Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/323830343a393930303a3a2f33322d3438203d3e20323735373530.roa
File:                     323830343a393930303a3a2f33322d3438203d3e20323735373530.roa (raw, json)
Hash identifier:          sqIH5wyRgWfbedRoFOji9JIH/kbYdm2Eba6cinZef2s=
Subject key identifier:   A9:DA:7C:88:9F:0D:AB:54:62:2E:95:3F:72:9E:7D:34:EA:0F:80:23
Certificate issuer:       /CN=C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E
Certificate serial:       0D06CFE40EEEBF639B7ED309CBFFDB8FF75C6F6B
Authority key identifier: C6:B7:A2:9C:93:96:D2:3A:8E:E6:F5:7D:F2:36:F0:7C:90:BF:7C:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/323830343a393930303a3a2f33322d3438203d3e20323735373530.roa
Signing time:             Wed 29 Jul 2026 14:39:54 +0000
ROA not before:           Wed 29 Jul 2026 14:34:54 +0000
ROA not after:            Wed 28 Jul 2027 14:39:54 +0000
asID:                     275750
IP address blocks:        2804:9900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.crl
                          rsync://rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:06:cf:e4:0e:ee:bf:63:9b:7e:d3:09:cb:ff:db:8f:f7:5c:6f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E
        Validity
            Not Before: Jul 29 14:34:54 2026 GMT
            Not After : Jul 28 14:39:54 2027 GMT
        Subject: CN=A9DA7C889F0DAB54622E953F729E7D34EA0F8023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:50:44:73:e4:a5:9e:ae:eb:05:f4:b2:cf:
                    22:40:27:aa:ed:18:e0:62:16:57:85:61:07:1d:82:
                    61:5f:2f:36:e8:ab:11:7a:9b:9c:11:d1:cc:0d:11:
                    f6:e3:04:d4:c9:c6:dc:a2:fd:ef:16:98:f2:3d:f3:
                    48:0b:01:03:48:ba:6c:ee:60:8f:2d:cb:c3:e6:84:
                    f4:d3:fd:33:58:05:b8:e4:7f:bd:aa:24:00:76:4f:
                    cc:2c:60:1b:b2:0c:47:36:fe:b9:e5:3d:e4:6f:ff:
                    c3:0c:8a:48:9f:73:d3:ef:5f:35:e4:1d:56:41:f8:
                    f3:f5:ee:73:e0:38:b4:51:f6:db:37:8a:bd:c8:39:
                    3e:35:48:d9:14:81:7c:11:d5:a4:e6:35:03:f8:40:
                    cf:8a:9b:cc:ca:f9:5e:61:1e:b5:cf:ba:30:c2:7d:
                    89:04:bf:8c:cf:f1:8b:28:f1:09:ab:55:2c:a3:0e:
                    ad:90:77:71:a5:39:56:8e:a7:26:08:ab:c5:6e:f0:
                    2b:ab:3f:c6:42:98:54:36:de:4b:35:31:7c:f8:e7:
                    a9:9e:b6:f2:65:b6:78:e6:32:e2:b7:fd:cf:4e:f3:
                    80:bb:5f:41:30:53:8e:dc:a0:08:a8:2b:f4:28:84:
                    6b:16:8a:27:2d:7a:59:23:4e:38:c3:ee:eb:b2:ff:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:7C:88:9F:0D:AB:54:62:2E:95:3F:72:9E:7D:34:EA:0F:80:23
            X509v3 Authority Key Identifier:
                keyid:C6:B7:A2:9C:93:96:D2:3A:8E:E6:F5:7D:F2:36:F0:7C:90:BF:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B7A29C9396D23A8EE6F57DF236F07C90BF7C6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtKDXQ1RedatnLtgKXapiuUVkym8eaeXF8hLohWjzKYe/0/323830343a393930303a3a2f33322d3438203d3e20323735373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9900::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:c5:b4:48:f5:df:02:c3:5f:ef:8f:8d:78:e0:8f:22:50:
         ec:6d:64:60:26:31:b6:0e:81:33:aa:32:5a:a1:65:86:8d:35:
         c9:25:61:ca:be:60:c6:03:b2:85:67:57:89:3b:b4:68:84:c9:
         b2:cc:53:2a:5e:dc:62:f1:d2:25:35:53:fa:a8:c9:aa:6f:01:
         c7:b4:c7:ba:67:0c:66:6d:4c:20:d4:42:13:68:53:37:29:cd:
         67:0d:cf:66:97:bf:dc:25:e3:65:e0:15:6d:bc:07:4c:40:08:
         1a:27:e7:1e:24:f2:cd:05:98:0d:1f:3b:7b:81:d3:ef:53:ea:
         6f:36:8a:e5:64:e5:63:74:b4:78:0e:92:b1:00:0f:cd:ac:bf:
         3b:0c:47:55:75:19:09:27:42:17:29:5f:cb:80:78:d7:5d:4c:
         11:c2:0e:4c:d2:6c:98:44:d8:d3:f1:68:9d:f7:1d:ad:11:79:
         4d:43:99:ae:b2:62:41:b1:ad:c6:a5:01:ff:62:86:da:c1:c5:
         16:c0:c4:ff:76:29:9f:3f:6b:ff:dd:61:a2:c1:3f:97:e9:51:
         08:62:1a:80:de:99:1b:f9:da:20:57:14:d2:cc:36:fb:1c:de:
         64:a1:e2:3f:b9:d3:67:19:96:99:b5:86:e6:0a:88:19:fb:01:
         aa:66:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:27:32 2026 by rpki-client