Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa
File:                     323830343a313433633a3a2f33322d3438203d3e20323633333230.roa (raw, json)
Hash identifier:          KuIejTIMWfMIGK0LweCAGVpxHhUkcGGKwEzL1EbML4c=
Subject key identifier:   75:84:43:D3:E0:4D:92:EE:F6:BC:6A:18:36:8A:B0:AA:07:3A:1D:11
Certificate issuer:       /CN=49EA4EA50184AE6D421C49BFD7FB61ED9252D28E
Certificate serial:       79FEB9F6E9D167DC3DB3919E83B5372B72B10B07
Authority key identifier: 49:EA:4E:A5:01:84:AE:6D:42:1C:49:BF:D7:FB:61:ED:92:52:D2:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa
Signing time:             Mon 03 Aug 2026 19:15:26 +0000
ROA not before:           Mon 03 Aug 2026 19:10:26 +0000
ROA not after:            Mon 02 Aug 2027 19:15:26 +0000
asID:                     263320
IP address blocks:        2804:143c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.crl
                          rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fe:b9:f6:e9:d1:67:dc:3d:b3:91:9e:83:b5:37:2b:72:b1:0b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49EA4EA50184AE6D421C49BFD7FB61ED9252D28E
        Validity
            Not Before: Aug  3 19:10:26 2026 GMT
            Not After : Aug  2 19:15:26 2027 GMT
        Subject: CN=758443D3E04D92EEF6BC6A18368AB0AA073A1D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:4e:9b:a1:04:8e:bc:49:17:c6:53:32:58:
                    bc:4a:71:6c:31:5a:e5:0f:1f:d7:f4:f7:4e:04:a8:
                    3e:25:a5:61:39:e4:55:8f:29:f9:38:7e:8f:16:4e:
                    3c:3f:af:5b:2e:a2:16:7d:4f:30:46:5a:5f:09:39:
                    4b:45:2f:1c:f0:94:fd:df:bf:56:df:08:01:27:fa:
                    b6:6b:e7:2b:ce:fe:9d:ef:a9:34:31:64:74:a3:d7:
                    f9:a2:f9:66:38:04:50:59:b6:46:4f:06:64:12:15:
                    f7:83:2d:8a:3d:68:26:3c:81:20:b5:03:6d:ee:a1:
                    22:ec:24:3a:7e:06:24:f9:7b:86:ba:9c:a0:ca:5d:
                    0f:e9:2f:1f:30:aa:dc:ed:5e:31:c5:5f:8d:5e:bb:
                    a3:99:04:fd:c4:6e:26:fd:91:d7:f5:08:3f:f9:77:
                    e6:93:b8:81:67:c8:cb:74:f7:43:36:a6:ed:69:07:
                    c0:b3:ef:05:9f:7b:b0:8e:38:5a:b8:94:c0:38:4b:
                    0c:6e:ad:55:f3:88:40:ee:aa:fc:20:73:28:1e:95:
                    bc:97:d1:93:02:9f:1a:f8:80:c0:93:d7:c4:d7:cd:
                    ba:d9:ff:99:b1:6e:27:d0:ff:b4:10:71:3c:b0:ad:
                    0c:22:b6:2e:5a:00:93:7d:c1:35:14:95:15:df:68:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:84:43:D3:E0:4D:92:EE:F6:BC:6A:18:36:8A:B0:AA:07:3A:1D:11
            X509v3 Authority Key Identifier:
                keyid:49:EA:4E:A5:01:84:AE:6D:42:1C:49:BF:D7:FB:61:ED:92:52:D2:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49EA4EA50184AE6D421C49BFD7FB61ED9252D28E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33322d3438203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:66:10:4b:1d:bb:55:09:c6:21:92:b6:dc:3a:4b:31:9b:82:
         b4:32:67:89:cb:f4:33:1d:27:68:8c:40:4d:7e:78:e9:11:64:
         ab:4e:d3:31:0f:03:8e:e2:07:03:79:16:03:52:7e:de:6b:c6:
         10:ff:01:97:b4:94:ee:a6:9e:ff:37:eb:cb:60:84:9f:b8:dd:
         06:dd:b1:8c:f4:ec:9e:8e:d1:41:ef:ea:2d:30:ee:8b:15:30:
         7a:5d:bb:17:5e:1a:be:1a:d5:4a:40:75:d1:15:ca:3a:42:2e:
         1b:7d:fd:bc:c3:08:cc:5c:bd:4d:e2:f1:ac:55:c5:96:bb:37:
         c6:f1:09:6e:d2:03:b1:42:c7:dd:3f:3a:4b:4c:3d:74:7f:9f:
         f7:34:de:61:f7:ab:74:8b:b2:8a:4e:d3:38:91:94:46:e3:95:
         45:8b:1d:00:f3:14:44:4e:34:62:51:12:06:73:9e:a0:c7:9e:
         9b:be:cc:5a:56:0c:2f:15:6a:46:1b:8f:3c:7b:2c:d4:13:0e:
         80:0c:57:ac:78:b7:78:ae:77:da:54:a2:da:b7:d9:56:2a:a7:
         9c:d6:e9:d4:16:93:37:b4:21:8f:dd:6c:88:97:b3:eb:37:28:
         9c:b5:31:d3:10:15:62:94:fb:26:ce:52:ac:e6:28:1c:5a:c5:
         c2:33:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:32:45 2026 by rpki-client