Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa
File:                     323830343a366264633a3a2f33322d3332203d3e20323730343330.roa (raw, json)
Hash identifier:          XlRGxLwiaDUpjafjcQKpiBcmPevKq5AiLWJiQdX3lYo=
Subject key identifier:   C3:01:A7:F7:D2:DA:FC:EF:29:21:0E:02:1C:F7:FF:FE:B6:52:FF:CF
Certificate issuer:       /CN=75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1
Certificate serial:       75FC716BF4F0375D3D61172156AD4EA1E2F5C59C
Authority key identifier: 75:C7:F6:90:3D:4B:E4:2C:30:C2:93:B6:FF:9D:CF:97:C6:1F:80:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa
Signing time:             Tue 30 Jun 2026 14:09:22 +0000
ROA not before:           Tue 30 Jun 2026 14:04:22 +0000
ROA not after:            Tue 29 Jun 2027 14:09:22 +0000
asID:                     270430
IP address blocks:        2804:6bdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Jul 2026 23:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fc:71:6b:f4:f0:37:5d:3d:61:17:21:56:ad:4e:a1:e2:f5:c5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1
        Validity
            Not Before: Jun 30 14:04:22 2026 GMT
            Not After : Jun 29 14:09:22 2027 GMT
        Subject: CN=C301A7F7D2DAFCEF29210E021CF7FFFEB652FFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a0:17:1d:31:80:af:11:68:38:32:34:c1:c6:
                    c9:51:a9:3e:7f:7e:da:1e:2d:5c:a4:a6:35:e8:a5:
                    22:e8:b7:eb:78:96:7e:fd:8a:56:01:fe:af:94:34:
                    33:bf:f7:cb:11:aa:50:02:e8:e9:4e:a0:30:b3:5c:
                    b9:c1:57:0c:64:f2:1a:31:b8:63:44:f8:4f:f1:5b:
                    50:d5:68:f5:43:2b:d4:71:7f:bf:7f:19:2a:1d:c5:
                    20:9c:ad:e1:95:84:13:70:0e:33:30:56:fb:8f:fa:
                    49:0f:20:34:b5:ac:ee:6e:94:d8:02:b7:e0:ba:51:
                    0c:d2:14:20:1d:07:81:12:de:14:1a:61:1d:15:25:
                    4d:5b:33:fd:6b:a0:85:98:59:a6:11:0a:74:f3:e6:
                    6d:3a:5d:ce:ef:a0:8d:8e:ec:4e:9c:3c:19:19:7e:
                    9e:70:cd:8c:c1:b2:61:df:ff:46:75:c8:6a:2b:36:
                    c5:bc:9c:3d:53:02:58:02:ea:ef:1c:e9:da:39:e3:
                    b6:48:f4:13:36:65:dc:4a:f7:c3:ac:59:b9:46:80:
                    fc:91:3b:16:9b:39:54:a6:b6:8c:93:81:e4:12:bb:
                    fa:37:07:9b:65:32:e1:bb:bc:47:a9:b3:60:e6:85:
                    96:fb:c7:7a:ab:c5:a6:7a:23:0b:8a:f7:8f:87:4d:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:01:A7:F7:D2:DA:FC:EF:29:21:0E:02:1C:F7:FF:FE:B6:52:FF:CF
            X509v3 Authority Key Identifier:
                keyid:75:C7:F6:90:3D:4B:E4:2C:30:C2:93:B6:FF:9D:CF:97:C6:1F:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75C7F6903D4BE42C30C293B6FF9DCF97C61F80E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:a5:84:d3:bc:22:d4:6d:2d:4d:7b:57:4a:9a:93:48:82:f9:
         17:e0:1d:78:2b:ea:6f:63:76:e6:23:d0:56:22:5c:06:7c:88:
         34:83:eb:39:17:37:a9:53:e8:68:8b:0b:10:46:6d:49:26:bd:
         79:7b:bf:83:b0:1d:1e:7d:7f:c2:12:76:f7:33:be:ae:cf:f4:
         97:c3:e2:80:b4:f9:5f:5a:f6:bc:1c:0d:21:87:01:91:72:02:
         a2:04:5c:4e:5d:9f:6b:fb:8c:58:a6:3b:a7:a0:32:be:ce:92:
         e2:70:c3:23:9d:06:89:63:13:cb:b7:5e:c8:a9:20:fd:e3:31:
         77:84:60:63:f9:c4:46:2a:37:c9:e6:d9:24:5d:9a:9e:25:35:
         ca:96:1f:32:85:aa:c6:06:bc:63:71:a8:6d:a1:c3:26:8a:0f:
         70:d8:4a:f0:a2:27:7b:05:f8:33:3e:03:df:ee:ae:6e:43:c5:
         8d:c9:ff:4a:46:75:1a:6f:2c:fd:0f:70:91:8a:96:e5:31:2b:
         02:65:9b:2d:0b:ef:ee:01:79:35:f1:b4:33:ed:9d:21:d6:5e:
         e5:a8:f4:69:6f:25:73:46:57:fc:fb:02:26:46:ab:05:67:dc:
         ea:3c:b2:79:7f:d5:da:94:eb:58:9a:26:20:5f:60:cb:22:50:
         d2:78:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:22 2026 by rpki-client