Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a383030303a3a2f33332d3333203d3e20323632333532.roa
File:                     323830343a3832303a383030303a3a2f33332d3333203d3e20323632333532.roa (raw, json)
Hash identifier:          5tj5YRfSRbUogjp/pT62N5K3i5s5ZuX449gjjPvVZMI=
Subject key identifier:   45:C0:52:78:60:03:33:E3:5F:74:37:79:82:43:46:20:63:D4:F0:58
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       07DE0ACD0789B6EDE84BA66C9C931BE9C1916358
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a383030303a3a2f33332d3333203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:46 +0000
ROA not before:           Wed 08 Jul 2026 01:30:46 +0000
ROA not after:            Wed 07 Jul 2027 01:35:46 +0000
asID:                     262352
IP address blocks:        2804:820:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:de:0a:cd:07:89:b6:ed:e8:4b:a6:6c:9c:93:1b:e9:c1:91:63:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:46 2026 GMT
            Not After : Jul  7 01:35:46 2027 GMT
        Subject: CN=45C05278600333E35F7437798243462063D4F058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:e3:bf:ce:f9:ab:cd:1e:50:66:cb:00:22:
                    90:01:b2:94:80:fb:82:9c:bd:4e:55:c5:b4:b9:80:
                    20:79:5d:c1:35:d8:4e:5d:05:e6:5f:a4:dd:59:33:
                    77:f0:b5:a8:45:b4:ad:d1:89:3f:59:82:7e:bb:d6:
                    1e:61:f9:78:4d:cd:7f:0c:76:4c:5c:d1:fc:40:ea:
                    36:b3:c9:72:0f:9a:c5:50:19:6c:a4:6f:52:d7:2f:
                    c9:1f:15:47:72:fa:21:26:75:f1:0a:31:4a:ce:d5:
                    b1:3b:78:18:f9:9b:b6:4a:58:de:63:59:1a:60:81:
                    31:98:78:3b:16:14:5d:b5:01:c5:43:40:cb:b6:ac:
                    24:16:6f:c6:18:a4:a9:3b:a5:57:b2:0e:54:ed:55:
                    61:88:77:ec:10:60:6a:39:23:b5:8d:cb:ff:e7:b6:
                    f4:02:06:8c:4f:18:be:5e:6c:11:10:ee:c0:08:32:
                    6a:c2:30:99:2f:5f:ff:58:7a:8f:2a:02:2f:d6:d9:
                    d3:bf:ac:c3:a8:8f:80:3a:5b:df:a1:a9:db:91:d4:
                    27:5e:79:ba:05:49:6d:f4:98:a3:c1:f3:0d:90:7c:
                    54:ff:4a:43:66:08:e6:3f:bc:64:25:f2:78:a9:27:
                    9e:03:f5:18:44:ca:1c:3a:7d:b3:09:00:a9:f7:76:
                    4f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:52:78:60:03:33:E3:5F:74:37:79:82:43:46:20:63:D4:F0:58
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a383030303a3a2f33332d3333203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:fd:cf:c6:fb:4f:3f:f3:98:0a:f0:a1:85:7d:9d:b8:19:f9:
         a7:fc:d1:6b:45:7d:d9:83:01:90:a4:f3:6c:16:07:2d:c1:46:
         15:a1:db:2b:46:d4:c3:96:bf:d7:4a:b0:93:f6:e8:ea:47:4b:
         01:10:e2:22:e7:20:d1:78:29:24:8e:12:6c:3d:7c:94:21:1b:
         67:c7:a5:f1:24:2d:76:e9:12:d6:d9:1e:94:b3:10:78:19:27:
         0b:b2:c0:93:c8:9a:06:c2:0c:21:a1:ad:08:9b:94:0b:08:53:
         b2:ec:0f:e7:e6:c1:c8:79:e5:b0:42:94:c7:94:ea:4f:b5:9f:
         ad:a9:fb:e8:f6:80:5f:84:24:04:b2:7f:15:65:5a:72:e8:5f:
         aa:b2:b2:02:85:7c:de:c3:18:1b:48:8e:31:67:a6:9d:0b:83:
         d3:5d:6d:25:d5:2b:4d:d4:9b:f2:69:91:3c:a8:64:44:67:98:
         4d:a1:9e:85:be:e7:80:b3:64:8a:57:d5:8c:e4:80:d1:38:23:
         d1:ae:0c:4a:97:34:c5:43:75:99:72:af:31:13:b8:ba:2e:2e:
         fb:70:77:21:4f:62:55:b9:d0:67:d0:03:e7:c8:5c:db:ec:92:
         63:54:0e:94:f2:f9:2d:7d:17:95:ed:53:a3:ad:73:1f:36:a4:
         ab:63:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:56:48 2026 by rpki-client