Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa
File:                     323830343a323362383a3a2f33322d3332203d3e203631353834.roa (raw, json)
Hash identifier:          tIveVCx/p5EKG4cs25mIcXsln73lA7EpacljHvtE6hc=
Subject key identifier:   DB:18:97:2F:73:6D:6B:58:5C:7F:9E:11:CC:22:E3:81:73:E0:80:ED
Certificate issuer:       /CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
Certificate serial:       1B023F57E763936495D6090E9796779284F835FD
Authority key identifier: 6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa
Signing time:             Thu 03 Sep 2026 17:35:44 +0000
ROA not before:           Thu 03 Sep 2026 17:30:44 +0000
ROA not after:            Thu 02 Sep 2027 17:35:44 +0000
asID:                     61584
IP address blocks:        2804:23b8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:3f:57:e7:63:93:64:95:d6:09:0e:97:96:77:92:84:f8:35:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF
        Validity
            Not Before: Sep  3 17:30:44 2026 GMT
            Not After : Sep  2 17:35:44 2027 GMT
        Subject: CN=DB18972F736D6B585C7F9E11CC22E38173E080ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:de:41:3f:ae:74:65:08:b9:97:c1:18:64:
                    c6:48:46:67:86:9c:92:77:fe:c7:f3:fb:82:cb:75:
                    f6:b0:27:68:27:e8:c2:50:d6:c5:76:23:64:39:d7:
                    9f:93:d7:5c:fe:b7:71:e1:c8:2d:61:64:f3:27:b1:
                    33:9e:eb:a5:fe:48:b2:5d:93:35:c0:9f:05:7e:d7:
                    bb:83:f7:8c:0a:bb:dd:10:63:a2:d4:bf:a5:2f:a8:
                    7b:ca:8c:cb:3a:39:d4:43:56:9d:33:d3:22:d4:f4:
                    11:e9:7c:7f:8c:28:b7:37:37:7c:26:b8:7a:0e:6d:
                    70:c8:0a:5f:96:8d:7b:e7:25:db:1c:a0:34:21:77:
                    19:04:05:62:1e:cd:fd:ab:b1:30:3d:c9:2b:5d:40:
                    93:8f:55:18:cc:11:da:19:b6:cb:b2:ce:ae:d4:b8:
                    5a:33:42:16:e4:2e:19:16:6f:83:dd:4a:bd:a2:33:
                    89:91:0b:e8:13:0e:58:d9:89:55:e2:07:13:03:d9:
                    05:44:07:8a:0a:08:f2:63:44:1d:fa:e8:ab:f3:48:
                    38:71:a2:6e:bc:c2:06:31:03:d8:94:2f:3b:22:ae:
                    37:b6:44:b6:a6:d8:a2:6b:7a:26:6b:95:e2:46:a0:
                    a2:c3:d2:7a:99:4e:9e:db:3d:9d:5c:c9:1b:80:77:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:97:2F:73:6D:6B:58:5C:7F:9E:11:CC:22:E3:81:73:E0:80:ED
            X509v3 Authority Key Identifier:
                keyid:6B:24:2A:88:18:C8:9D:2D:D9:D2:25:1A:26:FF:AE:F0:F5:9C:80:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B242A8818C89D2DD9D2251A26FFAEF0F59C80FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/323830343a323362383a3a2f33322d3332203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:dc:5e:75:14:bc:70:5e:39:c7:7c:a9:97:ea:58:26:a4:
         c7:dd:d3:e0:09:b4:72:3a:eb:47:f5:3c:ed:ca:a8:ff:78:28:
         13:7e:dd:fb:7f:57:d7:5a:28:2a:93:05:9e:8d:91:c9:41:35:
         27:7e:4a:e8:12:18:38:3b:bb:b7:be:9f:1b:16:e7:a3:40:7e:
         50:b6:9f:ea:f7:5d:ef:2e:93:a7:85:fd:b7:4b:31:d1:9b:18:
         b2:2f:4a:b6:d4:f9:96:f4:13:56:17:f9:29:ce:74:cb:d3:57:
         b7:9c:2e:32:a3:2b:28:1d:b5:d0:39:7a:05:67:66:8d:2a:a3:
         8c:b7:67:32:54:2d:03:ee:28:bc:8f:eb:6e:4d:de:63:1c:9d:
         76:86:07:ea:71:1b:f9:d3:09:da:18:50:b4:fe:76:0e:de:45:
         bc:e5:53:ff:ef:3f:74:5e:04:5c:70:7a:1a:77:35:81:27:cc:
         c4:f1:18:8c:87:0a:e8:5d:a9:0d:eb:65:31:91:1c:8a:ef:4b:
         57:e4:50:74:05:a0:03:0b:92:7c:ab:dc:8b:59:ef:d0:a1:02:
         ff:64:14:dc:d8:15:a0:a2:a9:a4:9b:c5:20:44:77:2f:14:6a:
         7f:f6:6c:1c:9a:d7:4a:a4:28:d2:39:fc:85:f7:4a:b9:93:7e:
         d9:f0:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:32:58 2026 by rpki-client