Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33332d3333203d3e203631373734.roa
File:                     323830343a313932343a383030303a3a2f33332d3333203d3e203631373734.roa (raw, json)
Hash identifier:          RdTLO18/1F2Lw8DzSp1gHX7DFuPPmwIvMu6rtCjB2r8=
Subject key identifier:   6A:24:C5:22:6F:B1:14:D0:45:79:0B:AA:60:D0:CB:1F:5C:AA:90:AC
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       11398FD621777ADF49C97B5F316A6CB83C7F0E36
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33332d3333203d3e203631373734.roa
Signing time:             Sun 02 Aug 2026 01:43:33 +0000
ROA not before:           Sun 02 Aug 2026 01:38:33 +0000
ROA not after:            Sun 01 Aug 2027 01:43:33 +0000
asID:                     61774
IP address blocks:        2804:1924:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 22:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:8f:d6:21:77:7a:df:49:c9:7b:5f:31:6a:6c:b8:3c:7f:0e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Aug  2 01:38:33 2026 GMT
            Not After : Aug  1 01:43:33 2027 GMT
        Subject: CN=6A24C5226FB114D045790BAA60D0CB1F5CAA90AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:96:37:2b:73:33:ea:cc:fd:99:13:86:a9:
                    71:e9:c6:d9:d5:a8:e1:80:a1:41:ae:15:d1:41:33:
                    54:b2:8e:4d:74:92:24:c8:8b:b4:e3:a0:39:a3:48:
                    66:e0:a6:82:9c:08:4e:86:ec:0e:64:de:5b:c3:73:
                    e3:72:d0:24:b5:da:81:ba:7e:34:dd:eb:6f:c3:55:
                    cb:19:bc:b7:0e:e6:52:1a:c2:53:37:24:5e:07:88:
                    da:ae:ba:4d:13:38:a8:61:2e:76:b3:db:e0:53:fe:
                    65:3c:15:13:86:05:29:35:dd:ae:33:4a:6b:af:a3:
                    89:48:ce:a1:15:e6:d6:7a:9d:bd:38:da:bd:f3:fb:
                    f5:bd:90:90:d0:09:48:f2:dd:97:c9:ec:27:a1:ce:
                    a1:cb:55:b2:2f:b1:a0:0a:c6:e4:ac:1c:48:2f:5c:
                    ee:a4:2b:75:a8:81:81:44:e8:56:eb:0f:d4:97:29:
                    9e:ae:54:4d:8c:71:98:fe:77:4c:37:4e:23:c7:7b:
                    3c:10:75:64:44:14:c1:04:9e:69:0b:73:ef:b3:80:
                    3e:2e:6d:57:a5:3b:6b:a5:30:06:55:62:2d:d6:38:
                    1f:bc:ab:47:8c:76:58:0c:24:71:cd:d3:08:e3:e0:
                    30:67:4d:68:9a:56:d0:ca:a7:d9:d5:84:34:4b:a4:
                    3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:C5:22:6F:B1:14:D0:45:79:0B:AA:60:D0:CB:1F:5C:AA:90:AC
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33332d3333203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bd:3a:9c:6d:a5:27:30:c0:12:b7:5f:39:41:50:54:8f:be:f9:
         ea:06:12:f9:b9:03:5e:ab:84:96:fd:2f:c3:be:28:f6:55:d7:
         a8:11:c1:bd:a6:5f:2c:d6:4e:ac:02:67:03:30:d9:20:9e:ed:
         e3:14:e6:ae:5d:5d:3b:a6:94:b7:20:20:9f:55:65:25:fe:7f:
         57:4c:d8:b5:2f:37:81:4c:90:ea:87:b2:2d:7d:5a:d2:b2:1b:
         7a:da:e6:e5:99:72:f4:ee:98:18:9d:ea:6f:da:3b:9b:b4:0e:
         b1:48:39:00:13:12:58:31:af:d5:8e:7a:06:6a:66:9f:f6:2e:
         a4:57:9c:0d:ad:f6:16:f5:43:0d:2b:10:41:2e:98:13:df:5e:
         41:90:a3:38:b9:5b:6a:35:f5:6d:33:91:eb:9e:01:9c:57:8b:
         03:1b:0d:e4:43:b8:10:ce:ab:05:0d:f5:04:01:88:51:61:5f:
         40:e3:6c:0a:de:14:61:64:f2:56:b6:b8:d1:88:09:84:f0:c6:
         e7:72:d0:7a:b3:3a:20:e4:a3:46:27:79:9b:83:f3:36:b0:2c:
         0f:a1:00:09:dd:4d:07:88:fd:d4:d0:59:fb:40:de:d2:7b:6a:
         96:35:c3:59:f9:d7:0e:89:e4:a4:0c:a6:b9:df:fe:90:90:c6:
         18:af:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:06 2026 by rpki-client