Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a383030303a3a2f33332d3333203d3e20323732343833.roa
File:                     323830343a383165303a383030303a3a2f33332d3333203d3e20323732343833.roa (raw, json)
Hash identifier:          kwABWnjlks5uHMvGNNgjxcdwAW+tnnf/J+WZpf0GGCU=
Subject key identifier:   10:20:F0:B4:24:F6:B6:07:B0:02:C9:CD:C8:89:DF:CB:59:80:7E:1C
Certificate issuer:       /CN=666606F99C2508C2DE4EB343F8E6FE1D724F72C8
Certificate serial:       7BA7B1F76321FB8AC0E222A741B5701AC37E3937
Authority key identifier: 66:66:06:F9:9C:25:08:C2:DE:4E:B3:43:F8:E6:FE:1D:72:4F:72:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a383030303a3a2f33332d3333203d3e20323732343833.roa
Signing time:             Fri 26 Jun 2026 20:42:27 +0000
ROA not before:           Fri 26 Jun 2026 20:37:27 +0000
ROA not after:            Fri 25 Jun 2027 20:42:27 +0000
asID:                     272483
IP address blocks:        2804:81e0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.crl
                          rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a7:b1:f7:63:21:fb:8a:c0:e2:22:a7:41:b5:70:1a:c3:7e:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666606F99C2508C2DE4EB343F8E6FE1D724F72C8
        Validity
            Not Before: Jun 26 20:37:27 2026 GMT
            Not After : Jun 25 20:42:27 2027 GMT
        Subject: CN=1020F0B424F6B607B002C9CDC889DFCB59807E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:d8:0c:30:8b:5e:41:e0:74:f2:f9:58:9c:
                    44:ba:cf:96:28:68:90:f4:f0:f4:c8:25:22:68:55:
                    f0:c3:54:b3:82:c8:28:6e:b4:cf:41:45:05:64:36:
                    5e:20:7f:d6:fb:f8:63:3c:5b:b6:03:48:87:bc:6c:
                    31:f1:42:35:a2:07:b2:43:1c:1e:57:c2:73:6d:eb:
                    cf:01:f0:c0:64:aa:35:7e:8d:d2:3b:ee:fd:72:7c:
                    94:42:eb:df:89:ed:3e:f6:3e:33:1d:0a:68:3c:8a:
                    8f:b4:cb:78:fa:07:25:a2:f6:62:6b:0c:f9:14:e3:
                    1d:96:73:cc:95:db:82:10:59:35:93:fb:87:22:f6:
                    2e:30:f8:41:88:aa:27:b8:46:97:a8:76:5d:7b:86:
                    44:46:d6:7a:af:19:5c:3d:3b:e8:3c:f2:e3:6c:0f:
                    2c:75:c9:2f:81:e2:71:66:ea:30:ab:d8:43:fb:b6:
                    39:4d:62:ef:69:8f:14:3b:f6:13:1e:76:4d:ab:fc:
                    ab:91:04:7f:43:93:b1:8a:60:78:83:64:35:9e:ac:
                    85:62:9e:8e:78:84:af:c8:87:c4:5b:f9:59:ff:51:
                    5b:38:9d:14:75:21:ca:5a:fe:a8:a5:8b:52:6c:94:
                    6f:d4:6f:75:ef:05:0f:a6:17:f5:da:71:61:58:2b:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:F0:B4:24:F6:B6:07:B0:02:C9:CD:C8:89:DF:CB:59:80:7E:1C
            X509v3 Authority Key Identifier:
                keyid:66:66:06:F9:9C:25:08:C2:DE:4E:B3:43:F8:E6:FE:1D:72:4F:72:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666606F99C2508C2DE4EB343F8E6FE1D724F72C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a383030303a3a2f33332d3333203d3e20323732343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81e0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:25:52:bf:90:af:c1:c5:3a:09:fd:91:3a:2c:e6:e3:83:e9:
         24:44:df:75:b3:2a:5b:94:0d:25:95:38:bd:33:9d:ec:65:0c:
         fa:5f:08:c3:a3:9d:16:20:3b:2c:85:24:a6:59:09:97:57:05:
         03:38:18:24:67:46:ee:07:7f:ae:2d:5b:34:23:8a:e8:4f:f8:
         33:b0:ec:e0:e5:89:54:1d:88:91:06:72:18:72:5c:07:1d:24:
         90:63:e7:c2:5b:60:ff:32:29:7e:e7:9c:42:41:df:40:e9:7f:
         50:b1:9c:0e:46:73:8e:80:67:31:cc:b3:39:9e:12:f3:ea:8b:
         c3:7c:43:65:03:4b:36:2a:d9:b1:b5:16:3b:7e:60:0b:07:e8:
         dc:fc:64:96:f3:ff:e8:ab:34:65:1c:10:d2:3c:17:2b:44:f4:
         33:94:f5:04:e2:2d:a9:8e:1b:36:39:0b:dd:b5:46:d9:32:2b:
         b5:fb:d7:d0:42:74:84:fd:ef:36:38:ad:5e:5f:6f:5c:5b:0e:
         1e:1e:36:1f:28:82:d5:40:b7:c7:cf:fb:9c:76:0e:0b:6e:54:
         ce:f8:8b:ab:cf:f5:6d:2e:97:06:cb:23:9d:f6:0f:56:c1:c8:
         b8:77:60:45:a9:99:66:6a:14:29:e1:82:b6:c7:e4:bf:1d:d2:
         ba:ca:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:05:14 2026 by rpki-client