Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3234313a3a2f34382d3438203d3e20323633343237.roa
File:                     323830343a313139633a3234313a3a2f34382d3438203d3e20323633343237.roa (raw, json)
Hash identifier:          +MAMF4GMCeh55xyVIFbEb1VLY6HzkKUFU6/tRVv60o0=
Subject key identifier:   11:4D:34:46:7D:41:15:23:B6:51:80:41:D0:D3:64:CC:5F:F7:02:E6
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       25D1B8B64FA56756CC6D3ADF15F71CCCB48B3DD7
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3234313a3a2f34382d3438203d3e20323633343237.roa
Signing time:             Tue 23 Jun 2026 21:14:32 +0000
ROA not before:           Tue 23 Jun 2026 21:09:32 +0000
ROA not after:            Tue 22 Jun 2027 21:14:32 +0000
asID:                     263427
IP address blocks:        2804:119c:241::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d1:b8:b6:4f:a5:67:56:cc:6d:3a:df:15:f7:1c:cc:b4:8b:3d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:32 2026 GMT
            Not After : Jun 22 21:14:32 2027 GMT
        Subject: CN=114D34467D411523B6518041D0D364CC5FF702E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:a8:8d:57:27:6e:5f:99:ad:d9:bf:eb:ca:
                    5d:77:c3:e5:37:14:e5:a9:28:27:53:2d:92:64:13:
                    4d:5d:ae:10:b0:40:ed:86:2b:67:4e:5e:75:e0:e1:
                    10:d7:4c:fd:bd:d9:34:91:3f:50:72:dc:e2:f3:c5:
                    2c:b4:84:54:0d:6f:00:e6:d6:c1:be:a9:24:c7:02:
                    2b:16:ae:6f:98:85:f3:42:e5:ce:4b:ec:08:83:69:
                    ce:ee:4e:1a:af:53:89:f0:34:43:85:6f:e3:28:64:
                    16:28:b1:16:8a:a2:d7:e5:4b:7b:d6:29:02:c2:8b:
                    ef:9f:6a:59:bb:58:44:31:21:11:16:73:43:2c:24:
                    40:b2:96:e6:cf:5d:c2:52:c1:64:b6:14:48:4e:ae:
                    cf:db:63:e0:64:0f:54:8a:58:16:52:24:64:5d:81:
                    16:48:3a:b3:a4:2e:3f:e0:f1:28:a6:6f:6a:4e:b7:
                    57:df:d2:aa:ed:ea:72:d6:f2:6e:4c:3a:49:ca:bc:
                    24:c7:ee:2b:47:2a:7d:3c:e4:54:dc:5d:d5:32:de:
                    aa:82:ae:c5:17:e0:d2:9b:95:53:c2:f1:c1:2e:bf:
                    b8:83:c4:75:b5:bf:3b:92:20:ff:b2:64:71:c1:06:
                    51:0c:0a:2e:e8:a4:38:2f:86:c6:39:b5:89:1e:85:
                    e8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:34:46:7D:41:15:23:B6:51:80:41:D0:D3:64:CC:5F:F7:02:E6
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/323830343a313139633a3234313a3a2f34382d3438203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:119c:241::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:39:e9:68:87:a3:b4:66:1c:b3:80:35:7c:cf:af:b5:4c:
         84:b4:61:a3:a1:11:dc:57:1d:3d:83:08:3a:53:47:89:3e:87:
         a7:12:01:b2:51:30:29:c0:3f:8b:e5:65:fc:89:ed:d3:7f:b8:
         43:fa:1c:2c:1e:cf:fb:ad:ce:a2:4f:0c:ed:02:4b:0f:5c:5f:
         5f:8a:d4:6e:9d:8d:47:31:4a:36:20:c7:b7:8c:67:fe:ef:1a:
         c9:d1:7b:d3:10:1e:28:55:18:85:a0:04:12:d7:eb:5a:8b:46:
         f0:ad:99:98:ea:b7:7b:57:b1:6d:7d:64:ac:1b:8a:dd:42:6a:
         41:10:bc:9f:84:8c:39:22:93:ca:8d:a8:f9:fc:b1:d6:21:91:
         c0:10:63:88:a1:77:8b:d5:3b:99:8b:1d:05:e2:e9:ea:da:46:
         71:3e:04:ab:58:ef:2b:6c:7a:91:bd:54:64:57:ce:21:2f:42:
         75:c0:da:f2:29:c9:a8:af:92:bb:36:d7:d4:fd:76:a6:44:be:
         df:cd:fa:a0:ef:06:53:88:5f:bc:f9:86:f6:88:37:e2:76:6f:
         3a:0d:f2:d1:0b:40:d0:37:c1:1a:20:4f:94:63:9a:79:72:25:
         8b:56:9c:63:21:7a:f4:8d:9f:02:0b:c3:13:ef:1a:7a:8c:d6:
         25:02:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:14:37 2026 by rpki-client