Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/323830343a376336383a3a2f33322d3332203d3e20323731343934.roa
File:                     323830343a376336383a3a2f33322d3332203d3e20323731343934.roa (raw, json)
Hash identifier:          zwQpCzEQpf0jvDi427ttcnMLtXPLTLUQMUiw13Uyc4o=
Subject key identifier:   40:DE:1E:A2:31:A7:53:BF:8E:64:1F:14:18:3C:80:88:3B:72:D9:39
Certificate issuer:       /CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
Certificate serial:       2D1409E9E49377E4CF91641FAA4C8F52508631FF
Authority key identifier: AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/323830343a376336383a3a2f33322d3332203d3e20323731343934.roa
Signing time:             Thu 30 Jul 2026 16:03:53 +0000
ROA not before:           Thu 30 Jul 2026 15:58:53 +0000
ROA not after:            Thu 29 Jul 2027 16:03:53 +0000
asID:                     271494
IP address blocks:        2804:7c68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl
                          rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:14:09:e9:e4:93:77:e4:cf:91:64:1f:aa:4c:8f:52:50:86:31:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2F2563E35F605B4B7EAB4282AF573236FB9ACD
        Validity
            Not Before: Jul 30 15:58:53 2026 GMT
            Not After : Jul 29 16:03:53 2027 GMT
        Subject: CN=40DE1EA231A753BF8E641F14183C80883B72D939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:41:fb:4f:24:e3:64:1d:c1:35:37:e6:73:
                    ac:f7:f9:f5:84:25:32:77:e6:8e:d4:e8:19:5d:ca:
                    9b:b8:13:96:2b:8b:73:61:79:08:bd:52:01:65:bf:
                    94:c3:e9:1f:72:3f:94:3d:0c:1d:de:3c:76:3f:02:
                    02:15:9b:cb:28:42:2f:76:45:33:74:05:53:2c:0b:
                    3c:ae:0f:23:cf:54:8d:e8:6b:08:77:64:a3:fd:8e:
                    51:2a:11:cc:50:a7:ed:d9:8f:52:f4:66:ad:c8:85:
                    43:46:0c:ad:6e:de:ca:ca:b6:8b:db:84:69:b8:4a:
                    d8:49:f5:3c:1d:d3:b3:79:4c:43:1a:24:25:1f:a8:
                    64:2b:d2:e7:07:38:61:7f:db:ba:1d:1f:ac:d3:f2:
                    c7:6b:63:10:ad:5e:e2:61:11:5a:56:91:57:01:ef:
                    6c:fe:f5:44:2e:c2:d9:87:b4:ff:b0:06:22:d1:6f:
                    8d:83:16:01:82:04:36:ff:f3:db:f2:18:06:ec:47:
                    86:ab:39:61:97:86:bf:7b:38:e9:9f:a5:87:89:c1:
                    5a:5c:f5:a3:c7:43:0f:6b:65:0b:e2:b5:f6:37:37:
                    a6:af:1a:06:73:f8:9f:7a:cb:c4:e0:7b:7c:da:b0:
                    41:96:db:3e:82:92:d1:14:09:ca:e0:87:2f:49:f7:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:1E:A2:31:A7:53:BF:8E:64:1F:14:18:3C:80:88:3B:72:D9:39
            X509v3 Authority Key Identifier:
                keyid:AF:2F:25:63:E3:5F:60:5B:4B:7E:AB:42:82:AF:57:32:36:FB:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2F2563E35F605B4B7EAB4282AF573236FB9ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4P4pzt7EXwjhVGtJEqvbDzbtZUXGjQgVgwVw2vjP8GC3/0/323830343a376336383a3a2f33322d3332203d3e20323731343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c68::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:e2:68:1e:8c:ec:e0:bd:a3:f7:7e:9f:39:ae:56:4a:58:
         82:94:21:fb:05:9e:70:f6:11:d3:01:a8:c7:d6:dd:97:bd:8d:
         1d:fe:c8:df:b7:c9:b3:50:56:1e:b9:83:99:e1:63:ac:8e:15:
         5e:f4:b3:8f:a0:9e:bf:38:c8:98:e9:d5:5d:57:e5:a6:87:ec:
         b3:3d:a0:87:28:fd:cb:ee:61:f9:09:d0:ff:98:18:44:ed:9a:
         c9:bd:54:9a:35:1f:ca:9c:69:58:9c:c8:3f:e4:f8:a3:39:14:
         4a:02:de:b2:30:68:b2:39:30:f0:94:b3:e9:75:8e:1c:1b:b3:
         19:bb:7b:5d:90:95:93:b2:95:be:1d:cd:09:d6:cf:89:1f:ad:
         61:da:d8:af:0c:ad:57:78:79:10:20:a3:3b:5c:6a:b9:d3:e9:
         29:dd:4b:be:0f:da:f4:16:bb:77:c5:15:80:6a:42:d3:35:fb:
         59:f3:02:68:dd:8d:b3:83:7c:c3:ae:27:14:a4:ac:43:49:d7:
         f9:a6:0f:cb:0b:aa:38:70:bc:90:b7:91:05:f9:ce:4c:e3:79:
         e2:ea:d7:23:55:c6:34:f5:f5:c4:32:a7:9b:de:56:68:4a:fc:
         6f:43:c5:08:e5:88:2e:fd:dd:40:a4:28:d7:23:c1:72:25:82:
         2c:16:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:18:21 2026 by rpki-client