Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a343030303a3a2f33342d3334203d3e20323635343234.roa
File:                     323830343a333365383a343030303a3a2f33342d3334203d3e20323635343234.roa (raw, json)
Hash identifier:          IG2kfrDIYnXK9vPzxs2RU23g3qVqpT83d+e+pBxWyOo=
Subject key identifier:   06:60:E0:37:65:4F:0A:50:40:7D:21:C0:A4:8B:72:95:C7:3E:03:5E
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       7DD39E6E851D7B42F2D3D2B6DED9C4E1A04D8BA7
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a343030303a3a2f33342d3334203d3e20323635343234.roa
Signing time:             Thu 20 Aug 2026 19:14:28 +0000
ROA not before:           Thu 20 Aug 2026 19:09:28 +0000
ROA not after:            Thu 19 Aug 2027 19:14:28 +0000
asID:                     265424
IP address blocks:        2804:33e8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 07:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:9e:6e:85:1d:7b:42:f2:d3:d2:b6:de:d9:c4:e1:a0:4d:8b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Aug 20 19:09:28 2026 GMT
            Not After : Aug 19 19:14:28 2027 GMT
        Subject: CN=0660E037654F0A50407D21C0A48B7295C73E035E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:91:d6:91:14:b2:da:09:0f:89:93:43:79:
                    17:fa:53:b1:19:a6:61:d0:f8:84:65:f3:02:c3:26:
                    38:5b:d7:a7:42:75:d1:8f:6b:11:b5:76:a0:5a:c8:
                    53:d6:e0:8f:6e:63:08:f8:5b:41:09:e7:64:96:3d:
                    53:3e:e0:18:fb:3e:48:81:aa:96:61:a6:be:ff:19:
                    da:a6:4d:83:c6:98:ae:64:3e:73:28:f4:4f:b9:32:
                    01:d7:44:63:ce:40:3c:ad:06:16:91:05:ed:88:1a:
                    b6:10:4e:21:e2:64:0d:c8:05:fc:06:86:58:f0:fa:
                    0c:77:a4:ad:e7:b0:e9:71:35:c6:1e:ab:ec:f0:9b:
                    65:4e:69:f9:c8:2b:65:83:50:ee:b7:1c:88:55:e3:
                    f1:9d:67:00:3d:1f:bb:01:e6:66:22:7a:94:6e:cb:
                    e9:cc:fe:b5:92:b9:3a:82:51:d3:21:42:26:98:95:
                    8f:98:4c:60:0f:fd:4f:93:b9:85:ea:83:44:a5:d1:
                    b5:78:5f:64:b6:f9:a6:55:5b:d3:d9:b0:94:c2:db:
                    d2:30:c0:3c:76:22:c8:17:19:33:91:84:47:dd:e1:
                    98:da:9a:57:f8:64:1a:50:d5:f1:cf:45:c1:0e:9b:
                    7d:bc:5c:00:c9:31:b8:b0:46:82:86:93:1a:36:46:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:60:E0:37:65:4F:0A:50:40:7D:21:C0:A4:8B:72:95:C7:3E:03:5E
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a343030303a3a2f33342d3334203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33e8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:3d:56:f6:31:4e:1f:00:48:f4:11:64:f2:5f:85:c1:9e:
         ee:b3:b5:d3:66:85:cc:20:bc:dd:72:75:68:c8:c8:e7:d3:c4:
         3d:d4:09:10:bc:3e:9c:cd:b4:28:5a:21:43:06:cc:eb:f9:07:
         9d:18:3a:2d:2a:3e:9b:f6:d1:7e:4e:d6:68:f5:8e:03:80:f2:
         2d:21:b9:47:fd:55:d1:67:b8:e2:28:7c:b3:e9:04:56:47:ac:
         88:a4:53:40:ef:9f:60:d6:c1:f7:7c:81:61:b2:ff:9c:9b:b3:
         8f:a2:27:a5:22:2b:61:34:0c:b5:f8:fd:f7:1d:ba:a3:81:23:
         2b:b7:be:4f:9e:02:1c:2d:12:bc:e4:07:04:8a:f4:39:e2:86:
         32:b6:32:f6:8c:65:09:4d:dd:18:77:fd:10:27:d2:9f:74:21:
         8b:67:bf:6a:5f:3a:c3:ec:7f:52:da:6b:89:f4:01:51:34:80:
         ca:c3:ab:2b:e6:f1:17:99:8d:4d:3c:60:8e:23:1a:3d:11:e6:
         55:0c:89:20:c3:64:b6:6e:9b:77:9c:22:f0:bd:01:c8:b4:4d:
         63:d3:cc:a6:63:87:05:17:47:42:02:e7:0a:b4:85:6b:f5:ae:
         9d:8e:8a:ce:20:36:fc:2a:3d:85:40:4a:ed:25:54:90:24:93:
         ab:16:80:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:46:04 2026 by rpki-client