Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3438203d3e20323639363132.roa
File:                     323830343a363733343a3a2f33322d3438203d3e20323639363132.roa (raw, json)
Hash identifier:          WK47S68oo+7cjE4oDEf6upIiwWjm5MkdzHzIRO2N81M=
Subject key identifier:   A9:70:E8:C7:60:AA:70:A4:DB:4C:74:48:63:01:14:3B:00:CA:FD:ED
Certificate issuer:       /CN=7930F5595D461706449AEC2E969F5BB9DFCE33AB
Certificate serial:       725D0CE090B35C2660A6C4ABC2FC6653F0499DCE
Authority key identifier: 79:30:F5:59:5D:46:17:06:44:9A:EC:2E:96:9F:5B:B9:DF:CE:33:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3438203d3e20323639363132.roa
Signing time:             Tue 07 Jul 2026 16:10:15 +0000
ROA not before:           Tue 07 Jul 2026 16:05:15 +0000
ROA not after:            Tue 06 Jul 2027 16:10:15 +0000
asID:                     269612
IP address blocks:        2804:6734::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.crl
                          rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5d:0c:e0:90:b3:5c:26:60:a6:c4:ab:c2:fc:66:53:f0:49:9d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7930F5595D461706449AEC2E969F5BB9DFCE33AB
        Validity
            Not Before: Jul  7 16:05:15 2026 GMT
            Not After : Jul  6 16:10:15 2027 GMT
        Subject: CN=A970E8C760AA70A4DB4C74486301143B00CAFDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:1c:1f:29:f2:76:ca:35:8c:90:79:7a:93:
                    93:21:0a:72:a7:c0:03:cd:36:df:5b:51:19:28:ad:
                    ae:81:62:c1:5b:44:5a:8d:fb:f6:5e:b0:c3:e8:0f:
                    8d:69:60:bf:e2:1d:bb:26:cd:80:ac:5d:9f:b2:0c:
                    c3:91:05:9d:06:e5:a8:c9:0b:06:f3:fa:27:3a:f7:
                    42:0f:36:83:43:ec:eb:46:50:e1:b6:0f:03:bc:17:
                    6f:db:42:fe:4d:9a:62:bf:e3:db:e1:2c:0d:fd:a9:
                    b6:69:08:b3:c6:c8:2c:04:1f:e5:93:7e:a0:93:4f:
                    5c:0b:41:3f:4d:2e:f7:7f:60:40:00:0f:76:44:61:
                    63:9d:92:ba:16:84:f6:77:1f:60:20:17:70:8d:92:
                    39:59:64:52:56:8b:5c:f1:57:81:57:20:00:4c:f9:
                    90:40:38:d3:7a:a6:1c:6c:79:de:06:39:12:4b:98:
                    2a:24:e4:56:ed:62:de:d1:ab:9b:5f:bc:3d:dc:8b:
                    be:bc:c3:39:c2:5a:32:d8:a0:e8:17:13:bc:d8:31:
                    cd:f2:3f:ef:b4:d8:17:c2:13:6a:f7:12:c3:e6:97:
                    65:7b:50:01:56:3a:c8:dc:de:ee:eb:d6:48:00:03:
                    8f:82:e5:73:96:24:bc:89:22:46:20:c8:d3:ae:ae:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:E8:C7:60:AA:70:A4:DB:4C:74:48:63:01:14:3B:00:CA:FD:ED
            X509v3 Authority Key Identifier:
                keyid:79:30:F5:59:5D:46:17:06:44:9A:EC:2E:96:9F:5B:B9:DF:CE:33:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/7930F5595D461706449AEC2E969F5BB9DFCE33AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7930F5595D461706449AEC2E969F5BB9DFCE33AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ch5TFR1rbJt9foAceedA9e2DuM4dgBCrb7bMtBtcSds/0/323830343a363733343a3a2f33322d3438203d3e20323639363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6734::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:86:4e:30:0f:d8:94:ab:fa:fa:99:6e:7e:fc:88:be:fe:12:
         7d:f1:0a:e5:09:3c:91:84:55:11:cb:9d:b7:64:de:aa:a8:8d:
         04:8d:62:6e:c0:2b:46:33:6e:aa:70:71:80:4e:1b:0b:9f:90:
         9d:45:f4:a9:1a:72:eb:f4:ea:58:44:f1:a9:32:e0:31:4b:6e:
         71:69:62:a6:a1:f8:0f:e7:07:2a:0a:e2:4d:c7:d7:88:b3:3c:
         1b:54:4c:38:4a:db:7e:70:f1:48:45:03:3f:03:ce:ca:ca:22:
         85:c9:bf:1d:09:f0:b6:cd:c1:4c:dc:35:0a:00:10:c2:d4:de:
         56:4a:00:65:da:7a:b9:58:89:1a:0f:2e:0d:1c:8b:4a:0f:dc:
         95:6f:6f:8c:42:43:c6:5e:ce:77:9c:71:98:08:e9:5c:5d:7c:
         0e:ff:40:93:a6:88:e3:21:3f:f5:9b:72:b1:d0:1b:5d:23:aa:
         41:60:19:42:7f:91:73:e2:66:f3:db:f3:86:58:81:fb:94:49:
         2f:28:f1:8e:50:b1:ef:c7:25:8d:3e:7f:bc:cc:7c:2d:2a:fd:
         c2:1e:5c:f1:f1:55:d4:82:93:bb:c9:39:cc:93:0d:87:19:f5:
         ad:f7:cf:93:d9:2d:ed:27:b2:18:ff:04:8d:62:6f:10:a1:cd:
         15:51:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:00:57 2026 by rpki-client