Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a383030303a3a2f33332d3333203d3e20323730333337.roa
File:                     323830343a366137343a383030303a3a2f33332d3333203d3e20323730333337.roa (raw, json)
Hash identifier:          w/7xzQycebwWJrrADUgFzbpQ2cR/J9Z4owTU3/JfDqA=
Subject key identifier:   74:A1:5A:9B:2E:28:6D:3D:31:66:0F:49:D3:BD:4C:35:3C:38:B4:CC
Certificate issuer:       /CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
Certificate serial:       02FF8E24D02F8E80355525714BF724A54F150BFD
Authority key identifier: 7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a383030303a3a2f33332d3333203d3e20323730333337.roa
Signing time:             Tue 18 Aug 2026 13:54:53 +0000
ROA not before:           Tue 18 Aug 2026 13:49:53 +0000
ROA not after:            Tue 17 Aug 2027 13:54:53 +0000
asID:                     270337
IP address blocks:        2804:6a74:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ff:8e:24:d0:2f:8e:80:35:55:25:71:4b:f7:24:a5:4f:15:0b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
        Validity
            Not Before: Aug 18 13:49:53 2026 GMT
            Not After : Aug 17 13:54:53 2027 GMT
        Subject: CN=74A15A9B2E286D3D31660F49D3BD4C353C38B4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:65:91:56:53:eb:e1:fb:b9:99:58:f7:a9:
                    50:63:d9:c0:13:a6:de:c2:fb:dc:fd:e3:a4:0e:c7:
                    cc:db:ad:72:07:db:f9:f1:50:2e:32:51:10:45:59:
                    3a:c3:93:bc:3f:7d:21:6a:49:12:29:2b:35:48:4f:
                    e9:74:16:0c:32:b6:84:96:e3:38:2e:87:c7:a9:6a:
                    06:55:55:66:f6:6e:91:13:a4:f3:15:24:e9:35:e3:
                    e8:3b:ae:6f:a2:63:47:c6:e8:4e:76:9f:eb:8a:93:
                    c2:af:8a:2a:7f:63:60:35:d6:55:40:2f:83:0f:32:
                    52:e7:83:db:8c:b8:60:22:0c:5b:92:be:95:38:f6:
                    d5:fb:37:b6:69:12:74:b8:2e:34:6a:3d:48:b1:72:
                    3c:2c:52:75:f7:83:25:78:30:23:d7:76:ae:f2:36:
                    9a:1a:f3:a4:ad:d6:f4:a0:33:24:4d:89:8f:8b:56:
                    53:dd:72:26:b0:07:f4:61:1e:1b:10:4a:17:4b:72:
                    92:fb:df:4f:bd:c9:23:bb:95:dc:50:e4:98:4a:e5:
                    92:5d:52:40:40:49:4a:c9:5a:9c:be:1e:fc:85:23:
                    d5:fc:4b:0a:67:e6:99:a8:64:d5:d7:f3:28:da:de:
                    35:1b:d0:26:17:4e:57:ad:83:a2:cf:37:f2:86:91:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:5A:9B:2E:28:6D:3D:31:66:0F:49:D3:BD:4C:35:3C:38:B4:CC
            X509v3 Authority Key Identifier:
                keyid:7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/323830343a366137343a383030303a3a2f33332d3333203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:1e:e9:d7:d7:df:fb:f1:a3:1e:da:56:b6:5e:d8:bf:04:a7:
         e3:6f:91:62:d9:58:b7:a8:a3:6e:9e:5f:c4:35:54:18:86:a7:
         80:5a:29:51:bc:81:30:65:d5:e4:07:d6:9e:51:f6:81:d5:11:
         70:69:61:ed:7c:e6:e2:37:2c:b8:33:99:3d:8d:6e:fd:aa:f9:
         07:4f:ad:64:ac:c3:38:9a:02:4e:e0:2f:bf:f7:e2:09:f0:27:
         94:5f:d2:88:41:36:2d:a2:f2:9b:31:1b:84:81:6c:3e:79:08:
         e7:54:cd:92:6e:dd:b0:46:de:11:e1:01:2a:16:df:b6:63:da:
         f2:fc:bf:c3:dc:00:ad:4b:ce:25:8c:87:79:2d:77:63:12:ba:
         04:4d:90:95:3b:1f:b9:1f:b4:54:b9:62:81:4f:9d:6b:40:22:
         e4:30:3d:4e:d3:53:6f:6a:f0:00:65:3c:aa:6e:7a:22:f0:34:
         48:a3:de:fe:a0:1f:c1:db:72:8f:05:5f:4f:ef:6e:3d:c7:cf:
         1e:ad:69:3a:ba:9f:ee:1a:a4:b9:db:70:a1:32:88:fa:7f:dd:
         27:b4:e0:08:61:6b:c9:a8:b0:c3:6f:34:d5:5f:f9:9b:63:e9:
         6c:67:66:5a:9d:ed:68:05:6a:15:ae:52:75:7d:39:39:84:66:
         c1:0f:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:54 2026 by rpki-client