Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa
File:                     323830343a366331303a3a2f33322d313238203d3e20323730343433.roa (raw, json)
Hash identifier:          aL4Q3IWukP6xph7PRvzXiJ/Bsw+lw2IoWHpRrmqZ6e0=
Subject key identifier:   7C:80:35:61:C3:AA:EB:36:69:89:04:77:18:74:BF:6F:04:DE:6C:1B
Certificate issuer:       /CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
Certificate serial:       606739AE722A067B17C399371D8E31B5DDB3AD64
Authority key identifier: C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa
Signing time:             Sat 25 Jul 2026 01:44:55 +0000
ROA not before:           Sat 25 Jul 2026 01:39:55 +0000
ROA not after:            Sat 24 Jul 2027 01:44:55 +0000
asID:                     270443
IP address blocks:        2804:6c10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl
                          rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 16:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:39:ae:72:2a:06:7b:17:c3:99:37:1d:8e:31:b5:dd:b3:ad:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD
        Validity
            Not Before: Jul 25 01:39:55 2026 GMT
            Not After : Jul 24 01:44:55 2027 GMT
        Subject: CN=7C803561C3AAEB36698904771874BF6F04DE6C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:bb:e5:ba:10:3e:4f:46:cc:dd:2a:74:4e:
                    a3:21:89:20:60:bb:b0:6c:9f:79:17:1e:6d:04:3f:
                    82:22:8b:ba:0e:b1:1a:ce:e1:47:0b:53:be:3c:63:
                    fe:7e:84:53:88:36:f4:e9:49:f6:82:ac:74:dd:ea:
                    75:6c:e9:98:da:a1:81:eb:0c:e1:62:85:9b:e9:0e:
                    69:d4:b4:98:03:11:df:0b:b0:45:78:03:77:e0:8b:
                    b1:f2:14:6d:b9:bc:72:6b:27:83:6b:61:4d:f1:19:
                    6a:9c:1d:24:d5:a6:d8:62:16:f7:96:0e:c0:29:9a:
                    a9:5d:13:5e:56:4d:a0:55:a1:a3:8c:ff:d0:48:9f:
                    5a:3e:25:24:b7:d2:46:5e:b3:f3:96:1e:95:66:9c:
                    f0:ce:82:9a:e3:d8:3a:e3:d6:38:9e:22:e3:ba:98:
                    5a:c8:3e:76:3d:01:5a:01:e7:8e:a2:c6:b3:c0:e1:
                    3e:fd:64:b2:45:97:94:d2:88:3a:a8:17:0e:9f:9b:
                    da:ee:56:65:e7:83:6b:0f:da:98:ec:78:18:8a:96:
                    06:43:06:4a:20:5a:65:4a:2c:f8:ca:e0:86:3e:93:
                    de:8e:8d:36:ef:9c:b4:e0:e6:a4:f7:93:8f:3f:1a:
                    6f:8f:97:68:2f:65:81:91:8f:cd:41:50:d6:cb:8d:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:35:61:C3:AA:EB:36:69:89:04:77:18:74:BF:6F:04:DE:6C:1B
            X509v3 Authority Key Identifier:
                keyid:C5:E3:D6:C0:A0:2A:0E:E3:BD:07:02:D4:13:82:9B:C1:48:7A:45:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E3D6C0A02A0EE3BD0702D413829BC1487A45AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/323830343a366331303a3a2f33322d313238203d3e20323730343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:53:54:4e:69:9b:9f:20:05:a8:b8:77:93:fc:27:d4:34:ec:
         9b:31:e8:47:18:b9:32:9e:98:49:f6:ed:37:42:e1:62:3a:e4:
         57:b4:19:b3:1c:ed:3d:82:41:a5:ba:a0:9f:77:78:2b:87:75:
         5d:26:31:07:8d:7c:e5:2a:c3:08:f6:67:7d:6f:da:f6:4e:60:
         b4:5c:63:b0:95:48:47:74:ec:a9:43:18:c7:51:c1:eb:88:b8:
         a2:71:e2:28:f6:2e:1c:0d:6d:b9:ca:44:38:38:85:cb:75:5d:
         bc:95:c7:a3:c5:ec:4e:9c:b1:79:e2:e8:0a:81:4f:27:31:74:
         26:d3:a0:88:c6:84:20:9a:ee:de:14:9f:f5:61:89:c8:25:d0:
         09:b9:72:2f:77:05:36:1b:7c:1e:30:34:1b:f7:13:91:02:05:
         1e:78:00:f1:2e:f8:1d:1f:d3:ac:ba:90:95:3d:c3:82:1e:c4:
         4c:71:9c:de:34:f4:2d:20:b1:05:3b:ad:28:a7:da:be:02:cd:
         bb:69:6b:58:ac:37:a1:7c:ca:10:7a:c5:fb:dd:24:08:62:6a:
         8f:9a:42:15:6b:0f:0f:33:5b:73:a8:7a:1b:a5:b5:73:74:e2:
         a9:b9:58:39:b4:d6:90:72:5f:55:0b:d2:4d:a5:05:56:04:18:
         bc:fd:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:40:38 2026 by rpki-client