Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a663730303a3a2f34302d3430203d3e20323632333532.roa
File:                     323830343a3832303a663730303a3a2f34302d3430203d3e20323632333532.roa (raw, json)
Hash identifier:          26El14dEYHEYvBVIkZYhoALQTRS5fCHv+BYWMQQNOlg=
Subject key identifier:   DD:E1:9B:E3:19:3E:FA:36:D7:45:11:EE:F1:3B:85:44:A0:9C:4E:F5
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       443E3A459E5123F983D22E7E9820D9FF247801C8
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a663730303a3a2f34302d3430203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:45 +0000
ROA not before:           Wed 08 Jul 2026 01:30:45 +0000
ROA not after:            Wed 07 Jul 2027 01:35:45 +0000
asID:                     262352
IP address blocks:        2804:820:f700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:3a:45:9e:51:23:f9:83:d2:2e:7e:98:20:d9:ff:24:78:01:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:45 2026 GMT
            Not After : Jul  7 01:35:45 2027 GMT
        Subject: CN=DDE19BE3193EFA36D74511EEF13B8544A09C4EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8f:a8:08:13:fd:4b:26:8a:ed:c8:16:c9:e4:
                    f6:05:50:4d:27:38:e2:a3:6c:38:c1:8f:ae:a4:1b:
                    30:48:73:96:c1:20:74:0c:1d:ba:12:e8:42:73:34:
                    20:d6:fb:ff:37:6e:12:6d:7a:00:2c:f8:ee:61:44:
                    25:7c:2a:d4:fe:8e:a2:b7:ab:5c:a0:08:b6:b7:84:
                    4a:19:c8:62:89:00:63:6b:d6:63:45:3b:38:3a:d1:
                    73:5c:aa:ce:2a:c2:69:bf:7c:72:c8:d4:3d:76:0d:
                    f7:e4:d8:8f:64:63:a7:72:9f:4a:d7:f0:7c:d0:15:
                    31:98:8b:11:00:1b:6c:e7:8d:19:d2:10:5a:72:ed:
                    18:f2:fe:bb:4f:fd:13:fd:16:2a:4d:6c:f0:8b:5f:
                    a8:6f:58:5b:0f:a5:ac:0b:3a:21:fd:83:48:98:4a:
                    ad:4b:9f:ff:90:1b:66:d3:d0:d8:1d:85:0a:a8:9b:
                    ee:30:95:ee:28:cd:13:69:7f:b9:20:19:64:75:32:
                    8e:39:5c:69:59:0a:cf:ce:5d:8e:df:3c:ee:99:e9:
                    e1:50:e3:80:0d:cf:d5:31:51:88:f3:72:c4:0a:07:
                    e7:56:41:81:97:09:d4:ea:49:a2:0b:ee:2a:ba:43:
                    54:cf:e5:1e:9a:4b:6c:ca:21:70:04:a1:73:5d:57:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:9B:E3:19:3E:FA:36:D7:45:11:EE:F1:3B:85:44:A0:9C:4E:F5
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/323830343a3832303a663730303a3a2f34302d3430203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:f2:f2:51:1c:d1:00:b4:0e:b0:0d:10:08:dd:e6:ae:b5:
         15:6f:4b:2c:d8:00:58:90:f4:56:cd:72:40:21:09:06:ef:82:
         9a:99:48:fa:77:8f:2b:e0:d3:3f:29:89:b7:7b:e8:e9:88:56:
         6f:e5:4d:56:79:99:c3:77:7a:e8:8b:06:be:3d:82:11:27:ec:
         65:36:b9:1d:b3:3f:22:e4:4a:a0:21:ea:25:28:1d:c0:61:7e:
         11:73:ed:77:28:dc:70:5d:17:a0:c1:ac:c9:52:b0:3f:2f:50:
         9b:39:7c:1d:19:d2:44:0c:1b:56:26:4e:bc:09:da:51:26:bd:
         c7:06:95:a9:b8:6a:f9:a4:d3:8f:75:f4:43:4e:2a:9a:d6:a1:
         28:fa:20:88:9e:8e:56:0a:98:2f:10:23:4d:74:ad:f8:cf:29:
         4c:89:44:87:53:2b:75:d8:89:6a:66:8c:83:ac:df:b2:39:26:
         46:10:a7:74:61:e4:6c:3e:bf:f8:18:c5:db:ac:a2:bf:dd:17:
         38:d7:ca:60:f5:cc:d3:d2:72:56:76:8f:d5:ba:65:11:3d:8b:
         f8:58:b1:39:5d:bd:c1:07:b9:f3:2b:36:3e:f4:b9:d9:69:23:
         be:1b:9d:2f:da:4f:ef:b7:f9:28:e6:b0:8e:7b:69:79:88:c5:
         04:10:2c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:56:44 2026 by rpki-client