Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa
File:                     323830343a346332383a3a2f33322d3332203d3e20323637333533.roa (raw, json)
Hash identifier:          GExuvXgHyJQtXdc/15RKsUMHaKqL4nW2H9Mj95B9fgI=
Subject key identifier:   1F:9B:66:98:92:CF:A1:91:C1:78:09:B0:07:15:F1:27:D1:C4:C0:39
Certificate issuer:       /CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
Certificate serial:       2EE69E37BAF9F280CCCC6F4C0AA3D58D4814027D
Authority key identifier: 74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa
Signing time:             Sat 08 Aug 2026 13:21:46 +0000
ROA not before:           Sat 08 Aug 2026 13:16:46 +0000
ROA not after:            Sat 07 Aug 2027 13:21:46 +0000
asID:                     267353
IP address blocks:        2804:4c28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e6:9e:37:ba:f9:f2:80:cc:cc:6f:4c:0a:a3:d5:8d:48:14:02:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817
        Validity
            Not Before: Aug  8 13:16:46 2026 GMT
            Not After : Aug  7 13:21:46 2027 GMT
        Subject: CN=1F9B669892CFA191C17809B00715F127D1C4C039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:81:8f:94:14:b4:e5:5b:c5:bd:3b:a8:84:
                    5d:8b:7d:ee:7b:0f:ba:66:dd:b3:b4:0e:ab:3e:7f:
                    31:14:92:a6:3f:66:9f:30:c0:31:31:53:73:93:71:
                    6f:00:ae:11:65:07:2b:1d:97:4e:86:3c:40:f7:fb:
                    26:91:65:62:8a:bb:2a:f1:f6:dc:de:f9:72:e0:40:
                    71:73:a9:de:3a:09:30:76:ad:9c:10:9e:ef:4b:58:
                    a1:2e:8d:e1:51:26:0b:3d:23:9f:2c:e0:91:25:91:
                    d6:d3:e2:4c:b1:fd:3c:5d:81:50:c3:35:1b:9a:83:
                    7c:88:d0:ae:c5:28:3d:3d:06:fc:cb:e8:c2:c6:05:
                    44:da:79:80:2a:e8:48:92:68:0b:98:8d:d4:32:65:
                    51:37:36:db:c2:fe:4f:6f:1e:99:a4:5a:cb:a1:94:
                    67:94:a0:9d:ca:9f:d4:8e:a3:2c:72:9d:0f:57:aa:
                    7c:94:73:2c:91:37:e3:b3:4a:4c:f1:94:e9:5b:a6:
                    1e:98:2f:93:68:e3:4d:86:0e:e1:86:4f:84:be:e2:
                    17:33:bb:92:41:ec:7c:46:1d:24:4e:fe:a3:51:38:
                    40:07:f7:a2:4c:26:62:e7:d3:92:98:fe:f5:51:92:
                    52:32:cf:f5:74:cb:8d:37:de:62:4e:fa:5d:d5:b6:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:66:98:92:CF:A1:91:C1:78:09:B0:07:15:F1:27:D1:C4:C0:39
            X509v3 Authority Key Identifier:
                keyid:74:47:20:7E:A4:3E:9C:EF:DB:A7:4A:D2:CD:66:F8:9C:E6:AF:98:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7447207EA43E9CEFDBA74AD2CD66F89CE6AF9817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3332203d3e20323637333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c28::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:ef:b9:c9:3a:3d:85:05:bf:c1:eb:50:8e:69:93:ed:a5:
         08:40:8e:de:de:93:3f:ba:2f:cc:5d:59:0d:64:29:1e:43:0d:
         9e:9d:bc:da:22:99:da:cb:2e:de:23:38:9c:34:9a:09:38:ed:
         89:c0:db:fe:36:17:46:e7:d3:53:02:82:75:92:01:7e:7e:a2:
         7e:4d:f1:3b:d4:a4:13:64:25:85:6c:38:8a:39:fa:16:63:06:
         87:ce:7c:6e:76:3d:cb:12:bc:97:02:91:74:6a:6c:ef:4b:45:
         b8:be:de:c2:fd:01:3d:88:1d:fd:56:4e:6f:db:1f:f6:04:0b:
         93:8e:85:9a:fc:d3:de:97:00:ef:70:cf:b5:fd:65:ef:10:0d:
         34:c1:ee:fb:2d:f7:8f:d4:f4:c1:2c:ab:62:e5:94:6b:ab:2b:
         13:4e:e6:df:6b:fa:93:fc:b2:72:ef:31:83:b5:e4:83:fa:78:
         27:33:06:4e:2a:d5:f0:dd:dd:8e:fb:08:4f:12:b7:1b:58:df:
         e1:d8:7b:52:ff:77:36:3d:c4:53:c2:2a:a1:15:fc:4a:5e:69:
         09:19:08:67:3f:5b:6e:2b:e5:7e:e7:c7:d4:e6:5e:a2:7a:1b:
         09:20:6c:f7:f6:14:05:f8:d1:1e:a1:59:ee:79:d0:24:6f:48:
         44:5a:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 13:43:13 2026 by rpki-client