Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa
File:                     323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (raw, json)
Hash identifier:          c+Z6XDP/nK44IhLBSJrNwaha5H9DY1K2CJONnJTQEtk=
Subject key identifier:   D4:6D:12:D8:8F:79:13:14:A8:37:84:B6:20:2B:E8:29:4E:BE:64:49
Certificate issuer:       /CN=429F7E9A576973FBB0202EE7725E531EA20CCB5A
Certificate serial:       6A3284FC66905EA39158BA541A4A736568CCEB0D
Authority key identifier: 42:9F:7E:9A:57:69:73:FB:B0:20:2E:E7:72:5E:53:1E:A2:0C:CB:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/429F7E9A576973FBB0202EE7725E531EA20CCB5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa
Signing time:             Thu 30 Jul 2026 15:13:51 +0000
ROA not before:           Thu 30 Jul 2026 15:08:51 +0000
ROA not after:            Thu 29 Jul 2027 15:13:51 +0000
asID:                     268750
IP address blocks:        2804:5a20::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/429F7E9A576973FBB0202EE7725E531EA20CCB5A.crl
                          rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/429F7E9A576973FBB0202EE7725E531EA20CCB5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/429F7E9A576973FBB0202EE7725E531EA20CCB5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 07:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:32:84:fc:66:90:5e:a3:91:58:ba:54:1a:4a:73:65:68:cc:eb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429F7E9A576973FBB0202EE7725E531EA20CCB5A
        Validity
            Not Before: Jul 30 15:08:51 2026 GMT
            Not After : Jul 29 15:13:51 2027 GMT
        Subject: CN=D46D12D88F791314A83784B6202BE8294EBE6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:a3:69:f7:28:15:5c:17:bf:9b:75:17:7e:
                    90:c6:3a:0d:0f:6e:31:fa:61:7d:5a:a2:02:9e:4e:
                    8e:88:3f:67:2a:58:06:66:4f:7e:5b:45:fa:ef:bd:
                    85:44:db:24:eb:19:31:3c:17:b9:04:45:8a:a1:47:
                    b8:42:7d:91:fc:a0:49:d3:a6:b1:61:d2:a9:66:e2:
                    7a:0c:6f:41:ea:25:23:89:0e:c2:a3:6e:16:96:fe:
                    52:4c:a4:95:4e:6f:f1:f9:58:fd:d6:68:35:6a:ba:
                    de:f2:24:03:12:9e:97:e8:49:42:cb:19:74:d5:30:
                    4a:d7:9f:f5:df:5d:27:87:31:cd:7d:16:51:ce:fc:
                    29:04:af:8e:10:7a:cd:de:15:48:23:fd:59:75:d7:
                    dc:3d:59:28:9e:0d:52:51:5a:fe:1c:2f:03:b5:30:
                    eb:20:7a:fa:86:e8:09:d7:dc:00:11:1b:01:1b:78:
                    54:89:60:b0:35:db:85:6d:4a:70:80:76:21:78:86:
                    9d:90:7c:f7:e2:fe:41:78:e6:3a:dd:99:ad:43:d7:
                    c5:cb:3c:e5:85:68:4e:4f:77:94:81:64:08:0f:43:
                    06:1d:e5:38:35:37:fc:28:8e:1c:2f:bb:35:03:5c:
                    cd:4a:3d:62:cb:a2:0e:d6:10:c8:8b:cd:4d:40:b2:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:12:D8:8F:79:13:14:A8:37:84:B6:20:2B:E8:29:4E:BE:64:49
            X509v3 Authority Key Identifier:
                keyid:42:9F:7E:9A:57:69:73:FB:B0:20:2E:E7:72:5E:53:1E:A2:0C:CB:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/429F7E9A576973FBB0202EE7725E531EA20CCB5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/429F7E9A576973FBB0202EE7725E531EA20CCB5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/323830343a356132303a3a2f33322d313238203d3e20323638373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:24:ec:7f:fb:1f:f8:2e:32:fc:2e:b8:6b:4d:93:ab:22:d4:
         ee:eb:41:9e:88:d4:79:84:6c:46:06:ff:37:33:11:06:e4:82:
         d1:20:2d:cc:18:ff:24:77:d0:a2:3a:43:f6:2b:92:b8:2f:14:
         94:4e:9a:9d:9b:b7:32:54:b5:9c:56:05:e0:1c:f4:bf:54:72:
         07:77:86:67:95:3d:bd:64:8b:a9:31:e6:16:af:0d:7b:65:cb:
         0e:c4:74:b2:60:1d:78:a9:3a:a3:d5:a4:1c:fe:73:69:5f:6f:
         9c:15:27:04:e8:19:01:85:96:12:8f:3c:41:57:0b:99:d7:7f:
         06:d9:5e:14:8e:71:76:5c:86:7c:92:b7:c0:67:53:fd:4d:07:
         8c:1d:f6:51:55:f2:aa:88:8e:35:71:9c:a1:35:75:69:ac:df:
         d3:ca:94:78:36:85:0b:ea:7b:9d:ec:ef:75:00:af:41:1d:83:
         29:1e:c1:5a:3e:8f:21:ae:ef:76:b5:5e:63:74:3b:b9:a4:ac:
         59:d1:d2:36:58:c1:77:cd:c4:4e:45:59:0a:96:b7:13:ec:76:
         4d:97:1b:c4:84:bc:88:b9:41:b0:a9:5a:2e:18:18:e2:db:64:
         e3:99:f7:82:a7:03:0d:c8:2d:84:2d:e0:40:44:11:5c:47:62:
         d7:a0:e5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:39 2026 by rpki-client