Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a383030303a3a2f33332d3333203d3e20323639363530.roa
File:                     323830343a363763383a383030303a3a2f33332d3333203d3e20323639363530.roa (raw, json)
Hash identifier:          UtnWPtxMfpKwsmzmxSslMy8WY3IoCkGtz5NtuOR0Jgs=
Subject key identifier:   AA:BB:DC:4B:88:D2:A9:C6:DF:DE:CD:92:01:E9:42:3D:4E:01:1C:05
Certificate issuer:       /CN=63377862BEA07DEEBC233F8B42ED11B557AD6C06
Certificate serial:       5F1364595C69A305B1FEFE589A8A3D87C1C2F79F
Authority key identifier: 63:37:78:62:BE:A0:7D:EE:BC:23:3F:8B:42:ED:11:B5:57:AD:6C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a383030303a3a2f33332d3333203d3e20323639363530.roa
Signing time:             Tue 11 Aug 2026 14:34:31 +0000
ROA not before:           Tue 11 Aug 2026 14:29:31 +0000
ROA not after:            Tue 10 Aug 2027 14:34:31 +0000
asID:                     269650
IP address blocks:        2804:67c8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.crl
                          rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:13:64:59:5c:69:a3:05:b1:fe:fe:58:9a:8a:3d:87:c1:c2:f7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63377862BEA07DEEBC233F8B42ED11B557AD6C06
        Validity
            Not Before: Aug 11 14:29:31 2026 GMT
            Not After : Aug 10 14:34:31 2027 GMT
        Subject: CN=AABBDC4B88D2A9C6DFDECD9201E9423D4E011C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:fd:18:e8:52:6a:2e:49:1c:ff:23:38:78:
                    dc:55:6c:f9:10:42:28:cd:68:05:3b:75:8c:a8:35:
                    fe:4b:f6:dd:b0:4d:40:c9:d9:64:69:42:d9:1a:cd:
                    58:c0:34:ae:51:80:4c:aa:17:b5:1e:94:ef:e5:ae:
                    6c:37:e1:ed:44:0b:82:0c:19:2f:70:ef:b5:05:7a:
                    ed:e6:98:4d:f7:fe:d3:3f:64:ec:b7:43:85:03:37:
                    67:62:b1:1e:6b:32:5e:86:8d:09:b3:ce:d7:e4:82:
                    c8:81:81:3e:af:89:d8:6c:41:1a:80:6f:7b:8b:99:
                    a4:96:c1:84:66:e4:9f:05:77:9d:53:dd:0b:73:68:
                    3b:c5:0f:53:b0:97:10:78:c3:0c:70:1d:c8:45:d6:
                    3c:db:15:3d:04:cc:cd:12:d7:d6:13:42:11:50:e4:
                    35:24:63:58:2e:c7:2d:5a:c2:1a:de:b8:18:b8:43:
                    13:64:76:69:8a:c7:1b:58:a7:ca:96:a1:4e:5d:5a:
                    4e:b7:69:11:90:6a:39:79:0f:7c:68:79:0b:ab:57:
                    63:44:fd:01:87:2c:1f:84:74:cd:1b:2b:cf:ae:67:
                    c7:ad:db:e0:5c:40:26:79:81:b7:3a:ec:a1:16:87:
                    85:a9:96:90:cb:28:4a:47:46:35:07:7c:a4:da:43:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:DC:4B:88:D2:A9:C6:DF:DE:CD:92:01:E9:42:3D:4E:01:1C:05
            X509v3 Authority Key Identifier:
                keyid:63:37:78:62:BE:A0:7D:EE:BC:23:3F:8B:42:ED:11:B5:57:AD:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/63377862BEA07DEEBC233F8B42ED11B557AD6C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63377862BEA07DEEBC233F8B42ED11B557AD6C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a383030303a3a2f33332d3333203d3e20323639363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:d7:3a:7d:68:23:50:5c:8e:7f:21:c7:96:25:0c:1b:09:
         19:d0:15:5e:c4:1e:c8:bc:85:b8:d0:7c:81:ea:ef:c3:4f:04:
         a8:85:cd:99:34:cb:29:bf:a3:96:05:d2:5c:69:34:b4:c8:dd:
         4a:de:17:4b:9b:a7:4e:5a:d6:75:5f:94:03:df:95:02:64:fc:
         9d:0c:ed:f6:06:e6:68:87:43:8c:6b:c7:1e:3e:85:87:e6:36:
         a0:0d:29:4d:af:5f:9b:0f:e4:d5:d7:d8:52:09:13:c2:dc:18:
         b3:d7:8e:31:fb:04:59:f8:36:a2:58:ef:7b:04:6c:35:30:53:
         5a:de:42:37:ce:b8:bf:74:ba:80:23:53:df:91:b3:2e:09:77:
         c7:97:be:ab:41:d0:51:be:3b:e9:b4:df:c0:29:ca:3d:8b:57:
         04:99:76:36:79:0a:bf:22:cf:8c:46:c5:bf:13:20:0f:73:15:
         9a:2b:9f:cf:91:d6:e3:39:39:1c:74:05:87:77:54:6a:2e:e1:
         fd:1b:78:91:21:99:de:a0:1f:0c:2f:c4:db:45:4c:4f:a4:05:
         b1:57:1a:4d:bc:93:69:78:a9:22:0a:1f:f3:44:13:d2:83:db:
         d6:76:e1:5d:8a:3c:a3:47:55:eb:6c:1b:63:cf:f3:cc:2a:8a:
         f5:12:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:38:30 2026 by rpki-client