Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa
File:                     323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa (raw, json)
Hash identifier:          g9bO9Z0kWBNFy1g+jrPS8umEbUrK4XIJ/sx6+K73bGA=
Subject key identifier:   66:D7:C3:C3:4F:05:5A:60:7B:62:E0:EB:E5:B4:A1:C1:67:97:3D:CF
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       6ECC63F90C48A5EF6529EB6FBCE45FBDC0FC035D
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa
Signing time:             Wed 12 Aug 2026 13:04:19 +0000
ROA not before:           Wed 12 Aug 2026 12:59:19 +0000
ROA not after:            Wed 11 Aug 2027 13:04:19 +0000
asID:                     271111
IP address blocks:        2804:766c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cc:63:f9:0c:48:a5:ef:65:29:eb:6f:bc:e4:5f:bd:c0:fc:03:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Aug 12 12:59:19 2026 GMT
            Not After : Aug 11 13:04:19 2027 GMT
        Subject: CN=66D7C3C34F055A607B62E0EBE5B4A1C167973DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:f2:25:98:29:31:cd:0b:95:a3:83:12:14:
                    a7:5a:d7:c5:cb:dd:23:cb:e4:b8:75:8c:55:0f:59:
                    4c:da:83:62:39:b2:6f:87:9a:1c:0e:0b:c4:ed:99:
                    5e:12:bf:76:f3:aa:dd:dc:de:4d:df:d9:d7:a8:3e:
                    2c:da:e2:cd:01:cb:7f:cd:2b:86:df:e4:ba:2d:a5:
                    4d:a1:69:bc:06:5c:a9:5a:2e:0d:24:b3:7d:bc:0a:
                    8f:d0:b0:f2:10:32:14:eb:47:65:a4:58:90:13:c7:
                    c7:a7:29:27:ec:84:38:b3:ce:20:3f:ea:a3:7a:aa:
                    97:36:a1:a7:70:7d:12:df:99:bc:74:29:b6:e2:a6:
                    aa:cd:ca:76:30:14:2e:21:b5:73:f7:97:1d:43:83:
                    58:d8:ad:d4:6c:c9:50:2a:37:3c:8f:94:42:b0:22:
                    cc:44:57:8d:35:b9:42:e8:cb:0a:21:ae:91:ff:38:
                    ca:ab:64:9c:e4:80:87:4f:9b:90:d4:39:a5:1d:bf:
                    b1:b3:3f:e4:6f:91:e1:0d:0c:90:31:fd:3e:97:1a:
                    7c:d9:a6:50:1a:a0:d8:4d:b1:1a:76:cc:dd:f8:d2:
                    3b:fe:cd:05:01:63:a0:02:34:34:9d:c9:5e:92:57:
                    09:d9:65:e8:e9:75:70:8f:9b:ae:bd:5d:43:d8:5a:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D7:C3:C3:4F:05:5A:60:7B:62:E0:EB:E5:B4:A1:C1:67:97:3D:CF
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a383030303a3a2f33332d3333203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ba:ee:75:30:d7:12:5a:19:2d:db:6d:02:3f:15:28:93:38:ad:
         3c:b5:66:b0:46:6e:5f:2c:a1:c4:ad:82:7d:26:8c:27:f0:5b:
         9a:b3:9f:cf:2a:81:6a:e3:9d:b2:1c:6e:4c:5a:eb:e9:0e:61:
         d4:97:ed:01:90:56:35:4f:f6:e8:1d:bf:45:bb:ba:a8:51:1a:
         4d:6e:b6:2b:af:95:4c:57:2d:6d:29:c8:02:af:8e:ff:44:20:
         cd:13:dd:71:24:c7:62:d6:52:2b:ca:0d:a3:23:c2:16:e3:60:
         9a:48:fd:7b:63:d6:7d:2f:ec:6e:94:2c:ab:b1:49:fa:2f:ca:
         04:8e:33:53:a2:3b:b2:db:fe:0a:f7:96:d9:e8:4a:8c:6f:75:
         de:51:d3:1a:b0:13:f2:dc:9b:09:8a:96:f0:86:ad:a7:a7:e3:
         a1:c6:ef:a0:b1:22:cc:c2:58:17:68:c5:76:88:5b:85:57:0d:
         4f:3b:d4:63:1c:47:06:07:10:ec:01:4c:97:fc:97:39:a3:ec:
         1a:6b:8d:a3:1f:76:73:1c:5b:77:fe:30:27:fa:a8:f6:a3:c3:
         3a:58:ca:c7:0c:df:8d:b8:98:d2:bf:05:7b:2f:92:e4:ef:cd:
         fc:66:18:65:a4:70:8d:4f:55:a4:f0:c0:3f:52:fd:86:b1:2b:
         dc:b3:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:23:40 2026 by rpki-client