Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
File:                     323830343a3832303a3a2f33322d3332203d3e20323632333532.roa (raw, json)
Hash identifier:          GHbNJ/pz/62AAVACuUJSLhs0cfreZDrJhiGBNF7XyJc=
Subject key identifier:   27:47:82:F9:8F:D1:AA:33:76:E5:98:DD:9D:3A:5C:96:EF:9B:F8:13
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       5F24A0D6CC1F1B7D4CD4FE42F68138DC6205A795
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:46 +0000
ROA not before:           Wed 08 Jul 2026 01:30:46 +0000
ROA not after:            Wed 07 Jul 2027 01:35:46 +0000
asID:                     262352
IP address blocks:        2804:820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:24:a0:d6:cc:1f:1b:7d:4c:d4:fe:42:f6:81:38:dc:62:05:a7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:46 2026 GMT
            Not After : Jul  7 01:35:46 2027 GMT
        Subject: CN=274782F98FD1AA3376E598DD9D3A5C96EF9BF813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:4c:a5:1e:f6:0c:40:c9:6e:83:94:5b:c3:
                    af:8f:9c:b6:56:cf:b7:b9:93:48:6a:96:1d:6b:52:
                    a0:31:86:99:60:1d:61:80:bf:d6:18:84:57:dd:2d:
                    9a:ce:9a:72:8e:d0:43:e5:71:29:89:7d:31:e6:58:
                    b6:1c:7a:98:d2:d2:44:da:7c:5a:34:03:c6:6a:5b:
                    e1:24:7d:fa:2c:f7:7d:95:34:f2:dc:0f:00:dd:86:
                    11:bf:a6:57:24:db:57:eb:97:2c:0c:53:ee:93:4f:
                    d4:10:09:f5:27:56:29:4a:61:9d:23:96:76:e3:7f:
                    89:96:e9:af:33:24:31:4a:75:55:bc:69:a0:fc:f4:
                    62:9b:36:97:61:b0:87:28:82:c1:51:e2:b3:4d:54:
                    7a:7a:9f:d6:fd:b1:e9:e6:36:10:1e:69:ac:d8:62:
                    32:ad:e2:c1:94:f5:02:5c:19:2d:32:9b:97:12:48:
                    78:31:48:2e:f4:a7:e4:4f:39:c6:5b:2d:bb:e7:8b:
                    7d:ba:b1:26:e4:d1:3c:96:b1:33:17:92:20:46:cc:
                    f5:f9:ac:49:b2:51:91:a2:bf:21:eb:39:77:fd:3f:
                    ae:c4:81:27:18:6d:70:d6:9c:b4:3b:90:5c:a7:6e:
                    d3:33:20:15:6c:74:2e:b7:cb:c8:a3:cf:4c:dc:e8:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:47:82:F9:8F:D1:AA:33:76:E5:98:DD:9D:3A:5C:96:EF:9B:F8:13
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:39:18:ad:f3:f0:e3:15:57:42:36:fd:39:22:4a:f3:30:2c:
         82:4a:39:51:ba:c4:e6:07:1c:b3:3a:6e:5b:3f:60:7f:e6:4d:
         2e:1a:31:e7:e6:64:52:8a:8d:38:56:b2:b3:a1:0d:46:0a:fc:
         9b:60:aa:fa:aa:7f:af:02:95:4b:5c:b8:e8:94:da:20:71:9f:
         f5:07:19:f1:13:71:9b:c3:a1:0b:3e:28:30:5c:99:6e:10:8c:
         8c:2c:54:0d:39:0e:ae:7f:1d:b3:3b:af:f7:ee:11:30:5c:8a:
         d9:7f:e8:af:b3:4e:29:ce:ef:17:76:b4:1d:f5:a8:20:cb:a0:
         3d:15:57:d8:5f:3e:ca:27:50:4f:ed:f2:3e:40:97:fe:cf:9a:
         e8:95:e8:99:67:53:f7:37:c5:8e:96:a7:00:c7:0c:e0:63:07:
         47:34:5d:76:f3:71:d0:47:62:67:7c:92:6a:e0:90:1b:83:68:
         59:92:c4:4e:08:c0:2f:af:03:1e:55:95:70:30:16:00:08:88:
         fa:c7:b7:d0:50:3c:e5:62:e1:69:17:a5:42:6f:f9:10:43:cb:
         e0:e0:7e:bb:b9:1b:24:8f:73:83:83:40:38:62:34:b6:27:24:
         4b:a6:dd:36:6c:de:ef:ce:e9:40:d1:1f:42:72:5c:9b:3a:2a:
         bd:3f:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:01:25 2026 by rpki-client