Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a633030303a3a2f33342d3334203d3e20323639343039.roa
File:                     323830343a363432343a633030303a3a2f33342d3334203d3e20323639343039.roa (raw, json)
Hash identifier:          O59wtkuy6u0ZVeQCC00YngWbDFRQUpm6R6K0XynqQh8=
Subject key identifier:   CB:FB:72:AC:B8:0B:E5:E6:2E:E7:0B:F0:98:4C:4B:F7:24:C0:4F:E2
Certificate issuer:       /CN=FF962D3BC2259181BF6817D40CC381E0150C9740
Certificate serial:       13ABA19B9BEFC0600D34024119BDFFAF597F62D1
Authority key identifier: FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a633030303a3a2f33342d3334203d3e20323639343039.roa
Signing time:             Fri 31 Jul 2026 15:35:17 +0000
ROA not before:           Fri 31 Jul 2026 15:30:17 +0000
ROA not after:            Fri 30 Jul 2027 15:35:17 +0000
asID:                     269409
IP address blocks:        2804:6424:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl
                          rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:a1:9b:9b:ef:c0:60:0d:34:02:41:19:bd:ff:af:59:7f:62:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF962D3BC2259181BF6817D40CC381E0150C9740
        Validity
            Not Before: Jul 31 15:30:17 2026 GMT
            Not After : Jul 30 15:35:17 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:1e:8c:39:da:a4:82:08:bd:1b:70:cf:71:
                    17:f5:b8:80:b4:e1:96:b9:27:c5:9a:77:f3:45:ec:
                    e9:ce:b4:99:c7:2a:38:9b:21:ee:17:6c:cb:d0:5d:
                    48:04:dc:4b:c8:30:28:01:f1:69:32:41:f2:7a:8c:
                    ea:0a:d9:b5:a8:87:42:31:09:67:61:8b:ad:db:68:
                    3b:36:27:a2:a4:4d:e4:5e:ef:cf:62:5b:fe:87:71:
                    8f:e9:62:38:f0:58:20:85:59:bb:16:b1:82:4d:35:
                    c2:2a:eb:09:54:6a:99:75:85:2b:10:fa:a5:74:3a:
                    01:e5:fd:bc:21:4a:b6:49:4f:cb:7c:07:63:3c:13:
                    74:6f:26:f8:4f:87:fd:6a:33:21:0d:66:29:1f:00:
                    e5:e3:a7:02:ca:9b:18:13:31:62:06:4e:37:b8:30:
                    9b:27:36:fb:5b:ae:d9:c8:35:ed:0b:6a:5c:60:12:
                    1a:15:aa:2e:2d:f4:2f:b9:90:ea:4b:39:2f:38:4c:
                    c9:87:36:84:e9:c0:45:dd:0d:f8:6b:85:af:73:6a:
                    5f:4d:1b:4c:f8:3b:70:8e:8e:09:72:84:80:92:e8:
                    d2:08:a3:ee:99:fe:8c:e2:3c:a7:95:af:bb:4a:60:
                    3e:6d:38:68:22:a2:54:1c:13:05:a4:b5:bd:26:eb:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:72:AC:B8:0B:E5:E6:2E:E7:0B:F0:98:4C:4B:F7:24:C0:4F:E2
            X509v3 Authority Key Identifier:
                keyid:FF:96:2D:3B:C2:25:91:81:BF:68:17:D4:0C:C3:81:E0:15:0C:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/FF962D3BC2259181BF6817D40CC381E0150C9740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF962D3BC2259181BF6817D40CC381E0150C9740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u3J3Q9dMyJYoqVHWBkkTcXqpnMGdFKh7TZGQpMt8ScH/0/323830343a363432343a633030303a3a2f33342d3334203d3e20323639343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6424:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:f7:34:00:04:57:8e:25:60:e8:84:81:e8:99:42:f9:b2:9c:
         ec:d8:ca:3d:27:d5:28:90:45:2a:c3:06:b6:24:04:bd:c5:07:
         2d:60:fa:af:c0:af:1a:43:4f:e8:98:0d:32:50:b5:0c:57:a0:
         70:82:ba:0a:5b:16:51:94:f2:ac:9d:a7:dc:1f:5c:2d:b9:0e:
         4d:e3:26:e7:6f:47:b8:90:aa:90:0a:98:63:f6:5d:e1:ea:97:
         d6:42:1f:ba:18:21:1e:f3:87:d1:a7:e8:ab:ae:67:3f:a2:ad:
         2a:40:6e:cf:09:4b:58:b2:b1:6a:c0:2b:47:b0:b4:93:cf:39:
         a9:ed:21:a3:8c:bb:14:72:23:24:7e:75:2e:4f:88:36:33:c5:
         47:e9:b6:bb:9c:8a:81:13:06:c8:ba:ce:a3:15:44:42:2e:58:
         a7:58:e2:51:0e:86:02:00:b4:ab:5a:b0:23:ff:c2:e2:f2:30:
         e3:b4:3d:e9:da:53:5a:e1:1f:09:8c:31:ea:62:bc:5f:a5:f3:
         3d:32:35:1f:4e:f9:bc:dd:2e:ff:35:bc:fe:8f:9b:41:dc:47:
         9f:57:a6:8c:b8:dd:1f:4f:88:1b:95:bb:e2:af:cd:c5:3c:a9:
         35:cd:c0:22:b7:4d:01:c8:66:c3:b5:0e:87:ec:a6:f3:df:21:
         45:8f:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----