Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d313238203d3e20323730343330.roa
File:                     323830343a366264633a3a2f33322d313238203d3e20323730343330.roa (raw, json)
Hash identifier:          sIHDYTOykJhLysvZt684Pr/13/OQVM91nd7scwKUJbM=
Subject key identifier:   D2:E7:B7:93:AE:50:92:FE:63:70:38:17:E7:31:F8:AD:D5:52:5B:5A
Certificate issuer:       /CN=624AA820980C9A82169F2F0F84CD938A7E8B30CD
Certificate serial:       7C736E59852D4792AF4C24F2A7E5F1F025A45A27
Authority key identifier: 62:4A:A8:20:98:0C:9A:82:16:9F:2F:0F:84:CD:93:8A:7E:8B:30:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624AA820980C9A82169F2F0F84CD938A7E8B30CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d313238203d3e20323730343330.roa
Signing time:             Fri 14 Aug 2026 16:37:19 +0000
ROA not before:           Fri 14 Aug 2026 16:32:19 +0000
ROA not after:            Fri 13 Aug 2027 16:37:19 +0000
asID:                     270430
IP address blocks:        2804:6bdc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/624AA820980C9A82169F2F0F84CD938A7E8B30CD.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/624AA820980C9A82169F2F0F84CD938A7E8B30CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624AA820980C9A82169F2F0F84CD938A7E8B30CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:6e:59:85:2d:47:92:af:4c:24:f2:a7:e5:f1:f0:25:a4:5a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624AA820980C9A82169F2F0F84CD938A7E8B30CD
        Validity
            Not Before: Aug 14 16:32:19 2026 GMT
            Not After : Aug 13 16:37:19 2027 GMT
        Subject: CN=D2E7B793AE5092FE63703817E731F8ADD5525B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:59:4b:de:16:29:05:30:bd:1e:fe:c3:ca:
                    35:75:f7:b1:07:73:58:b2:15:55:71:a6:59:d5:7d:
                    d7:38:4f:ba:a9:e6:21:18:55:03:1e:9b:50:a9:df:
                    c5:cf:f4:38:bb:47:d7:1e:37:df:2c:9f:aa:df:e5:
                    cb:c4:9f:00:d6:67:57:0a:a6:75:12:e2:bb:10:16:
                    95:c9:63:86:5c:b3:2a:76:58:01:b0:59:00:9d:50:
                    a9:13:ab:19:67:45:cd:d3:46:7d:41:d9:22:4c:06:
                    c6:6a:3d:52:b0:d9:0a:5a:79:67:22:52:8b:e0:4d:
                    ee:64:3a:a9:7e:da:1c:ef:f5:12:61:c7:30:eb:13:
                    a2:0a:19:41:67:29:32:e5:fe:04:37:0b:98:e4:b1:
                    61:21:46:fd:b6:60:cb:eb:7c:72:e3:20:03:7a:e1:
                    b7:fc:d1:cc:4c:95:b1:a1:e8:28:9a:8a:70:09:71:
                    eb:35:8d:1a:ea:11:52:b5:e7:92:da:32:8d:2d:70:
                    15:ef:86:77:54:5e:74:a3:e6:29:1c:f7:1a:8a:fc:
                    c6:48:64:e5:21:91:e9:67:d1:95:d5:a4:6b:fc:8e:
                    00:fa:f3:b6:2d:a6:ac:a2:68:0b:84:ab:76:84:7c:
                    bc:1f:88:b0:13:5a:13:7e:c5:4b:35:fe:d8:ae:c0:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:B7:93:AE:50:92:FE:63:70:38:17:E7:31:F8:AD:D5:52:5B:5A
            X509v3 Authority Key Identifier:
                keyid:62:4A:A8:20:98:0C:9A:82:16:9F:2F:0F:84:CD:93:8A:7E:8B:30:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/624AA820980C9A82169F2F0F84CD938A7E8B30CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624AA820980C9A82169F2F0F84CD938A7E8B30CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d313238203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:c4:1e:53:78:30:dc:d8:ff:a0:5e:bb:6d:03:11:bc:19:
         b2:eb:d4:ce:9f:3f:1a:f5:84:ff:bc:47:d9:f5:a5:fb:40:e0:
         10:68:39:d8:00:4e:b2:7d:2b:40:10:4b:52:a1:cb:e3:d9:2a:
         b1:a1:75:35:ed:0d:a3:90:52:10:c8:0a:cb:49:6a:a1:5f:be:
         3d:76:ad:ce:b3:c1:77:04:33:07:c8:cf:15:4e:0f:a1:d4:68:
         64:f8:aa:b9:7d:6f:f2:75:93:1f:4d:d6:aa:18:38:d9:e3:a5:
         cb:f1:5d:56:09:ee:05:bd:02:40:8c:ca:4e:a9:e1:8c:c6:56:
         a8:10:7b:e2:4a:5f:75:51:42:bf:ab:f9:8a:c9:df:3f:17:58:
         d4:86:c0:bd:6a:ce:89:41:f5:0c:ef:44:14:44:9f:32:12:04:
         c1:31:c9:04:e5:bb:5f:cc:06:f8:f4:3b:7c:f0:e4:3e:91:f6:
         bd:e2:32:13:fb:47:00:4e:d3:bb:df:f0:46:1a:40:05:58:1b:
         fa:67:dd:0b:cb:78:b6:19:3b:4d:86:0a:9b:68:90:63:a0:cb:
         a4:33:28:4b:e5:9e:09:bf:e7:1b:b1:d5:46:8f:c5:78:b4:ed:
         8d:c7:68:93:8d:4e:a1:29:a6:39:61:69:31:2d:eb:60:c2:22:
         3f:f3:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:30:38 2026 by rpki-client