Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa
File:                     323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa (raw, json)
Hash identifier:          3pDxFqA/yFfHk+CAtGXogl/uiNeu0UZ54S2QUNUdoNA=
Subject key identifier:   EF:40:D0:D5:65:8F:44:DC:02:94:8D:44:9D:25:DC:51:EE:57:41:6A
Certificate issuer:       /CN=C3976BFC098E04D93A5507BBB046C3608B889670
Certificate serial:       06DF786431AA7ECA48C496F3023CA5BE56EEA9E3
Authority key identifier: C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa
Signing time:             Fri 21 Aug 2026 18:00:00 +0000
ROA not before:           Fri 21 Aug 2026 17:55:00 +0000
ROA not after:            Fri 20 Aug 2027 18:00:00 +0000
asID:                     269532
IP address blocks:        2804:6614:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl
                          rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:df:78:64:31:aa:7e:ca:48:c4:96:f3:02:3c:a5:be:56:ee:a9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Validity
            Not Before: Aug 21 17:55:00 2026 GMT
            Not After : Aug 20 18:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:02:a0:28:6f:a9:bf:67:05:d5:d4:fa:2d:
                    85:85:72:33:f4:8e:43:47:ba:c0:3b:5f:15:cd:c7:
                    e8:5a:2b:21:8c:91:0c:54:cc:00:f8:2f:bd:65:5b:
                    1a:eb:37:67:84:59:75:31:a0:ec:a3:4a:e5:4f:45:
                    ab:65:cd:fa:60:86:d6:a6:bd:4c:00:57:f0:c1:7c:
                    75:36:aa:8f:c2:c1:d3:f9:5e:a6:29:15:19:13:b9:
                    5d:a9:a4:0a:f0:3f:c4:0a:80:7b:bb:ca:12:ce:99:
                    08:c5:1c:3e:18:7d:8e:69:f9:ce:f0:d1:3a:c7:17:
                    a7:de:56:f5:eb:4d:95:d4:dc:19:2d:12:8a:98:eb:
                    08:d1:ab:06:44:5d:59:7c:ea:c8:55:b4:ae:bf:cf:
                    5d:49:2e:07:3f:cc:55:a4:9c:6f:4f:b1:c7:e7:5f:
                    5c:3b:5c:0b:e9:7d:dd:59:65:71:55:8e:a3:8f:90:
                    3c:06:61:f7:06:32:ef:8c:3c:4a:d5:6b:a7:2b:1b:
                    30:7d:e0:a6:44:71:5c:13:00:74:59:05:68:91:3b:
                    fc:08:0c:9c:83:00:da:38:ac:a3:fb:94:3e:87:d9:
                    0e:18:90:8f:73:f8:b8:a9:18:0f:fc:30:c0:66:c1:
                    79:be:9c:4f:55:3f:ad:5c:6d:ad:46:f2:3b:e6:3b:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:D0:D5:65:8F:44:DC:02:94:8D:44:9D:25:DC:51:EE:57:41:6A
            X509v3 Authority Key Identifier:
                keyid:C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/323830343a363631343a343030303a3a2f33342d3334203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         42:13:7e:80:9d:72:c3:23:41:c7:d3:55:af:67:80:33:bf:ac:
         5f:16:7e:e6:a1:4c:14:cd:2f:1d:a7:ee:40:13:4a:81:f9:e5:
         11:4a:a6:be:bc:4f:73:0a:75:ce:03:86:25:97:02:c0:39:99:
         fb:90:bd:63:4d:bf:c7:c2:4d:9f:85:1b:f7:96:0d:4a:52:7c:
         93:63:dc:71:34:ee:f7:f5:e0:61:4a:41:01:ab:cf:78:ab:64:
         e8:55:d0:74:f5:7b:bb:21:a3:37:7b:4a:2f:c3:34:47:83:2a:
         91:28:77:2f:9a:98:f5:a3:36:89:3a:2a:d0:8b:f8:16:31:29:
         39:02:3f:87:4f:47:44:3e:51:10:5b:cc:d4:9d:15:02:83:b1:
         28:17:e2:77:36:c0:16:6f:a1:46:1d:7e:1e:69:c6:a9:03:17:
         1b:3d:23:1a:01:44:76:4b:52:02:ca:1b:ce:fb:e3:77:87:d2:
         c9:a2:7c:22:d9:a0:c6:2a:57:d5:62:28:b4:9a:43:aa:4e:78:
         26:39:6b:8a:f8:14:b8:7b:92:de:08:29:56:f9:4b:db:1c:33:
         35:d5:be:65:81:91:88:49:11:c0:00:8d:1d:41:b5:08:b2:d7:
         df:e4:57:9f:5c:49:cf:71:7c:8c:43:94:7c:30:a5:cb:7e:f0:
         d7:12:4f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:44:24 2026 by rpki-client