Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa
File:                     323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa (raw, json)
Hash identifier:          wrcQc0dCQzF2BEuelLjU5UJu76fNRNm6rSJBkt6h+9o=
Subject key identifier:   31:CB:18:5E:14:61:6B:AD:60:1F:53:C2:B5:DF:75:85:93:C2:A7:C2
Certificate issuer:       /CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
Certificate serial:       2C3BB347DBF5B346435C207FCB0D24157BB582E1
Authority key identifier: 37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa
Signing time:             Sat 08 Aug 2026 15:25:31 +0000
ROA not before:           Sat 08 Aug 2026 15:20:31 +0000
ROA not after:            Sat 07 Aug 2027 15:25:31 +0000
asID:                     264010
IP address blocks:        2804:2958:3f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl
                          rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 18:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3b:b3:47:db:f5:b3:46:43:5c:20:7f:cb:0d:24:15:7b:b5:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EC66E6D5153E335C4A11B51C7DFB481E91CB87
        Validity
            Not Before: Aug  8 15:20:31 2026 GMT
            Not After : Aug  7 15:25:31 2027 GMT
        Subject: CN=31CB185E14616BAD601F53C2B5DF758593C2A7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:55:03:42:2a:3c:c2:e0:93:26:6b:d2:42:
                    85:b9:9a:c7:ab:8c:01:af:1c:15:53:4a:fc:b4:1c:
                    2e:68:b2:34:5d:7c:78:b2:03:14:23:93:69:e9:5e:
                    89:83:24:86:cc:f7:05:3a:7d:cc:0b:71:7d:6b:83:
                    7d:96:7c:91:ec:52:bc:99:b3:05:45:24:75:ea:27:
                    fd:05:cc:f2:44:87:8c:c8:43:41:54:62:d5:71:50:
                    9e:b3:70:5c:91:d0:91:02:1a:41:f6:3f:98:96:db:
                    f9:d9:00:f4:31:a4:73:25:b7:e8:f3:ff:d7:65:c0:
                    aa:48:6c:17:f6:a3:7c:1d:f1:51:ff:cf:01:a3:6c:
                    e0:13:5a:c5:65:9a:13:92:91:58:d3:02:bb:5f:82:
                    3e:28:ae:67:b5:b0:73:4d:f5:61:f7:e5:43:79:84:
                    af:f0:4b:d6:14:e4:1a:27:bd:43:09:9e:0d:d7:48:
                    03:45:d7:bf:e8:2d:0d:08:7c:ba:c7:c6:ba:80:66:
                    5a:4c:ff:9c:1c:e8:10:59:75:9b:8d:94:5e:16:36:
                    bf:66:b9:12:9a:fc:eb:b4:e4:e2:c9:b7:6c:3e:04:
                    4b:cd:55:3a:22:b2:ae:10:bd:08:7f:83:81:de:21:
                    3b:df:60:39:d4:a7:b9:34:42:20:3f:2a:a3:01:98:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:18:5E:14:61:6B:AD:60:1F:53:C2:B5:DF:75:85:93:C2:A7:C2
            X509v3 Authority Key Identifier:
                keyid:37:EC:66:E6:D5:15:3E:33:5C:4A:11:B5:1C:7D:FB:48:1E:91:CB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37EC66E6D5153E335C4A11B51C7DFB481E91CB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dww1CfFaFydXv3e37AhEVHF1EzcL9W62gMb1Rjtepc2M/1/323830343a323935383a336630303a3a2f34302d3430203d3e20323634303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2958:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:24:d0:5c:8a:ab:6c:bc:30:34:c2:a0:4a:7a:a9:9a:f4:88:
         45:51:34:ec:f8:eb:6e:9f:8f:04:ff:63:e6:ab:0a:2d:28:fc:
         25:8a:8a:59:4d:e8:4d:be:30:99:55:2d:43:7f:64:f4:a0:11:
         d5:8c:83:34:57:c2:27:ab:59:ce:06:3b:50:16:29:a2:67:ad:
         f7:42:bf:93:78:55:65:00:66:94:78:b9:bc:f1:e7:2c:ff:0b:
         9b:ee:23:5c:d9:0b:81:7a:57:ab:68:3b:d7:41:92:39:14:dd:
         64:6f:f5:0b:e9:f7:27:f9:59:e0:9f:19:1a:57:94:76:0b:1f:
         88:0a:a8:1f:a0:29:a7:64:cf:20:ea:c3:36:63:6b:cb:2e:b4:
         1b:2a:68:f7:07:1c:ca:20:3e:d8:d2:5e:24:2c:42:ca:b9:e7:
         f9:2a:9d:51:32:2d:86:a3:2a:b2:f2:ca:05:88:f7:15:e8:4d:
         89:24:e3:e9:7c:b1:07:04:44:24:fe:7a:d5:81:9f:2a:df:b3:
         2a:4d:6f:cf:05:97:43:84:96:06:3c:a0:1d:c4:07:19:b9:f0:
         9a:bc:03:4d:9b:c2:0c:88:bf:87:a9:82:6b:91:1c:d1:6d:5f:
         55:d0:eb:ed:ef:95:ad:47:46:e2:9e:09:56:96:ce:75:13:79:
         be:81:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:20:05 2026 by rpki-client