Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a383030303a3a2f33342d3334203d3e20323635343234.roa
File:                     323830343a333365383a383030303a3a2f33342d3334203d3e20323635343234.roa (raw, json)
Hash identifier:          nuPomv+SN24OR+AYmYK5tCUkLo8X4IKCFQYF6UTq1Xc=
Subject key identifier:   5B:F6:7B:2A:CA:85:2C:88:59:0F:AF:2B:4C:4A:2A:A9:E9:37:7C:D9
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       7CFBD1F774BD61F7D27ACEBCEAE2A49976957CCF
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a383030303a3a2f33342d3334203d3e20323635343234.roa
Signing time:             Thu 20 Aug 2026 19:14:28 +0000
ROA not before:           Thu 20 Aug 2026 19:09:28 +0000
ROA not after:            Thu 19 Aug 2027 19:14:28 +0000
asID:                     265424
IP address blocks:        2804:33e8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 07:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fb:d1:f7:74:bd:61:f7:d2:7a:ce:bc:ea:e2:a4:99:76:95:7c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Aug 20 19:09:28 2026 GMT
            Not After : Aug 19 19:14:28 2027 GMT
        Subject: CN=5BF67B2ACA852C88590FAF2B4C4A2AA9E9377CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:a7:09:13:da:37:bb:e7:b3:92:de:97:18:
                    c7:42:9e:f3:6e:bc:60:91:4e:eb:54:59:3e:49:65:
                    ac:45:4e:94:d6:00:9a:b4:9a:b5:04:ee:20:12:d9:
                    e6:28:3b:0b:57:4e:de:bf:77:3d:eb:48:ad:d2:51:
                    e8:56:a1:cd:a8:a5:b1:6b:d6:e3:84:7a:c0:1f:52:
                    d6:bb:f3:fe:bc:b8:3f:d4:78:d9:d8:d9:96:08:1d:
                    65:aa:32:8c:8f:a6:32:4d:92:19:74:ee:9e:7b:e4:
                    3b:af:46:ec:73:0e:ef:fd:ac:95:49:6e:69:b9:ff:
                    30:8d:83:38:30:22:44:c7:32:64:fd:6e:97:16:2a:
                    6f:3e:af:f2:4a:2d:46:f6:7e:dd:70:a7:5c:84:64:
                    43:bf:55:9a:40:19:8c:65:09:3c:19:6f:91:fb:2f:
                    13:58:cd:15:70:97:2c:a3:c3:c1:c1:7f:3d:ca:28:
                    3f:b6:29:ae:a1:10:98:2c:03:11:ca:bc:20:4c:53:
                    14:bc:3a:a0:e6:24:fa:e9:6d:e8:96:cd:c6:84:d8:
                    0f:b9:93:53:2b:7e:7f:0c:f1:8a:00:1a:77:9a:f4:
                    ff:a4:0d:4d:20:62:a0:6c:f5:b7:e4:6c:c5:b1:4a:
                    be:b4:0c:06:bf:e3:57:49:e0:87:4c:6b:15:bb:b0:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F6:7B:2A:CA:85:2C:88:59:0F:AF:2B:4C:4A:2A:A9:E9:37:7C:D9
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a383030303a3a2f33342d3334203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33e8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:d5:f0:ea:63:63:b2:16:94:83:ae:1a:d7:83:f5:7f:46:
         e2:b3:ef:8e:ae:a8:96:aa:37:35:e7:33:05:7c:e8:ba:10:8f:
         8d:54:95:e7:83:80:d8:76:cc:5e:cc:52:48:2e:e3:94:d4:9d:
         d9:b6:9c:a5:4c:a2:3c:cf:ed:99:cc:d0:e2:31:21:00:10:86:
         cd:3c:f9:c6:c7:03:10:ca:22:b2:03:3d:fa:a5:80:e4:8c:f5:
         fc:fc:58:1a:c0:e0:a2:a4:34:ed:60:c4:9d:42:a8:ce:3b:02:
         2a:1d:d0:85:b7:7b:86:36:92:44:53:60:cf:66:4a:d7:54:18:
         83:47:ce:87:04:01:98:e6:f7:1c:62:10:04:b3:a8:c8:60:83:
         36:da:a1:72:4c:9e:69:7a:4b:26:f9:88:24:8d:55:d4:7d:64:
         cd:56:31:5d:af:33:ac:3e:8f:da:fa:11:9b:1e:98:8c:4a:c9:
         36:b5:2f:03:f9:52:71:bf:2c:58:09:ec:5f:f1:f1:17:46:11:
         71:33:7f:2e:1c:c5:07:d6:b7:ce:a3:39:8c:20:33:f1:62:b7:
         77:44:73:11:63:40:c9:20:07:82:9a:e4:2f:0f:c1:5f:6e:91:
         5e:9c:ba:e6:f4:7a:56:f4:7e:70:bb:8a:33:94:13:db:8f:37:
         34:a1:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:14:34 2026 by rpki-client