Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/323830343a356635303a3a2f33322d3336203d3e20323639303931.roa
File:                     323830343a356635303a3a2f33322d3336203d3e20323639303931.roa (raw, json)
Hash identifier:          2ritvwpY0V0ajPOmpnlWM29Au5R84eAXgEI2nYlWqzE=
Subject key identifier:   22:91:D8:7E:08:8C:B2:C1:1C:B7:AC:98:13:4E:8E:E1:A4:BE:60:77
Certificate issuer:       /CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
Certificate serial:       56A1AC8D7C3B237F312D0A46D06BFD9A3B0F43DF
Authority key identifier: D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/323830343a356635303a3a2f33322d3336203d3e20323639303931.roa
Signing time:             Sun 02 Aug 2026 11:51:53 +0000
ROA not before:           Sun 02 Aug 2026 11:46:53 +0000
ROA not after:            Sun 01 Aug 2027 11:51:53 +0000
asID:                     269091
IP address blocks:        2804:5f50::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl
                          rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a1:ac:8d:7c:3b:23:7f:31:2d:0a:46:d0:6b:fd:9a:3b:0f:43:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927
        Validity
            Not Before: Aug  2 11:46:53 2026 GMT
            Not After : Aug  1 11:51:53 2027 GMT
        Subject: CN=2291D87E088CB2C11CB7AC98134E8EE1A4BE6077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:b6:97:82:1f:7e:21:7f:26:d8:9b:e4:4d:
                    1e:7f:f0:4b:7c:d8:5a:89:e1:83:f3:92:6b:ef:50:
                    e2:25:8e:1b:f3:d7:88:32:36:41:e4:6c:2b:69:6f:
                    1e:7d:84:25:a9:4b:75:ee:ec:59:18:f1:87:85:e5:
                    25:a6:db:6c:83:be:3b:7c:1b:1a:ca:5d:0d:3d:f2:
                    a0:20:b3:27:b7:cc:4a:db:5c:4d:1f:92:07:43:82:
                    6b:1a:a7:a2:88:d6:dc:f0:85:a6:59:5b:fe:b1:34:
                    eb:72:fe:57:9c:2d:4a:73:ef:66:7c:7f:35:8d:0e:
                    c6:ec:c8:ed:19:9f:18:12:39:c3:d1:1e:7f:61:50:
                    0f:da:20:6c:cd:c7:9d:98:94:e4:68:04:5d:ab:88:
                    82:2f:a9:0e:c6:bb:bb:80:fc:4d:5a:c5:d5:86:1a:
                    e2:95:f8:d2:a2:5a:3e:21:b2:9e:f8:d6:ef:f3:f0:
                    f2:c5:5a:c0:e6:74:80:e3:2f:f3:03:91:ad:32:81:
                    5c:69:93:40:c5:0a:b7:f4:ef:e4:96:ec:30:08:80:
                    10:79:dd:bb:93:cc:4a:79:61:66:96:66:60:e1:44:
                    af:77:87:6d:30:a8:41:d5:e6:3b:b7:08:4c:e1:94:
                    a4:3f:49:99:44:70:5c:58:dd:e1:b8:7e:df:9d:10:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:91:D8:7E:08:8C:B2:C1:1C:B7:AC:98:13:4E:8E:E1:A4:BE:60:77
            X509v3 Authority Key Identifier:
                keyid:D2:D1:DF:48:E0:3D:EC:67:7A:DB:C3:3C:8C:BE:F8:30:F6:3C:49:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2D1DF48E03DEC677ADBC33C8CBEF830F63C4927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9GJXjkQbK8brLcXGXxfAocQAeyfzsYYAFSN4bYohNUB/1/323830343a356635303a3a2f33322d3336203d3e20323639303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f50::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:12:cc:de:f9:6a:3c:83:fc:aa:fa:3d:40:26:32:16:6f:c3:
         9e:40:d4:23:fe:3f:3a:f0:40:19:c8:52:7e:a6:56:cc:4b:f9:
         8a:12:91:c4:95:42:29:45:82:36:b7:21:65:68:f1:de:44:cf:
         ef:54:ee:17:dc:67:ac:16:cd:0a:7a:50:4c:9b:01:f5:1f:56:
         13:ad:19:87:73:fb:cd:cb:86:13:a1:92:50:a5:0b:15:30:ec:
         43:e6:75:22:22:a2:22:4a:ce:d5:24:b4:69:2f:ce:a7:0c:06:
         be:d0:a7:14:32:63:b4:ec:0e:b0:fd:a1:42:13:0a:b8:77:b5:
         5c:95:e1:7d:cd:22:e6:24:9a:78:8d:3a:b6:55:20:62:38:29:
         75:f7:b9:4a:a1:34:95:48:59:6d:99:ae:e5:7d:7f:a7:dc:6f:
         78:f7:64:e1:bb:91:b1:1e:1b:dd:df:4c:0c:36:fe:78:0c:ed:
         59:bb:f9:1e:65:a7:04:93:05:d1:eb:a3:18:37:e2:e9:1c:e8:
         2f:6b:54:36:a6:a7:95:c3:32:a6:b9:b1:86:d5:8f:13:80:3c:
         b9:5b:43:6d:0f:b5:29:68:9a:d1:41:7c:45:80:7c:77:e4:33:
         0d:0b:e2:99:b0:e9:77:93:b7:6e:ca:3a:6f:43:33:42:43:65:
         f7:37:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----