Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/323830343a353161343a3a2f33332d3333203d3e20323638343637.roa
File:                     323830343a353161343a3a2f33332d3333203d3e20323638343637.roa (raw, json)
Hash identifier:          6It+LDV6VpXb6/9bmwszQFLAo8QzAgwPo6FDLc0Fc7c=
Subject key identifier:   F9:0D:15:F4:F4:7F:FF:FD:44:45:61:D7:E0:EE:36:FA:85:50:E0:3C
Certificate issuer:       /CN=A62253A262C05DA37257E32D22BDF0000285A921
Certificate serial:       3FA01270DB5DB1437D547D21209C542EF0CE3453
Authority key identifier: A6:22:53:A2:62:C0:5D:A3:72:57:E3:2D:22:BD:F0:00:02:85:A9:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/323830343a353161343a3a2f33332d3333203d3e20323638343637.roa
Signing time:             Thu 25 Jun 2026 22:22:26 +0000
ROA not before:           Thu 25 Jun 2026 22:17:26 +0000
ROA not after:            Thu 24 Jun 2027 22:22:26 +0000
asID:                     268467
IP address blocks:        2804:51a4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.crl
                          rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:12:70:db:5d:b1:43:7d:54:7d:21:20:9c:54:2e:f0:ce:34:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A62253A262C05DA37257E32D22BDF0000285A921
        Validity
            Not Before: Jun 25 22:17:26 2026 GMT
            Not After : Jun 24 22:22:26 2027 GMT
        Subject: CN=F90D15F4F47FFFFD444561D7E0EE36FA8550E03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:8a:f3:60:a0:f7:a5:ca:7e:59:37:6a:4e:
                    83:b8:98:87:a4:59:c2:50:e3:3d:e8:c7:f6:6a:54:
                    f2:ba:af:0a:79:05:13:be:71:ed:f5:b1:35:7e:88:
                    ab:83:4a:ac:04:a3:a3:10:95:73:c1:1a:cb:24:bd:
                    d3:46:ca:7e:cf:f4:e3:f0:43:d7:54:bf:af:48:9f:
                    25:3d:35:be:13:1a:95:07:ed:bd:a4:eb:ad:8d:ad:
                    b7:05:c2:82:da:39:4a:8c:7c:a0:a5:a8:ea:06:4c:
                    63:b0:7b:5b:35:07:3e:00:25:8d:70:a0:19:5d:a6:
                    0b:ea:ae:a7:16:de:de:e9:40:7d:d9:20:1b:c6:6d:
                    db:c8:da:4c:e2:61:2f:f9:ee:8c:7d:c0:3d:65:73:
                    c0:b8:37:84:71:e0:b4:d0:05:da:77:78:a0:72:df:
                    6c:69:72:6d:3d:af:5d:92:f0:83:44:13:60:ff:0d:
                    ad:d5:47:5b:84:58:3b:2c:ea:8c:48:cd:a2:f9:bf:
                    cf:60:97:05:27:0d:78:76:bf:51:3f:65:8d:63:a3:
                    19:3a:ac:29:5e:82:ca:1e:46:37:9a:e1:67:00:5d:
                    e2:fc:89:83:94:03:82:54:24:29:11:fc:e8:b4:21:
                    37:8a:b1:bf:d3:7c:e7:db:9e:08:df:49:c6:3f:c5:
                    e5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0D:15:F4:F4:7F:FF:FD:44:45:61:D7:E0:EE:36:FA:85:50:E0:3C
            X509v3 Authority Key Identifier:
                keyid:A6:22:53:A2:62:C0:5D:A3:72:57:E3:2D:22:BD:F0:00:02:85:A9:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/A62253A262C05DA37257E32D22BDF0000285A921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A62253A262C05DA37257E32D22BDF0000285A921.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ZT5Yn1orTLpUFNViHohdEoDhAetdrM7szz9nzmuHzML/0/323830343a353161343a3a2f33332d3333203d3e20323638343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51a4::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:94:a7:d9:ae:73:2a:01:96:f8:82:6a:d4:02:67:4c:81:3f:
         63:2b:e0:8e:f0:93:34:ef:8f:c5:33:5c:48:77:b5:57:78:52:
         61:a0:09:f5:9f:69:db:23:c7:48:d0:7b:29:12:d4:16:ed:c1:
         4b:43:c4:c4:dd:ef:4e:92:44:5e:f0:a9:0c:3d:23:94:08:08:
         01:84:27:a0:6f:92:a9:ae:28:e7:17:05:65:bf:81:fd:68:0f:
         ee:4e:e8:bd:fc:12:7e:2d:c5:bf:bb:df:b9:58:f7:55:4d:78:
         e1:00:1f:04:a0:b4:29:bd:0b:73:c8:dd:af:f0:75:a5:c6:12:
         d2:6f:d6:70:2a:7f:90:eb:d6:66:f0:14:90:85:ac:0b:99:8f:
         e4:26:86:aa:5f:b1:3b:d6:75:7d:fc:75:33:8c:01:f5:bf:8c:
         39:81:99:9e:43:c1:d6:db:56:11:8c:59:6c:32:4f:6d:53:11:
         6d:43:87:df:2c:a9:75:c0:e2:ec:f9:31:ec:f1:13:b4:c8:f7:
         17:1a:a8:96:3d:14:82:64:f5:d7:67:25:b4:9d:59:ce:8f:6f:
         f1:1d:52:5b:a5:10:e9:df:b3:7b:46:ab:24:f3:5f:bd:48:6a:
         90:21:a6:29:ee:98:ef:48:b7:2d:12:da:44:ee:52:f6:23:d6:
         10:60:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:06 2026 by rpki-client