Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a3a2f33322d3332203d3e20323730393531.roa
File:                     323830343a373430303a3a2f33322d3332203d3e20323730393531.roa (raw, json)
Hash identifier:          MU/g0iYs8v97qONZN93Vf9rCk7i6Ag3ykYr+1F81hjo=
Subject key identifier:   E2:78:0D:66:BF:A8:09:DD:FC:3E:AF:9D:D4:E0:6E:E6:3D:1B:33:99
Certificate issuer:       /CN=DD71EF1E83BC35962B8EBE8DD0A41217DB632313
Certificate serial:       6C3680CCC8C55DBA6950AE2274511DE6C6368415
Authority key identifier: DD:71:EF:1E:83:BC:35:96:2B:8E:BE:8D:D0:A4:12:17:DB:63:23:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a3a2f33322d3332203d3e20323730393531.roa
Signing time:             Mon 10 Aug 2026 14:27:01 +0000
ROA not before:           Mon 10 Aug 2026 14:22:01 +0000
ROA not after:            Mon 09 Aug 2027 14:27:01 +0000
asID:                     270951
IP address blocks:        2804:7400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:36:80:cc:c8:c5:5d:ba:69:50:ae:22:74:51:1d:e6:c6:36:84:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD71EF1E83BC35962B8EBE8DD0A41217DB632313
        Validity
            Not Before: Aug 10 14:22:01 2026 GMT
            Not After : Aug  9 14:27:01 2027 GMT
        Subject: CN=E2780D66BFA809DDFC3EAF9DD4E06EE63D1B3399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:cc:90:ae:68:b4:bf:3d:0f:15:99:57:7d:
                    bb:1e:f4:e4:2f:44:07:ca:65:08:8c:fe:c8:97:64:
                    b7:26:00:c5:74:b0:a2:a5:81:bd:fd:24:0a:50:4e:
                    ec:3f:d0:90:86:00:e8:20:b9:54:0b:f7:4d:49:46:
                    60:83:a6:1c:ec:90:c9:c7:0b:23:a1:6f:22:c7:23:
                    92:12:6b:0f:e5:ad:68:09:83:bc:b3:29:e0:06:d5:
                    69:03:df:eb:5d:e6:35:60:39:46:75:a9:35:bd:bf:
                    7e:a0:c2:55:07:09:a1:23:1f:5d:ef:5c:bb:d8:34:
                    03:21:a1:85:86:78:58:c9:5e:82:b1:72:03:86:07:
                    cc:41:03:37:c9:73:59:b3:37:b6:28:cb:b5:d1:a8:
                    a1:81:e4:96:1d:d3:c1:43:06:b3:67:46:76:ee:ad:
                    26:43:17:f6:5e:88:68:b7:b1:0a:34:70:d5:f2:e4:
                    1a:15:97:c0:ac:21:aa:4a:c1:9e:4a:58:b4:85:f5:
                    d0:0b:f5:12:66:3e:77:b7:4e:1a:5f:31:ff:a5:b5:
                    e9:63:6a:a2:a9:11:72:c5:ad:a1:49:7f:c2:81:c3:
                    51:71:8f:a3:74:7d:ad:52:85:93:f9:90:02:e3:6d:
                    46:f2:45:85:57:cf:b4:48:ed:58:38:d4:48:36:9f:
                    73:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:78:0D:66:BF:A8:09:DD:FC:3E:AF:9D:D4:E0:6E:E6:3D:1B:33:99
            X509v3 Authority Key Identifier:
                keyid:DD:71:EF:1E:83:BC:35:96:2B:8E:BE:8D:D0:A4:12:17:DB:63:23:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD71EF1E83BC35962B8EBE8DD0A41217DB632313.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a3a2f33322d3332203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7400::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:4b:3b:a8:db:91:89:ed:da:0b:2f:97:3e:07:69:15:9f:
         ef:e1:58:b5:bf:47:26:e3:2b:33:69:2f:db:3a:24:8f:91:13:
         14:be:14:42:71:4d:fe:34:2c:f4:dc:84:6c:22:2a:cb:5f:29:
         47:1d:66:24:8c:6b:63:f8:b1:d3:f4:e4:22:7a:9e:db:af:d1:
         2e:d6:50:09:bc:d1:18:4d:c7:8a:ad:ef:16:9f:3b:01:09:b8:
         15:40:64:9e:73:68:14:eb:7e:6f:a5:aa:8d:cb:41:b2:ea:8e:
         05:89:1a:96:f2:4b:3f:33:f1:06:b1:76:44:ae:ee:3f:05:3f:
         bc:f7:76:a6:5d:20:5e:a3:3b:aa:71:64:35:f5:dc:ae:4a:f6:
         05:46:1b:cc:89:e0:78:b2:2c:a4:06:27:74:db:6d:6c:68:8d:
         6e:50:46:1a:c4:7e:86:d2:17:c2:4e:16:be:e3:65:d8:e1:07:
         33:87:99:16:57:b7:a4:fe:7b:2e:65:4e:c4:8f:8a:40:ac:37:
         06:ee:2a:57:bb:7d:68:ef:a8:7b:63:88:68:e5:97:76:1d:b2:
         0c:6d:f1:a5:a6:5c:c9:a8:39:b4:08:53:23:d0:60:3a:cc:4b:
         30:d5:bd:e9:c0:0b:9d:94:f2:b0:6d:03:db:e5:c5:2f:de:94:
         85:07:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:00:42 2026 by rpki-client