Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e203631383332.roa
File:                     323830343a363630343a3a2f33332d3333203d3e203631383332.roa (raw, json)
Hash identifier:          5a7jn59p/xHDNgul6Yi33ch0Q2TfCYxD1H0+EKoMoDw=
Subject key identifier:   B4:FB:39:FC:44:B8:03:E8:4D:2F:16:95:CC:FF:8C:61:84:D7:E4:FA
Certificate issuer:       /CN=0536254B395E744767A170B2A9041042916EF407
Certificate serial:       38C5D38C996BCE198357E7E0F6799982AC427416
Authority key identifier: 05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e203631383332.roa
Signing time:             Fri 14 Aug 2026 21:46:51 +0000
ROA not before:           Fri 14 Aug 2026 21:41:51 +0000
ROA not after:            Fri 13 Aug 2027 21:46:51 +0000
asID:                     61832
IP address blocks:        2804:6604::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl
                          rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c5:d3:8c:99:6b:ce:19:83:57:e7:e0:f6:79:99:82:ac:42:74:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0536254B395E744767A170B2A9041042916EF407
        Validity
            Not Before: Aug 14 21:41:51 2026 GMT
            Not After : Aug 13 21:46:51 2027 GMT
        Subject: CN=B4FB39FC44B803E84D2F1695CCFF8C6184D7E4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:06:6d:d6:55:80:b3:b6:91:5f:10:62:e7:
                    49:0f:2c:7a:5f:ee:4e:c3:67:dc:49:25:66:bf:28:
                    ba:8a:38:35:7a:75:11:5b:f6:ed:9e:b5:5c:e4:2b:
                    8a:bf:90:ad:72:80:83:87:04:01:b1:41:c8:d4:06:
                    44:06:ab:84:7b:66:06:20:cd:72:a9:43:57:a9:c4:
                    3c:39:63:42:0c:98:c9:d9:27:30:9e:10:87:85:4f:
                    75:86:62:15:71:13:34:ff:7e:03:82:d0:ca:83:b0:
                    c9:40:0d:44:e0:9a:7a:9f:64:fa:c0:2f:95:9b:48:
                    33:3b:2e:f5:e3:e0:cc:61:99:2e:4a:33:dc:32:1b:
                    78:46:9e:ce:42:78:70:f9:35:93:9f:6d:e6:15:84:
                    bd:71:04:17:34:e9:d4:e9:32:a6:13:fc:0f:25:b2:
                    b8:b8:8f:8f:fe:24:6f:27:84:c2:10:cf:5a:ff:36:
                    ee:85:24:a7:5f:98:d7:4f:db:ff:d5:88:f1:18:2b:
                    a5:e1:66:e4:19:a5:c9:1f:d2:a3:6b:17:56:cf:56:
                    2c:dc:00:c5:f6:19:c1:ce:7d:88:cc:7f:26:79:26:
                    41:0e:9b:37:8c:1e:f7:1c:c4:19:c1:7f:b2:e3:12:
                    f6:17:11:34:93:21:28:92:1e:04:85:16:ce:5a:99:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:39:FC:44:B8:03:E8:4D:2F:16:95:CC:FF:8C:61:84:D7:E4:FA
            X509v3 Authority Key Identifier:
                keyid:05:36:25:4B:39:5E:74:47:67:A1:70:B2:A9:04:10:42:91:6E:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/0536254B395E744767A170B2A9041042916EF407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0536254B395E744767A170B2A9041042916EF407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/323830343a363630343a3a2f33332d3333203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6604::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:76:7b:db:79:c0:d5:86:5d:1e:ca:25:67:a7:33:64:3b:18:
         4b:8c:bf:9e:0b:6b:95:88:64:3a:d8:44:73:2d:2d:d7:a4:e0:
         a4:36:28:4e:53:55:8a:16:73:e2:3c:0e:d0:77:37:d2:67:b5:
         12:00:be:85:8a:19:49:b5:25:27:38:9c:d9:d3:eb:c9:17:6a:
         7f:36:b0:75:d0:b8:8e:f7:df:6c:f3:59:b9:00:06:d7:e7:95:
         8e:20:00:9f:53:c1:9c:3f:f1:10:69:75:52:4c:a0:1e:d2:19:
         ba:35:9e:b9:48:26:a4:0f:79:18:56:78:7d:af:7f:33:1b:7d:
         ee:89:8a:16:81:1d:0b:32:9b:3d:44:3a:17:b9:54:1d:e0:19:
         1a:00:32:cb:99:00:cb:9f:99:dd:5b:95:02:63:08:16:6d:5e:
         0d:35:d7:58:4f:85:02:e5:8c:ec:a6:17:ae:a0:94:37:09:9c:
         f1:00:e2:0d:a0:a8:53:18:16:3f:8c:44:58:79:a0:19:6e:fd:
         d8:7f:6c:0a:61:c8:c9:67:e8:5b:00:2e:dd:0b:98:43:da:2f:
         41:d2:7f:40:7e:b8:cd:94:ba:0e:ca:8a:b9:ce:2f:3d:96:6a:
         39:4b:a3:f3:dc:a7:d0:36:6d:dc:63:3a:8d:52:67:a8:46:c4:
         c1:3d:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:20:15 2026 by rpki-client