Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323230303a3a2f34302d3430203d3e20323638373838.roa
File:                     323830343a356161633a323230303a3a2f34302d3430203d3e20323638373838.roa (raw, json)
Hash identifier:          PmxVzHwKnpwBMvnWaD8LRn7+3ZqH7l2LtO/px1fSpGg=
Subject key identifier:   37:BE:68:85:27:60:00:B2:95:86:F5:80:E8:C6:DF:3C:25:DB:99:3A
Certificate issuer:       /CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
Certificate serial:       5F576FF3EBC064250C5ED1B98B491268AB554059
Authority key identifier: 6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323230303a3a2f34302d3430203d3e20323638373838.roa
Signing time:             Thu 13 Aug 2026 19:45:43 +0000
ROA not before:           Thu 13 Aug 2026 19:40:43 +0000
ROA not after:            Thu 12 Aug 2027 19:45:43 +0000
asID:                     268788
IP address blocks:        2804:5aac:2200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl
                          rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 11:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:57:6f:f3:eb:c0:64:25:0c:5e:d1:b9:8b:49:12:68:ab:55:40:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42EE55DCD4D77A4A09DD35981E1005EC120183
        Validity
            Not Before: Aug 13 19:40:43 2026 GMT
            Not After : Aug 12 19:45:43 2027 GMT
        Subject: CN=37BE6885276000B29586F580E8C6DF3C25DB993A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:9d:d7:14:46:ce:ad:8d:b6:26:6d:9d:78:
                    1f:05:b5:46:63:4e:72:74:ea:bb:95:fd:7b:1e:0d:
                    37:28:dc:cf:af:37:3a:6c:be:83:de:3f:5a:a4:8f:
                    9f:05:e6:4f:34:ec:2b:6c:5c:f4:2d:d3:8a:0d:7b:
                    97:01:4e:be:d4:69:bc:10:33:de:56:ce:94:b2:0c:
                    3c:21:ba:ca:7f:27:7f:69:7f:89:d4:43:66:c8:5a:
                    bc:83:e0:20:23:0d:84:f5:6b:33:66:06:98:24:c4:
                    14:eb:77:33:2f:c8:ed:43:8c:f4:16:ed:23:ef:c6:
                    fd:26:eb:44:93:f1:cb:a8:cf:93:e9:3e:92:d8:f5:
                    1b:0d:3d:0a:07:e4:8c:c2:ca:e0:b9:6a:c5:f0:c3:
                    04:85:a3:f5:c9:a3:95:cb:74:f1:d1:14:dc:9b:6a:
                    28:52:a6:58:cc:f3:44:b9:44:1b:b4:73:03:03:68:
                    d3:98:fc:5a:ae:53:90:e9:16:6a:25:53:bc:29:f3:
                    93:f3:90:00:7a:d5:ef:5f:35:e7:66:04:8c:07:e8:
                    64:8a:50:df:84:7f:68:50:27:14:0a:73:19:7c:b7:
                    6c:10:af:07:6b:e9:81:f5:31:77:b0:9d:5c:05:83:
                    e5:fb:7e:7d:9b:17:e4:19:63:11:5f:fa:54:14:be:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BE:68:85:27:60:00:B2:95:86:F5:80:E8:C6:DF:3C:25:DB:99:3A
            X509v3 Authority Key Identifier:
                keyid:6D:42:EE:55:DC:D4:D7:7A:4A:09:DD:35:98:1E:10:05:EC:12:01:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/6D42EE55DCD4D77A4A09DD35981E1005EC120183.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D42EE55DCD4D77A4A09DD35981E1005EC120183.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/323830343a356161633a323230303a3a2f34302d3430203d3e20323638373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aac:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:aa:04:f3:58:f4:d1:a1:64:28:6e:51:e0:27:2e:6c:18:55:
         8d:ba:38:88:04:57:f3:6c:cd:c9:e2:f0:82:cb:6b:e4:a1:b3:
         dc:24:ed:cf:f2:9d:94:5a:d0:56:bf:a7:7b:a0:63:2b:81:c3:
         1b:53:4e:24:25:21:0b:f3:98:9a:41:a9:73:d9:19:3c:93:c3:
         c1:ef:25:40:d2:7e:bd:69:b6:29:8f:d0:59:97:32:e7:a2:45:
         c8:6e:05:58:7d:fa:ed:88:cd:a4:1f:fd:df:d2:92:0c:bd:6c:
         9b:ae:c5:ee:8e:95:c8:4b:f9:31:79:59:d0:9d:af:e5:87:cb:
         06:09:bd:6f:72:63:85:d8:60:1f:43:fe:cd:f8:dc:99:74:40:
         cb:0d:e5:45:c7:48:b0:85:c1:a1:a7:3e:c8:5c:ef:7e:e6:72:
         fc:be:41:61:0a:14:85:59:ef:8c:3b:01:b2:39:40:36:e1:d6:
         33:f8:2a:ac:a3:54:dd:87:46:f6:74:b7:3d:88:0c:56:42:b7:
         4c:70:38:ca:98:e3:bb:75:14:77:38:bf:f6:b6:8d:53:c6:5d:
         3a:6b:f0:bc:02:62:33:05:d1:51:76:06:aa:01:1e:af:88:c3:
         29:46:37:7e:dc:33:a7:58:e1:2a:01:34:6f:5b:a9:8d:f8:8e:
         c4:f8:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 01:03:26 2026 by rpki-client