Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/323830343a353936383a3a2f33322d3332203d3e20323638313838.roa
File:                     323830343a353936383a3a2f33322d3332203d3e20323638313838.roa (raw, json)
Hash identifier:          uW1qSOgOyvo12vF6bee8eLoXKEEp6H5cZPlJV7kCXYc=
Subject key identifier:   20:54:63:52:4C:1D:B7:AD:33:38:9C:74:88:A6:1B:4C:AD:E5:BF:9E
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       7B236F46AD7CDFFAD2102ABCB951AADD3DF96909
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/323830343a353936383a3a2f33322d3332203d3e20323638313838.roa
Signing time:             Thu 20 Aug 2026 23:30:36 +0000
ROA not before:           Thu 20 Aug 2026 23:25:36 +0000
ROA not after:            Thu 19 Aug 2027 23:30:36 +0000
asID:                     268188
IP address blocks:        2804:5968::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:23:6f:46:ad:7c:df:fa:d2:10:2a:bc:b9:51:aa:dd:3d:f9:69:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Aug 20 23:25:36 2026 GMT
            Not After : Aug 19 23:30:36 2027 GMT
        Subject: CN=205463524C1DB7AD33389C7488A61B4CADE5BF9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:d3:a9:ba:0c:e1:50:3b:04:0b:01:f5:52:
                    ce:60:9a:fe:69:ea:f3:0b:ce:ad:3d:cc:e4:e2:88:
                    d2:86:83:48:6b:e7:0b:0b:3c:0a:5a:00:a6:74:0a:
                    6f:8b:4f:46:b7:64:84:c0:09:74:9f:9d:b5:a9:49:
                    4e:e6:3d:0c:99:b0:d8:a8:b2:8d:a2:80:14:46:26:
                    ad:da:ef:7d:75:07:c9:e6:43:f5:18:32:09:48:98:
                    83:79:d4:9a:61:d8:68:6c:fd:61:2f:4a:27:0c:7a:
                    f9:57:0f:5a:fd:aa:dd:06:34:74:0e:b7:ec:57:22:
                    ec:6c:63:38:32:e6:f3:36:85:67:3e:f1:21:40:03:
                    95:03:82:b8:0d:2d:03:e3:aa:6d:69:1d:dd:62:63:
                    ed:73:11:cb:04:9d:da:4c:91:b6:a1:bc:90:71:18:
                    df:d4:f3:63:0b:1b:6b:8b:15:db:96:1d:cd:fa:7c:
                    ea:dd:26:58:8f:38:71:87:27:13:56:c8:73:a5:f5:
                    60:6f:aa:b2:b2:28:3b:90:08:fb:b3:5e:50:81:23:
                    7f:de:82:29:10:e2:2d:c6:c8:43:ef:f7:ed:4d:c5:
                    17:fb:86:66:81:75:61:00:d6:fd:e3:75:d3:a8:8e:
                    9b:2c:67:f1:d9:d3:0b:13:3d:43:ea:7f:36:00:27:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:54:63:52:4C:1D:B7:AD:33:38:9C:74:88:A6:1B:4C:AD:E5:BF:9E
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/323830343a353936383a3a2f33322d3332203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5968::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:16:55:55:60:3c:ee:af:b7:44:46:66:ff:b1:e3:84:08:
         21:88:c6:d8:81:66:47:bc:2f:06:bd:a3:aa:fc:11:97:69:07:
         b1:ea:93:2d:7e:87:40:92:30:07:16:c7:ce:45:f5:3c:f9:99:
         ab:c2:2c:be:c2:ef:ed:c9:3c:8a:97:31:b9:0a:82:6b:c5:d7:
         b2:b2:af:94:af:70:af:c6:1e:f0:59:2a:77:e9:da:37:e5:46:
         d5:e3:24:b3:5b:89:f8:e5:29:70:f5:5a:b6:2c:c5:36:35:76:
         e7:4b:b7:1f:cf:27:ed:0e:ea:31:90:90:c7:11:b1:63:f6:6c:
         b3:94:dc:fb:82:1f:d0:aa:bd:34:a8:b9:55:0b:77:a1:ef:31:
         54:5e:24:7f:3b:e8:71:30:d5:6e:90:38:14:7b:40:ae:6a:91:
         42:0d:fd:c6:04:42:52:b9:02:11:e9:c7:20:2d:11:d7:d1:81:
         34:8c:d0:0b:a1:73:c7:4d:c0:c4:2a:81:4f:d3:bc:6c:c9:ed:
         f3:36:9b:f0:3a:0d:b8:f5:10:f4:84:d9:d9:51:27:dd:95:c1:
         39:22:fa:0c:28:44:79:39:6f:0d:e7:cb:5b:6b:43:39:3e:a9:
         35:38:c9:26:f1:ef:b5:8c:c3:86:e7:4e:ca:be:89:b6:51:a1:
         25:4e:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:21:24 2026 by rpki-client