Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33342d3334203d3e203631393031.roa
File:                     323830343a313337303a3a2f33342d3334203d3e203631393031.roa (raw, json)
Hash identifier:          /xS8g6KwJla1jZXUx/oA8KeIB5QNsYhIi2JNkBfsGBA=
Subject key identifier:   C0:FA:21:F6:CE:4F:8E:C2:8A:83:79:0F:6C:1A:5B:CC:E0:9F:BF:B8
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       505AB796A6B8590320AB840AFE5408804D3214D5
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33342d3334203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:27 +0000
ROA not before:           Wed 12 Aug 2026 16:13:27 +0000
ROA not after:            Wed 11 Aug 2027 16:18:27 +0000
asID:                     61901
IP address blocks:        2804:1370::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5a:b7:96:a6:b8:59:03:20:ab:84:0a:fe:54:08:80:4d:32:14:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:27 2026 GMT
            Not After : Aug 11 16:18:27 2027 GMT
        Subject: CN=C0FA21F6CE4F8EC28A83790F6C1A5BCCE09FBFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a6:b4:c3:2e:4a:3c:7d:bc:22:0b:98:5e:ec:
                    c3:e3:ea:14:40:ca:80:7a:c8:92:56:7c:4d:8a:7b:
                    24:44:18:07:e4:f9:3f:dc:be:34:82:1c:24:5f:47:
                    80:80:02:10:e6:8d:22:22:2c:59:4e:f9:94:e7:16:
                    41:86:46:9f:d4:1d:3a:f5:29:84:f5:5a:8b:6f:91:
                    b1:b2:d9:ef:5b:5d:74:83:cb:23:89:e6:6e:17:37:
                    e7:52:27:1a:03:ad:7f:94:dd:d7:53:05:25:0b:8b:
                    3e:8a:83:a7:39:54:f1:52:98:e6:3c:3c:8d:11:f0:
                    43:32:7a:73:1e:27:d1:16:51:2a:c4:4d:7b:f4:fd:
                    55:84:8e:07:60:9e:f0:26:c6:32:9c:38:b2:04:90:
                    5c:49:3d:99:ae:98:fa:65:4d:44:dd:a9:63:e5:6f:
                    bc:0f:44:af:a6:a0:46:ed:fe:a3:61:6f:17:4f:f9:
                    46:ef:30:a1:5e:95:79:aa:00:44:28:9a:6e:cb:58:
                    ed:da:b3:e6:db:b6:22:dc:33:6e:dc:7f:3c:1b:b3:
                    81:55:7b:ed:d8:17:a1:70:ae:98:4a:dc:32:e8:74:
                    51:3e:bf:97:16:f5:87:62:b8:6c:35:53:7d:00:da:
                    cc:8a:49:36:37:b5:d2:05:ac:9f:f4:9d:8c:00:22:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:21:F6:CE:4F:8E:C2:8A:83:79:0F:6C:1A:5B:CC:E0:9F:BF:B8
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33342d3334203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1370::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:96:1e:93:67:7d:f9:98:6e:cd:34:5c:89:a9:d9:7e:b2:
         f3:5a:f4:9e:61:a8:54:51:66:6a:70:dd:a3:04:0c:57:d8:75:
         29:f6:9f:ed:06:2a:a0:9c:5a:26:fe:94:64:24:e2:61:c0:e8:
         fe:d9:46:e5:5c:a8:f6:f1:31:61:09:f4:bd:e9:ca:c6:d2:b3:
         a5:06:10:ad:1e:42:56:5f:b1:9f:6b:6d:a4:08:0e:cb:5f:5c:
         69:a9:75:85:cb:11:fc:ec:be:fb:e0:2f:43:94:91:5a:c5:c0:
         d3:bb:24:ce:88:c0:f5:36:d6:0a:1d:f0:6a:5e:9c:b5:fb:2a:
         57:71:5e:92:bc:d8:bc:d7:b2:88:07:99:ab:c5:18:cd:93:f6:
         6d:86:8a:ed:b8:7a:46:49:59:9a:eb:b6:e3:f3:50:51:00:03:
         ef:27:c1:f1:81:ef:5a:d2:84:60:29:30:c1:df:79:1f:a0:5b:
         10:83:f0:c3:97:af:e3:de:79:be:af:69:54:58:04:49:2c:9f:
         37:59:f8:de:99:2e:ce:18:5d:d7:5f:8a:c4:8e:73:7b:4b:44:
         df:5b:42:ef:8d:50:76:83:7b:d9:5a:94:8a:37:b1:94:e4:ae:
         d8:95:97:2d:30:29:24:7a:be:e5:ef:85:c0:81:21:1d:37:59:
         b0:ab:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:18 2026 by rpki-client