Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a3a2f33342d3334203d3e20323635343234.roa
File:                     323830343a333365383a3a2f33342d3334203d3e20323635343234.roa (raw, json)
Hash identifier:          jsY/Zcn+9RWG6cPaK6nK66JjdeORq0MqqoH3aCjZYeE=
Subject key identifier:   BA:72:CC:74:EC:D9:08:80:AD:BD:54:CA:06:80:10:E4:53:3F:B6:DB
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       7BF991504384EE8DB57904827959EBC16B8251A2
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a3a2f33342d3334203d3e20323635343234.roa
Signing time:             Thu 20 Aug 2026 19:14:28 +0000
ROA not before:           Thu 20 Aug 2026 19:09:28 +0000
ROA not after:            Thu 19 Aug 2027 19:14:28 +0000
asID:                     265424
IP address blocks:        2804:33e8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f9:91:50:43:84:ee:8d:b5:79:04:82:79:59:eb:c1:6b:82:51:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Aug 20 19:09:28 2026 GMT
            Not After : Aug 19 19:14:28 2027 GMT
        Subject: CN=BA72CC74ECD90880ADBD54CA068010E4533FB6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:df:f4:d9:9d:f6:97:3d:2f:e4:e4:59:86:
                    ad:8d:16:45:fe:3a:f0:b0:fb:33:b8:fe:79:5b:66:
                    94:05:29:04:c8:90:a4:90:48:9c:6d:18:4a:74:01:
                    d9:77:38:e6:9a:e7:38:1b:30:ad:25:a7:21:59:3c:
                    d8:5c:cd:7f:32:ab:17:67:a1:31:b6:58:89:7c:ff:
                    57:0e:4f:86:f0:fa:2b:3e:6a:84:33:78:f8:3e:8e:
                    9b:b3:12:11:49:7f:89:dc:cc:dd:b7:94:f4:96:b7:
                    b0:99:21:3b:cd:9f:d5:f4:6a:cb:40:98:d6:f9:fc:
                    97:8a:f5:5a:76:d4:a7:c2:0c:78:d5:d5:e8:47:73:
                    59:e9:fb:5f:c4:fb:3a:bf:20:85:dd:7b:28:9e:c3:
                    b6:fe:94:4b:ec:5d:d9:93:23:f9:e4:5a:8d:4b:d9:
                    21:14:67:04:23:8f:ed:7a:d9:b0:8d:51:23:9c:37:
                    1b:ab:a2:4e:36:18:4a:fc:21:6e:3f:c9:f7:f3:71:
                    82:27:de:64:ee:5d:a4:99:ea:d3:70:45:cc:08:98:
                    16:c9:a0:88:2c:ba:ee:ee:42:9b:17:3f:3e:01:d7:
                    c8:e1:af:f8:4d:d0:fe:04:13:87:64:18:24:7d:b1:
                    de:69:a8:48:0f:56:2d:93:f1:1f:e1:51:94:c5:0d:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:CC:74:EC:D9:08:80:AD:BD:54:CA:06:80:10:E4:53:3F:B6:DB
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/323830343a333365383a3a2f33342d3334203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:5c:12:04:1b:63:c6:68:d3:77:6e:73:1b:46:b2:b5:da:
         e9:78:b5:06:d6:ee:82:ed:67:40:c6:59:91:8c:fe:cf:b0:6c:
         d4:82:2f:9a:31:70:06:7c:c9:0f:fe:66:b4:ca:90:12:8c:dc:
         5e:1c:5c:ac:df:ee:c9:72:7f:4e:0e:c1:a9:48:39:b2:7a:99:
         e5:b3:51:72:71:4d:e0:78:2a:0d:ac:1b:21:24:a4:62:60:43:
         c6:8e:70:eb:a6:4a:7e:90:c1:95:1a:ca:85:b3:ed:68:91:95:
         6c:0d:e4:09:42:9d:13:c8:6e:37:aa:e6:29:38:02:5b:96:15:
         8b:28:f6:dd:2d:cd:17:05:c3:13:f6:6a:e9:e9:47:3b:87:0b:
         41:80:7e:a4:95:d9:8c:94:1f:6e:e9:22:c5:b0:9e:02:1b:d4:
         9a:55:80:2b:b6:ce:06:d8:2b:bf:ed:8e:4c:32:26:c4:f1:7f:
         a1:9c:ba:6c:9a:c1:8c:d5:c7:f1:60:fd:b7:dc:2f:01:02:7b:
         f5:34:fa:60:13:fd:75:fd:19:bb:f7:16:4d:53:e3:bd:ad:22:
         d3:5e:6a:91:cc:a7:62:79:96:71:41:42:d4:7b:21:94:32:cd:
         3f:48:d8:99:e1:69:98:80:fb:49:5c:1d:6e:e6:db:f6:8c:04:
         f9:44:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:47:31 2026 by rpki-client