Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          vLExnbFw0UpyYozXQzZoM0JXGm8oi4ycOnG5FeozoiQ=
Subject key identifier:   E6:37:0C:39:59:49:1A:3D:B0:A0:0F:15:6D:A8:8F:53:B7:A1:36:EE
Certificate issuer:       /CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
Certificate serial:       1F14DF6AFB940561C225BDBA48FF47C294AE65AA
Authority key identifier: 11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Wed 10 Sep 2025 12:48:52 +0000
ROA not before:           Wed 10 Sep 2025 12:43:52 +0000
ROA not after:            Wed 09 Sep 2026 12:48:52 +0000
asID:                     267363
IP address blocks:        2804:4c50::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:14:df:6a:fb:94:05:61:c2:25:bd:ba:48:ff:47:c2:94:ae:65:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11CB26672482F22783FB29CDA1B13E6C26978D7B
        Validity
            Not Before: Sep 10 12:43:52 2025 GMT
            Not After : Sep  9 12:48:52 2026 GMT
        Subject: CN=E6370C3959491A3DB0A00F156DA88F53B7A136EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:01:6c:ef:11:39:55:d1:d0:7b:34:63:3d:
                    8f:fe:10:89:3a:ff:0b:8d:0e:9e:16:0c:0d:94:26:
                    fb:70:1e:bf:6a:e2:f3:8e:e9:97:c4:2f:05:45:69:
                    5e:58:61:68:ad:90:d1:c7:70:5b:81:25:01:b0:ac:
                    a0:13:e6:5a:c6:13:ab:a4:cf:a2:a0:e6:86:c1:bb:
                    8c:41:92:3f:11:3e:80:d6:3d:d4:c0:1e:c7:cc:58:
                    20:fc:c0:b6:de:81:4c:5c:a9:9f:5a:0b:60:28:b4:
                    d4:dc:3e:ed:f8:8e:59:70:ec:76:fc:62:e8:aa:7d:
                    97:06:bb:81:fd:70:d8:0a:de:05:1d:9b:8d:73:3c:
                    4d:3a:87:48:1a:99:91:44:a1:55:5a:49:c3:04:03:
                    4d:3f:b3:28:2f:e5:12:e0:de:6f:06:5e:d7:bc:68:
                    aa:07:25:c3:67:f9:d4:56:59:a7:56:d8:0e:cd:27:
                    c0:5d:61:ff:f2:67:d0:95:49:a2:c7:44:12:e9:f4:
                    34:b0:01:a9:8f:d8:af:db:df:07:88:29:e7:3b:66:
                    89:ff:66:e2:85:03:ce:c9:27:fb:76:11:c9:5a:a8:
                    70:a6:67:31:39:61:2c:c9:35:d9:49:0a:0d:93:54:
                    af:7a:c3:6b:02:9d:1a:eb:c4:e0:9b:6b:5c:8f:fe:
                    6f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:37:0C:39:59:49:1A:3D:B0:A0:0F:15:6D:A8:8F:53:B7:A1:36:EE
            X509v3 Authority Key Identifier:
                keyid:11:CB:26:67:24:82:F2:27:83:FB:29:CD:A1:B1:3E:6C:26:97:8D:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/11CB26672482F22783FB29CDA1B13E6C26978D7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CB26672482F22783FB29CDA1B13E6C26978D7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:e1:8d:48:5c:ee:0d:7c:09:18:3b:7d:92:d7:e5:e6:6a:
         ed:05:84:d5:ce:80:10:f5:13:70:6f:c3:13:bd:26:45:30:6f:
         66:7c:68:40:4b:e4:39:d0:25:d5:cc:e3:09:1e:f1:82:be:8a:
         ad:3f:7e:85:cf:d5:8f:fb:a7:3c:77:f9:cc:80:fe:50:b5:19:
         08:79:0c:13:c7:46:46:00:f6:9f:2f:43:93:e1:4e:20:17:ea:
         3f:db:96:7f:f8:90:3a:af:3f:8b:a3:1c:74:6d:12:fc:a8:9c:
         ca:8a:49:93:c1:d4:b0:2e:31:29:e7:db:41:a8:2c:90:ff:ed:
         c6:d3:47:c9:71:20:1a:4c:3b:ba:55:c3:e4:91:76:0b:87:15:
         c3:2b:33:87:8e:c8:22:1b:6b:9e:33:e5:1d:65:88:3e:ad:69:
         c2:50:d6:e4:ae:12:40:44:45:b4:ef:18:e1:89:93:15:8d:b3:
         c5:0a:7b:09:52:35:a4:e4:22:be:71:e0:67:ea:97:ec:cb:36:
         84:62:52:f1:25:2e:81:a2:2b:83:01:c1:94:c8:1a:39:8e:8d:
         2a:78:d5:fa:ee:64:6c:57:58:68:aa:58:c8:db:ea:21:5a:10:
         f4:63:6e:94:df:17:9e:b6:6e:03:96:fa:a5:73:5b:2a:69:fc:
         47:9b:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:50:44 2025 by rpki-client