Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d3332203d3e20323632373133.roa
File:                     323830343a3634303a3a2f33322d3332203d3e20323632373133.roa (raw, json)
Hash identifier:          ojChfrh6uVTTofU+7uGf2XDlpVJD/JY1nNwKhbkM47Y=
Subject key identifier:   FA:7B:C7:AF:B9:F4:32:F0:B4:F2:A0:0E:96:13:E6:A4:55:5D:71:36
Certificate issuer:       /CN=190F88057E5253901EE5639F080648A51BEA01F6
Certificate serial:       2A690799B6432CDB65B9F58BD0C30CEB8FD615AE
Authority key identifier: 19:0F:88:05:7E:52:53:90:1E:E5:63:9F:08:06:48:A5:1B:EA:01:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190F88057E5253901EE5639F080648A51BEA01F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d3332203d3e20323632373133.roa
Signing time:             Thu 03 Sep 2026 11:32:59 +0000
ROA not before:           Thu 03 Sep 2026 11:27:59 +0000
ROA not after:            Thu 02 Sep 2027 11:32:59 +0000
asID:                     262713
IP address blocks:        2804:640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/190F88057E5253901EE5639F080648A51BEA01F6.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/190F88057E5253901EE5639F080648A51BEA01F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190F88057E5253901EE5639F080648A51BEA01F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 01:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:69:07:99:b6:43:2c:db:65:b9:f5:8b:d0:c3:0c:eb:8f:d6:15:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190F88057E5253901EE5639F080648A51BEA01F6
        Validity
            Not Before: Sep  3 11:27:59 2026 GMT
            Not After : Sep  2 11:32:59 2027 GMT
        Subject: CN=FA7BC7AFB9F432F0B4F2A00E9613E6A4555D7136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:be:f2:22:f0:95:a6:a0:2a:e4:af:45:2e:
                    0b:67:08:ce:0b:75:38:e2:f1:40:a8:78:a1:2d:4f:
                    7f:6f:53:e7:e3:26:0c:88:6a:79:76:2a:ce:7c:f5:
                    fa:91:f9:d9:83:a2:28:33:eb:3e:2f:68:2b:ba:42:
                    56:7c:d0:6b:a4:77:e8:1e:2d:c6:70:7d:a5:56:ad:
                    09:55:be:1b:f0:2d:2a:da:55:5c:4a:4a:5a:b2:eb:
                    f2:af:58:59:96:1f:db:6c:0e:7e:9c:4c:91:4e:25:
                    49:d2:35:5a:6d:e5:01:93:bf:34:4c:b5:4c:ae:2a:
                    5d:15:11:2a:ef:b1:e3:34:24:df:ba:7a:a6:5e:d2:
                    30:2d:b8:2d:55:fc:c6:d7:4a:c5:d5:63:cd:b1:a3:
                    67:b5:3c:06:ff:b5:81:06:6b:5f:8e:14:1d:3c:97:
                    14:2f:92:46:b4:14:58:1d:58:4a:f4:a4:af:76:45:
                    4d:5f:89:5a:9d:eb:c9:2f:26:94:47:0e:43:f9:6a:
                    82:f6:07:d1:d7:26:d9:7f:7b:fb:e3:d6:b2:3a:1c:
                    44:68:f7:fe:6c:67:40:aa:82:40:81:3a:3b:38:34:
                    7e:92:18:b9:96:a3:e8:45:8b:f1:e6:df:cf:35:40:
                    83:ff:a4:fa:2e:56:ab:21:fa:24:66:ae:07:6e:93:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:C7:AF:B9:F4:32:F0:B4:F2:A0:0E:96:13:E6:A4:55:5D:71:36
            X509v3 Authority Key Identifier:
                keyid:19:0F:88:05:7E:52:53:90:1E:E5:63:9F:08:06:48:A5:1B:EA:01:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/190F88057E5253901EE5639F080648A51BEA01F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/190F88057E5253901EE5639F080648A51BEA01F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f33322d3332203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:ce:57:2a:b8:65:ad:79:aa:9c:3f:09:68:33:34:50:94:
         84:47:51:a4:85:c0:7d:b7:27:80:0c:e8:b8:77:1a:dd:dd:ca:
         74:e0:82:2b:ad:5f:bc:09:d7:29:60:6b:41:5d:40:1f:04:65:
         13:76:c7:3d:e3:36:09:eb:a6:40:3c:d4:75:79:a6:3c:70:36:
         e4:83:1b:92:78:b5:5b:8e:b1:d7:78:8f:73:b0:34:99:52:64:
         8b:f6:b8:11:6f:f3:40:e3:5e:a5:c5:89:55:64:80:68:6d:19:
         89:f4:32:c4:12:68:6f:8f:d6:f5:d3:40:5a:5a:70:41:7e:27:
         1b:2c:c3:84:5b:00:a7:9e:05:65:aa:68:e4:f0:c1:b1:4c:a1:
         85:61:7b:76:de:93:7a:cb:16:a9:94:7e:2c:f2:02:59:e6:ad:
         1f:e3:77:65:28:1f:95:b4:69:d3:2e:ad:00:2c:55:63:7e:86:
         f5:0a:e4:ed:28:6d:17:ea:2e:c4:db:9d:eb:b6:68:f8:5b:74:
         2b:31:8b:8b:2d:e4:07:31:cb:54:18:c0:0a:d3:3a:d5:c4:ef:
         80:24:47:2f:a2:3e:80:d7:3f:14:04:86:a8:30:98:da:d7:5b:
         63:1e:54:61:42:4b:30:fa:d7:c6:0c:d9:cd:6b:ef:72:e5:76:
         5c:e7:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:30:13 2026 by rpki-client