Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa
File:                     323830343a373861633a3a2f33342d3334203d3e20323731323538.roa (raw, json)
Hash identifier:          GAWntknngxTXcKk4cgKYSzVy0mdLc2LuEfvOwUkYZTU=
Subject key identifier:   56:A9:F1:12:CE:5D:67:F1:0C:6F:4C:14:CA:E0:9D:B3:8E:1E:3A:17
Certificate issuer:       /CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
Certificate serial:       138BF6224EFCEC14B5DC48820B4666483C7806A9
Authority key identifier: 4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa
Signing time:             Tue 30 Jun 2026 20:15:04 +0000
ROA not before:           Tue 30 Jun 2026 20:10:04 +0000
ROA not after:            Tue 29 Jun 2027 20:15:04 +0000
asID:                     271258
IP address blocks:        2804:78ac::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl
                          rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:f6:22:4e:fc:ec:14:b5:dc:48:82:0b:46:66:48:3c:78:06:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
        Validity
            Not Before: Jun 30 20:10:04 2026 GMT
            Not After : Jun 29 20:15:04 2027 GMT
        Subject: CN=56A9F112CE5D67F10C6F4C14CAE09DB38E1E3A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:af:3f:d7:e3:6b:eb:dd:c8:b6:1e:3a:0b:
                    f9:2b:3a:7f:92:f8:bf:7d:50:d2:2e:47:05:7a:0f:
                    2e:02:02:91:d9:72:66:1c:25:dc:f6:86:08:98:9b:
                    47:22:ec:bb:2d:09:99:2f:16:03:e3:ca:89:c1:30:
                    ce:e6:a8:c1:6a:27:36:eb:78:65:30:93:06:f6:b4:
                    bb:14:b7:ea:0e:65:4c:8a:16:3c:a2:26:0d:df:17:
                    b5:8f:9c:44:24:15:4d:34:1f:8f:dd:71:d4:79:34:
                    f4:cc:40:f3:78:f6:6f:14:26:c2:7c:be:ff:e9:bb:
                    80:f6:71:c7:e7:45:8a:39:5f:e5:9d:de:80:a8:a9:
                    b6:50:06:5a:eb:ff:56:fa:73:f8:83:c1:d2:71:ff:
                    24:9f:22:f7:11:65:63:96:11:cf:0b:0b:ad:1f:fe:
                    cb:11:36:04:51:b8:c2:b0:38:fd:d8:9b:80:4b:e5:
                    5b:0c:5a:f8:93:80:ef:48:f6:30:9a:29:68:18:39:
                    6a:21:9c:9b:49:96:05:7f:16:75:53:eb:12:02:30:
                    39:97:14:2d:88:b0:49:15:4f:43:f6:2d:66:18:48:
                    32:d9:ea:a6:f6:d8:f5:3a:ab:2b:f6:55:ab:de:c4:
                    ef:9e:52:6d:cc:93:c4:54:28:1e:c0:3e:97:34:5c:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:F1:12:CE:5D:67:F1:0C:6F:4C:14:CA:E0:9D:B3:8E:1E:3A:17
            X509v3 Authority Key Identifier:
                keyid:4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:51:13:18:1c:83:5b:c3:e2:03:bd:35:76:e6:c7:7e:75:
         91:a6:5b:49:ee:3c:0b:7c:c0:a3:2e:f2:d4:61:8f:cc:f3:36:
         61:07:ac:e4:b4:5d:27:bc:d7:db:d1:80:da:d3:e0:a7:66:d3:
         30:73:0d:68:06:fc:fb:36:28:94:ed:07:bc:a9:24:a9:8a:80:
         f8:02:2a:ec:4f:11:2c:52:95:05:83:fc:1c:28:f4:6e:ba:9f:
         80:8d:f8:93:ed:04:02:16:61:55:4f:3a:e7:f7:9a:8b:28:d4:
         52:b0:2a:62:e9:8e:f9:53:ac:dc:f7:15:d9:46:82:cf:7f:6b:
         36:d4:db:65:db:e3:cb:a3:0f:f0:6f:95:00:14:6c:9d:26:4f:
         bf:74:fa:cc:da:00:b2:2d:48:09:b3:c4:b3:91:cb:bf:59:8e:
         46:d7:ed:e9:42:82:4f:5a:5a:02:55:a8:4b:9b:aa:42:02:d0:
         1a:5c:96:48:dc:81:35:8e:c0:b4:45:f4:29:55:ef:18:f6:db:
         db:3e:25:e3:a6:00:c7:7a:bf:11:6b:79:8d:59:5c:30:2a:cc:
         e5:d2:1e:87:e3:ae:ec:a9:96:80:6e:a3:15:12:8b:f4:36:98:
         03:44:00:58:4b:eb:e0:64:e8:bb:2c:38:30:f7:19:4f:76:3b:
         ec:dc:f8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:09:25 2026 by rpki-client