb:89:e7:27:4c:cb:1c:c8:91:
                    cb:5e:bf:b5:57:c7:d0:ab:e7:85:e7:2a:73:5a:1d:
                    ca:26:77:ad:09:39:f4:53:de:bd:24:b1:14:16:6e:
                    15:32:ca:70:1c:22:d1:b5:78:ff:a2:8f:82:c3:fe:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:75:B4:90:65:5E:F0:CD:2C:F6:A2:C5:61:A5:F3:0F:E5:32:EF:FF
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:ad:5c:94:64:58:99:2c:a0:55:84:4a:3e:3d:1a:f8:f1:
         ff:bf:f2:14:2b:7e:60:b4:e6:a6:2f:91:c3:07:c4:cc:93:fd:
         7b:a6:7f:6c:b1:47:9f:3f:54:4a:bb:97:8c:e2:33:d9:9b:5f:
         e0:ce:dd:e1:ab:e2:3a:01:d4:62:d0:84:3c:ec:89:4a:a4:da:
         9c:c6:12:2d:86:f4:f6:cc:49:5f:f4:cc:5c:67:c7:12:22:17:
         3c:ef:cc:70:f1:08:ab:45:f1:53:bf:e1:e1:48:49:05:ed:dd:
         7a:d3:a3:67:7f:95:a4:fc:c2:ec:81:d7:53:67:44:59:e1:9b:
         b2:0d:c1:38:ff:a7:9d:7d:21:0a:8a:9b:28:eb:e6:fa:58:11:
         86:73:3c:65:1f:84:75:74:81:7e:29:8f:d5:88:1d:9d:d8:3f:
         34:1c:1a:ea:2b:98:7b:bc:89:09:78:65:ad:75:cd:ae:b8:30:
         1a:f3:6c:38:0f:cf:c9:96:22:45:63:55:d8:b5:80:0c:ee:7c:
         a9:9e:2b:81:3f:dc:1e:46:c8:6a:c4:0a:50:61:2b:82:0a:12:
         ba:2b:bc:f6:50:83:c2:e5:28:75:54:4b:6b:39:eb:2a:f7:ae:
         1f:e5:7c:54:2c:c9:28:90:b5:09:5a:82:eb:9e:3b:ad:d9:82:
         26:5f:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 11:00:28 2026 by rpki-client