Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/323830343a386331303a3a2f33322d3333203d3e20323733373737.roa
File:                     323830343a386331303a3a2f33322d3333203d3e20323733373737.roa (raw, json)
Hash identifier:          8Ynh8HrsRjxFMWCP9nzBYHkXtlWwDy1s64nxp0Skqss=
Subject key identifier:   6E:EE:21:94:59:8C:12:78:B2:A4:2D:36:B7:F0:E6:E9:60:0C:66:80
Certificate issuer:       /CN=594DBC4D4BE35DF4C01D75A846896EE01336AD4C
Certificate serial:       4BCEAE809E0CFD9BBE637120D1ACF5469086BA39
Authority key identifier: 59:4D:BC:4D:4B:E3:5D:F4:C0:1D:75:A8:46:89:6E:E0:13:36:AD:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/323830343a386331303a3a2f33322d3333203d3e20323733373737.roa
Signing time:             Wed 19 Aug 2026 14:41:54 +0000
ROA not before:           Wed 19 Aug 2026 14:36:54 +0000
ROA not after:            Wed 18 Aug 2027 14:41:54 +0000
asID:                     273777
IP address blocks:        2804:8c10::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.crl
                          rsync://rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:ae:80:9e:0c:fd:9b:be:63:71:20:d1:ac:f5:46:90:86:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594DBC4D4BE35DF4C01D75A846896EE01336AD4C
        Validity
            Not Before: Aug 19 14:36:54 2026 GMT
            Not After : Aug 18 14:41:54 2027 GMT
        Subject: CN=6EEE2194598C1278B2A42D36B7F0E6E9600C6680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:c4:d5:ed:a3:38:7a:28:81:e3:0b:11:0e:
                    af:46:20:ad:7f:fe:fc:e2:6f:6d:6b:82:2f:24:3d:
                    8b:c4:b1:73:ae:34:70:78:59:39:3b:51:9f:93:65:
                    a6:d3:ab:8c:1a:13:46:30:29:9e:fb:a1:fc:c9:04:
                    6a:e4:ed:41:da:fb:17:47:6a:2f:51:f4:db:ab:90:
                    eb:d6:c7:c7:28:3f:85:06:32:aa:b9:3f:40:71:1a:
                    e5:f3:97:cf:c7:eb:32:ca:79:c1:ed:14:73:e8:87:
                    6a:df:35:50:22:5e:02:a8:f8:ee:e2:5f:73:a2:2c:
                    5b:e8:10:1b:01:07:84:76:3a:d2:ce:0b:79:c6:1b:
                    59:47:d4:e1:c8:dd:97:7c:c3:08:7c:68:4e:d7:56:
                    64:66:f5:59:d5:80:44:05:01:23:95:e5:d2:f3:75:
                    1a:4a:12:e5:31:56:a0:86:c6:ef:1f:fb:00:99:7e:
                    0a:ba:0c:8e:3b:27:78:15:a3:90:f8:51:b1:c6:af:
                    dd:92:a2:07:10:e6:11:db:c1:8f:b1:ec:94:6c:f8:
                    c8:25:71:27:c2:b5:3c:e3:ef:cb:68:8e:4f:83:7a:
                    6b:30:bf:cb:e7:02:d5:17:8b:f5:31:8f:07:48:7a:
                    57:8b:42:46:3c:fa:47:3b:ae:ce:6f:2a:3c:98:31:
                    0b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:21:94:59:8C:12:78:B2:A4:2D:36:B7:F0:E6:E9:60:0C:66:80
            X509v3 Authority Key Identifier:
                keyid:59:4D:BC:4D:4B:E3:5D:F4:C0:1D:75:A8:46:89:6E:E0:13:36:AD:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594DBC4D4BE35DF4C01D75A846896EE01336AD4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GacDFAJ5XHzvDzsWhjoz4RxgUDRw9F6wL5M1qQ2QcmpV/0/323830343a386331303a3a2f33322d3333203d3e20323733373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:d0:ea:4f:a4:6c:31:5c:4c:16:ac:20:0f:df:a0:43:ee:
         1d:c9:b6:18:17:74:91:a4:ac:49:0b:1f:37:b3:0c:eb:81:21:
         1a:1c:7c:4c:48:11:02:41:34:37:1d:81:27:a2:48:a5:2b:f7:
         d8:18:19:b9:de:fd:12:50:cb:6f:51:f8:2b:eb:25:04:03:e4:
         12:e8:84:c2:f3:d9:33:bb:1a:b1:42:08:8d:48:27:f8:1a:f8:
         90:ef:78:0c:a8:9a:b0:35:21:db:20:c3:32:20:82:f6:b3:e5:
         18:ff:fa:7d:fc:58:ff:ee:1b:fa:01:e3:3e:ed:d7:5c:eb:3a:
         c1:32:a2:72:55:03:87:67:02:86:85:9f:ec:ee:79:a0:d0:cc:
         29:9e:29:e7:8a:de:d1:b4:ee:85:ac:ce:56:eb:48:79:3f:6e:
         d8:bf:2d:bb:7d:4a:d7:27:d3:c5:4d:6b:5a:02:d4:69:d5:03:
         bd:fa:2c:a7:06:93:6f:b4:0c:23:51:52:05:33:e8:5b:48:1e:
         9b:f3:cf:eb:bb:d4:be:38:68:f2:39:70:37:cb:3a:96:c1:8d:
         aa:0b:a5:87:69:64:bc:bd:c1:6e:6a:7f:e9:9e:67:85:69:3f:
         0f:e9:33:40:89:8e:ef:a5:29:c0:c2:ff:b8:54:0a:75:69:19:
         9d:74:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:31:44 2026 by rpki-client