Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3434203d3e20323732343236.roa
File:                     323830343a383130343a3a2f33322d3434203d3e20323732343236.roa (raw, json)
Hash identifier:          qfr0B6p0glyM4ggaPGr9CTL81oaLQYyso1Ij/tuiuxM=
Subject key identifier:   F2:67:5E:E5:93:1F:C2:2D:31:3C:CF:2C:C2:D1:49:74:C4:26:AB:0B
Certificate issuer:       /CN=B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4
Certificate serial:       73E93B1CC8B6FF11B578D55A9CB0092D8787DDD0
Authority key identifier: B4:FB:6C:10:96:6A:C0:88:E2:5C:54:38:EC:7D:E3:F8:B9:4B:FD:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3434203d3e20323732343236.roa
Signing time:             Fri 03 Jul 2026 18:25:32 +0000
ROA not before:           Fri 03 Jul 2026 18:20:32 +0000
ROA not after:            Fri 02 Jul 2027 18:25:32 +0000
asID:                     272426
IP address blocks:        2804:8104::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.crl
                          rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 05:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:3b:1c:c8:b6:ff:11:b5:78:d5:5a:9c:b0:09:2d:87:87:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4
        Validity
            Not Before: Jul  3 18:20:32 2026 GMT
            Not After : Jul  2 18:25:32 2027 GMT
        Subject: CN=F2675EE5931FC22D313CCF2CC2D14974C426AB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:ec:11:52:61:e4:52:fe:78:e5:62:cf:0d:
                    ff:6c:ab:aa:1c:39:d6:e7:42:26:2a:be:e7:90:11:
                    e0:1c:e0:c2:59:16:30:d5:e7:35:fc:cb:c2:5d:16:
                    83:d0:27:9b:78:7e:65:c0:98:67:4f:6f:88:eb:64:
                    85:3b:a1:e5:01:03:6c:c0:60:66:c1:69:a5:54:bc:
                    12:6c:c3:08:f9:84:41:c4:85:df:cc:23:15:a7:cc:
                    67:55:d0:09:06:5d:ce:ce:3d:a6:46:ea:1a:f9:73:
                    96:68:8d:94:f7:94:3c:15:cf:50:f2:d3:52:ff:7e:
                    d3:45:56:fc:94:a5:92:d1:da:9f:55:a2:50:4b:03:
                    20:40:2d:7c:cd:a9:97:3d:62:f9:1f:6f:a0:ba:a7:
                    c7:4a:db:69:6e:26:bf:eb:0b:2a:ba:16:45:82:fd:
                    52:9e:39:8b:1b:ae:b8:47:b3:b5:07:20:a5:08:cc:
                    6f:83:c4:e0:82:6f:1f:0b:4b:b1:7f:5f:c2:5e:3c:
                    11:18:ca:b6:fb:de:6f:a0:56:e7:0a:b0:e7:37:3a:
                    45:43:e0:b6:43:22:3c:97:7e:bf:40:a5:9f:1f:e2:
                    48:bb:19:6b:2b:40:67:7f:66:16:06:e0:b9:19:76:
                    5b:cb:39:44:bb:40:38:09:50:69:b7:06:59:29:83:
                    cb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:67:5E:E5:93:1F:C2:2D:31:3C:CF:2C:C2:D1:49:74:C4:26:AB:0B
            X509v3 Authority Key Identifier:
                keyid:B4:FB:6C:10:96:6A:C0:88:E2:5C:54:38:EC:7D:E3:F8:B9:4B:FD:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4FB6C10966AC088E25C5438EC7DE3F8B94BFDC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NQt1mPYaVDJHBsYYyY4QxwHehPHfDPNxWAHD8xZjSvt/0/323830343a383130343a3a2f33322d3434203d3e20323732343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8104::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:3a:25:57:df:8e:8e:20:20:73:c2:d1:b8:f9:7c:34:34:
         9a:84:9a:c9:cd:f0:29:f2:8d:5d:98:68:49:33:4e:e4:d0:6f:
         34:49:23:e1:aa:31:d8:09:24:06:f5:dd:ad:e6:ca:7d:77:f9:
         b8:97:25:64:fa:6d:8e:a0:8b:68:0f:98:ec:60:d0:1b:dd:e6:
         15:70:fb:f3:a8:14:26:ff:8d:3b:99:d2:b7:68:cf:c2:c0:14:
         1c:03:82:7b:2e:73:a3:dc:81:cb:b2:bd:a7:08:37:3b:67:dd:
         57:bd:8c:fd:26:c1:9e:72:05:05:9b:68:f3:81:5d:ac:ad:09:
         5b:4d:23:e7:bf:07:96:ec:f7:1b:a4:3e:64:ec:cc:c2:d7:55:
         58:99:a7:16:f4:74:9c:0c:66:3e:61:40:a0:57:62:46:19:4f:
         61:c5:34:d5:22:6c:fd:66:a0:c4:f0:8f:ca:17:18:14:96:11:
         a6:cf:cd:db:34:a7:f0:48:f7:67:91:04:73:f8:2d:5d:da:81:
         71:a0:96:82:f8:1a:1c:62:6c:60:ef:e0:c5:83:2f:4b:ac:ef:
         05:2b:5b:4a:90:7c:8c:a7:06:98:0a:4d:52:4c:65:21:76:52:
         5c:e2:f1:cf:2f:e7:c5:0b:4c:19:15:db:3c:e7:7f:8c:63:57:
         50:a8:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:38 2026 by rpki-client