Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa
File:                     323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa (raw, json)
Hash identifier:          ZRwz7kbX0Y7T2pLz2qzQ/JvCppZP1WLgMRRZQXzlsp0=
Subject key identifier:   7C:21:D8:57:98:01:8F:45:A0:C2:4B:E6:A0:D7:AC:7B:56:33:CC:41
Certificate issuer:       /CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
Certificate serial:       32B504965D650603C250D793460FB0C43AA584A2
Authority key identifier: D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa
Signing time:             Thu 18 Jun 2026 15:14:08 +0000
ROA not before:           Thu 18 Jun 2026 15:09:08 +0000
ROA not after:            Thu 17 Jun 2027 15:14:08 +0000
asID:                     266142
IP address blocks:        2804:3b54:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:04:96:5d:65:06:03:c2:50:d7:93:46:0f:b0:c4:3a:a5:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
        Validity
            Not Before: Jun 18 15:09:08 2026 GMT
            Not After : Jun 17 15:14:08 2027 GMT
        Subject: CN=7C21D85798018F45A0C24BE6A0D7AC7B5633CC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:5e:b2:89:98:d3:32:02:2f:c2:f8:19:f0:
                    7a:0b:ac:94:37:c3:5b:57:3a:23:84:83:7b:c3:fe:
                    b7:3c:51:aa:10:16:55:90:38:07:40:ed:0f:0c:13:
                    de:a7:b9:e1:01:98:f1:c7:cc:d7:ab:e6:23:17:44:
                    83:57:0b:61:2d:d4:59:cf:20:21:20:58:5a:9a:fa:
                    9c:3d:bf:e6:61:3e:94:2e:17:32:99:0d:53:04:c2:
                    80:22:d6:32:be:63:81:02:be:0b:76:7c:7f:0a:b2:
                    35:88:04:ed:91:1e:79:9b:3c:61:3a:13:aa:a4:b0:
                    2b:c1:97:6a:4f:22:59:a8:a1:a2:93:d8:46:50:fb:
                    15:e3:d8:80:ee:77:e3:ae:d2:16:4e:fd:ea:93:e6:
                    54:b2:0f:20:3b:70:99:9e:b0:37:6d:b0:3d:11:73:
                    fd:b9:19:f8:97:70:9c:24:39:ff:07:3e:18:a4:05:
                    3b:8b:d2:72:0e:2c:d1:fe:cd:ee:ec:c0:50:c4:7e:
                    ef:88:0a:71:57:5c:a5:e5:bd:8c:ca:60:a5:20:22:
                    4f:47:1f:7b:d8:d0:aa:71:61:a4:69:cf:c5:cc:fe:
                    ae:fe:f2:fc:d1:a1:1f:63:55:29:87:f9:8d:e5:12:
                    fe:d0:15:39:24:04:c3:56:f1:7a:9b:ee:be:ec:1f:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:21:D8:57:98:01:8F:45:A0:C2:4B:E6:A0:D7:AC:7B:56:33:CC:41
            X509v3 Authority Key Identifier:
                keyid:D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/323830343a336235343a383030303a3a2f33342d3334203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b54:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:28:1b:eb:67:30:e2:9b:18:dc:2e:71:9e:62:95:8d:39:3b:
         2d:28:be:41:91:d6:0e:91:9b:61:5f:69:0d:28:b3:87:a2:87:
         0b:2d:2f:5c:83:1d:d9:48:75:f4:6d:a5:89:15:78:b3:2d:2d:
         8e:20:7b:75:6e:95:e8:90:7e:93:51:14:76:9a:66:ee:d9:3a:
         ef:68:e6:81:57:3d:bd:07:70:ee:0f:b3:9f:15:e3:06:9d:72:
         4e:a9:0d:ba:33:d1:ea:54:b8:28:38:0a:cc:44:3e:f6:85:7b:
         41:bc:16:ab:72:19:6d:42:9f:73:7a:82:3e:2e:90:57:01:e8:
         51:6c:1b:7c:f6:8f:d5:18:da:99:22:86:bc:1d:3f:7f:da:59:
         96:44:64:ad:6a:b4:26:3e:79:ff:a4:86:2c:d4:30:13:2f:e1:
         3d:fa:ff:80:06:49:88:54:4c:49:c6:d1:fe:bc:9e:b4:dc:08:
         14:ff:02:c2:bb:c8:8e:b2:0b:fe:cf:25:5a:31:72:ba:20:98:
         14:68:7b:09:81:fe:e1:35:4a:a8:32:af:62:14:a6:f6:6e:85:
         25:64:92:23:76:25:06:8e:48:cd:7e:12:0e:7e:81:16:67:8f:
         a8:3a:06:29:cb:f1:4e:07:4c:90:15:e6:6e:3c:8d:5d:58:21:
         43:d7:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:20 2026 by rpki-client