Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
File:                     323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (raw, json)
Hash identifier:          kJTHkhQuoVnL+3D7Yf1/8uXvt2DGwfG6wkVMb379kYw=
Subject key identifier:   27:AD:55:EF:98:B9:45:C5:E3:DF:D1:92:79:1C:34:55:7D:92:4B:E3
Certificate issuer:       /CN=DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B
Certificate serial:       106DB9BC486C888B65AE02A453553FDF6BD35932
Authority key identifier: DF:34:A5:76:EE:A8:B0:B9:4A:35:AB:35:57:DD:3D:99:2B:9D:B0:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa
Signing time:             Mon 27 Jul 2026 18:17:06 +0000
ROA not before:           Mon 27 Jul 2026 18:12:06 +0000
ROA not after:            Mon 26 Jul 2027 18:17:06 +0000
asID:                     269671
IP address blocks:        2804:6824::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.crl
                          rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6d:b9:bc:48:6c:88:8b:65:ae:02:a4:53:55:3f:df:6b:d3:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B
        Validity
            Not Before: Jul 27 18:12:06 2026 GMT
            Not After : Jul 26 18:17:06 2027 GMT
        Subject: CN=27AD55EF98B945C5E3DFD192791C34557D924BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:1a:b9:ac:f3:15:fb:5d:71:c3:95:ce:83:
                    82:bd:8f:04:a9:43:80:50:63:c6:54:44:81:da:05:
                    39:b0:88:5e:1e:53:8a:e3:61:24:a8:0b:40:46:43:
                    67:32:47:3e:56:49:91:2a:43:c4:52:5a:c6:fc:ad:
                    21:7e:5a:d5:fc:4f:00:c0:8c:38:05:47:75:5f:89:
                    f4:09:8d:b3:0d:2b:99:26:3b:7d:fe:0c:90:9c:97:
                    dd:89:40:e3:32:ad:69:9b:37:e7:03:f0:85:8b:5f:
                    17:73:ec:8a:92:a8:d6:bb:3b:35:71:a4:38:2a:c7:
                    a7:42:c1:ce:26:0d:db:d2:45:29:b4:26:2c:e4:e2:
                    9d:6f:ec:89:d4:55:67:20:e1:e6:c3:12:84:8f:16:
                    50:50:2e:89:6d:20:53:0e:64:f3:2a:4f:eb:a7:6c:
                    f1:19:2c:58:6f:ce:3b:2c:e8:38:fa:ff:6b:62:9b:
                    a2:4e:77:3f:11:6b:a3:e5:ba:11:3a:a8:59:f9:8a:
                    b5:02:7b:8b:3d:db:f7:4c:30:b8:77:cb:ed:99:e6:
                    51:91:18:68:05:87:31:1c:20:ed:d9:1e:eb:5a:9c:
                    18:09:74:a4:67:69:c6:3a:6f:8a:d1:df:e2:18:32:
                    4c:88:90:cb:78:a8:95:9e:fb:89:30:20:79:1a:94:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:55:EF:98:B9:45:C5:E3:DF:D1:92:79:1C:34:55:7D:92:4B:E3
            X509v3 Authority Key Identifier:
                keyid:DF:34:A5:76:EE:A8:B0:B9:4A:35:AB:35:57:DD:3D:99:2B:9D:B0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF34A576EEA8B0B94A35AB3557DD3D992B9DB04B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/323830343a363832343a3a2f33322d313238203d3e20323639363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6824::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:78:77:8e:c7:31:3a:26:2a:93:38:3f:48:4f:6d:9f:a6:
         7f:d2:12:d6:fc:21:fe:a2:45:eb:b9:a1:8b:20:1d:5b:43:3a:
         b8:53:5b:44:05:92:9c:e6:8b:0f:e1:a5:96:d9:6b:79:dd:bb:
         9e:70:b7:1c:5d:57:a0:27:47:38:4a:85:f7:1c:fa:e0:4b:6c:
         9f:96:48:58:79:09:47:72:70:a5:9a:fb:05:2d:35:5f:78:21:
         8e:45:9c:da:ff:6d:e7:be:78:96:fc:72:46:01:f5:cf:8b:e5:
         af:1e:a2:0b:e4:aa:12:f0:f1:b4:db:64:a0:d5:45:5e:31:6c:
         ea:6f:d8:1c:f3:56:15:79:e8:fd:7b:04:ef:ef:95:35:1e:db:
         e0:0f:b7:fd:a0:2f:89:d7:ad:7e:58:86:50:32:36:c0:4d:72:
         c7:20:75:45:2e:ac:5f:45:ec:58:86:74:7a:39:20:ff:8a:18:
         c7:c7:cd:6f:ac:87:72:89:e9:bd:1c:2d:66:87:83:9f:0b:a2:
         a2:ba:f7:7a:91:e1:aa:4e:66:b4:0f:3c:53:97:c0:05:a2:e0:
         a2:c3:aa:8f:f7:05:81:ab:1c:4c:6c:59:61:21:d7:95:d3:75:
         64:74:8b:05:9b:2b:96:48:fe:23:c0:8a:0d:ca:86:a0:04:05:
         28:e4:bf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:37 2026 by rpki-client