Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/323830343a346238343a3a2f33322d3332203d3e20323637333131.roa
File:                     323830343a346238343a3a2f33322d3332203d3e20323637333131.roa (raw, json)
Hash identifier:          DX8BeXZAYGU1Ptn62vxfcDcihL0Tc/gpg7iL5zAKmuY=
Subject key identifier:   60:7F:B7:BA:5F:A9:7B:84:58:72:F5:22:56:67:90:58:A9:EA:4F:93
Certificate issuer:       /CN=E37674EA65316CC55C5DC1C00268312BA10868A5
Certificate serial:       30C7A7D63ECA1FEE7C08DF25A95FC405099CA5A3
Authority key identifier: E3:76:74:EA:65:31:6C:C5:5C:5D:C1:C0:02:68:31:2B:A1:08:68:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/323830343a346238343a3a2f33322d3332203d3e20323637333131.roa
Signing time:             Thu 13 Aug 2026 14:26:23 +0000
ROA not before:           Thu 13 Aug 2026 14:21:23 +0000
ROA not after:            Thu 12 Aug 2027 14:26:23 +0000
asID:                     267311
IP address blocks:        2804:4b84::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.crl
                          rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c7:a7:d6:3e:ca:1f:ee:7c:08:df:25:a9:5f:c4:05:09:9c:a5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E37674EA65316CC55C5DC1C00268312BA10868A5
        Validity
            Not Before: Aug 13 14:21:23 2026 GMT
            Not After : Aug 12 14:26:23 2027 GMT
        Subject: CN=607FB7BA5FA97B845872F52256679058A9EA4F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:83:11:6a:a0:1d:bc:bb:29:fa:72:a1:8e:
                    1f:d1:96:ff:33:ca:cd:7d:68:62:83:a9:9d:8d:3c:
                    87:90:53:48:e1:12:17:f7:48:7b:88:47:79:b0:83:
                    bf:14:6a:4c:2e:50:62:9c:53:47:c2:57:c4:9f:70:
                    1f:f4:2f:eb:4e:e2:11:00:58:3c:c0:a7:65:dd:f1:
                    5b:3d:92:cd:64:f6:07:04:ea:49:b8:e4:64:72:35:
                    ec:97:45:48:84:0d:5a:5c:32:50:db:ee:02:a9:49:
                    83:c9:e9:24:44:fd:73:ad:ee:2b:3c:f2:3a:d1:12:
                    68:80:76:64:2d:f0:86:96:96:a9:a6:5c:ea:b4:28:
                    d2:a2:df:1c:fb:d1:7a:c2:06:b7:6b:d9:23:7b:93:
                    4a:e3:c5:47:3e:f1:62:7d:d0:73:fc:95:9d:7c:42:
                    1f:18:e6:2f:93:fa:46:f0:92:a6:a0:aa:82:4d:55:
                    d7:b9:c1:e1:09:3e:87:f5:4a:16:f8:16:61:cf:b7:
                    c8:c9:26:3d:06:85:2a:6f:6a:5a:dd:76:b5:7f:4c:
                    2d:23:34:b4:09:a7:2e:ba:c1:35:a9:7a:94:e3:9c:
                    14:96:e7:44:4e:25:06:3a:cf:7e:ef:e4:c2:fa:8f:
                    94:3f:68:2b:0f:f2:ab:86:14:d6:80:42:57:b5:27:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7F:B7:BA:5F:A9:7B:84:58:72:F5:22:56:67:90:58:A9:EA:4F:93
            X509v3 Authority Key Identifier:
                keyid:E3:76:74:EA:65:31:6C:C5:5C:5D:C1:C0:02:68:31:2B:A1:08:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/E37674EA65316CC55C5DC1C00268312BA10868A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E37674EA65316CC55C5DC1C00268312BA10868A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/323830343a346238343a3a2f33322d3332203d3e20323637333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:df:d0:b4:7a:29:e8:a0:6e:f6:bd:79:af:64:5f:27:7c:
         16:d3:ad:7e:e6:ae:4d:b7:81:63:2a:65:9a:6a:12:23:9f:69:
         8a:80:3e:1e:65:e8:a7:95:6f:04:77:98:36:5f:4b:bd:9a:cd:
         50:4f:ec:67:df:64:54:dd:22:6e:2f:e3:21:ea:17:02:75:7b:
         ab:b3:69:74:ee:c7:13:f8:ed:a1:33:01:53:0b:8b:e2:dc:53:
         e7:12:86:43:43:b8:82:93:9a:2f:1d:58:ce:2c:75:05:cd:3c:
         c8:f8:03:3f:81:e4:77:99:8b:6d:54:19:4a:32:c7:d3:5f:1c:
         9e:9e:88:e7:da:24:3d:85:06:b3:59:cf:77:49:e8:dc:9a:6c:
         4e:9b:88:4d:ad:98:6a:e2:08:0a:51:9b:a4:7e:43:31:3e:f6:
         70:57:c9:05:90:33:f2:a7:49:aa:92:f2:25:94:0d:93:41:5e:
         44:62:36:cb:be:d0:b0:d5:96:16:d4:03:5e:0e:3a:8f:b1:7a:
         f9:9a:cd:ae:f1:04:cc:9f:b0:11:9a:46:65:86:71:4d:29:b0:
         bc:20:89:35:80:e9:3f:91:ed:43:bb:1e:4c:c4:41:53:d4:56:
         50:56:3a:b5:35:a9:35:76:34:ab:a8:e7:75:ad:e8:44:73:47:
         8f:30:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:11:50 2026 by rpki-client