Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          Wy8+HgRTm4RGMJXC+6oU+0f/8QZTAgPC8B9gxQlLwVY=
Subject key identifier:   DE:CC:8C:53:BE:38:DD:94:2D:03:BF:45:18:23:5A:33:5D:A2:65:08
Certificate issuer:       /CN=B7047B095A7C54A0D935E35C988F1A341D363E06
Certificate serial:       42A7AE0687B25872381A0CC2843C626186D721E3
Authority key identifier: B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Thu 02 Jul 2026 15:54:24 +0000
ROA not before:           Thu 02 Jul 2026 15:49:24 +0000
ROA not after:            Thu 01 Jul 2027 15:54:24 +0000
asID:                     263995
IP address blocks:        2804:2910:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 02:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a7:ae:06:87:b2:58:72:38:1a:0c:c2:84:3c:62:61:86:d7:21:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7047B095A7C54A0D935E35C988F1A341D363E06
        Validity
            Not Before: Jul  2 15:49:24 2026 GMT
            Not After : Jul  1 15:54:24 2027 GMT
        Subject: CN=DECC8C53BE38DD942D03BF4518235A335DA26508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:2f:fe:57:2c:78:1a:92:8b:99:e5:8c:12:
                    0f:12:9d:38:26:b0:93:eb:45:8b:6b:c2:49:0a:6f:
                    82:00:5c:9b:c6:8f:d5:c2:80:40:cc:51:84:43:a1:
                    12:9f:09:86:80:d7:47:57:0a:61:96:ac:62:2b:4b:
                    ce:a9:5b:bd:f1:db:97:25:b6:89:06:72:f6:88:79:
                    2a:9e:0c:36:ab:9c:09:5a:1e:22:f6:33:74:48:fd:
                    93:8b:cf:d1:35:35:20:77:c8:8f:c7:ea:99:bd:a5:
                    ee:d0:fc:8e:b9:9e:00:cf:de:2e:41:c5:97:5f:65:
                    35:bb:6e:14:80:2e:e8:5a:9f:c6:eb:39:bc:77:81:
                    a6:c2:a3:37:a3:16:a3:05:6b:ed:c4:a5:af:3d:be:
                    8e:18:a6:7b:49:75:9f:d9:7e:08:21:08:1a:b1:47:
                    04:e5:7c:fd:06:70:12:75:aa:f1:2f:99:19:70:e0:
                    28:cd:c1:b1:c7:26:e6:d1:26:84:30:81:fb:84:28:
                    d9:81:d9:2e:64:80:26:6c:75:aa:e5:4b:b3:2b:17:
                    76:c4:ba:49:40:14:37:f1:c2:a2:f7:8a:af:49:ba:
                    fc:ac:0d:92:22:44:94:f1:d2:c8:02:f1:0c:6b:10:
                    4f:0a:cf:99:88:01:ce:b4:64:fd:01:cd:41:4d:0b:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:8C:53:BE:38:DD:94:2D:03:BF:45:18:23:5A:33:5D:A2:65:08
            X509v3 Authority Key Identifier:
                keyid:B7:04:7B:09:5A:7C:54:A0:D9:35:E3:5C:98:8F:1A:34:1D:36:3E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/B7047B095A7C54A0D935E35C988F1A341D363E06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7047B095A7C54A0D935E35C988F1A341D363E06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a31303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:21:10:a2:77:a9:ad:c3:1d:63:68:e2:bc:ad:2d:56:a3:5a:
         52:98:e2:51:58:56:f8:8e:52:ab:82:75:70:2e:6d:ae:15:46:
         4f:53:ae:dd:a7:5b:6c:3d:f5:53:c6:ef:d7:51:f6:17:cf:5e:
         d0:21:a7:c6:a2:0b:db:53:49:25:0d:45:13:65:dc:56:d8:d3:
         97:1a:06:77:ab:e6:ba:fa:74:25:78:6c:72:b9:d1:46:89:b6:
         05:6b:ef:98:37:44:04:4f:d3:77:1e:39:f3:97:eb:75:23:74:
         97:f8:ce:9c:dd:78:1a:7d:fb:9e:2b:2d:6c:7b:7c:bf:26:32:
         97:30:63:a2:3a:90:d4:57:d8:f9:d6:c9:2e:c7:35:d9:ac:78:
         08:ac:28:95:74:d8:3b:6f:9b:32:1e:75:63:ad:b9:36:ba:de:
         a6:40:b0:c5:af:00:0b:d2:fb:16:25:81:40:23:1f:a0:ea:89:
         ba:a6:b0:c7:cf:90:64:c5:cb:c0:9a:cf:f8:6e:9c:9f:99:19:
         f1:94:4a:fc:5c:0f:b2:30:07:f5:a1:7a:db:5c:84:67:62:5b:
         e8:6d:b3:8e:36:b1:69:fb:47:b0:7d:b9:fd:8c:ac:cf:1c:31:
         10:8a:2a:a3:f0:74:17:69:ad:cd:35:fb:15:49:7e:fc:b2:81:
         05:47:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:01:49 2026 by rpki-client