Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa
File:                     323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa (raw, json)
Hash identifier:          ugu+tZ6eVi+TUx9zADziemerIJsflCP8xPvMx2Qt2vo=
Subject key identifier:   D8:58:77:06:F9:38:7C:CE:78:05:0B:B5:1A:0D:D4:8E:83:3D:B2:9B
Certificate issuer:       /CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
Certificate serial:       611017375AC7CC05BB97820EB3EAD554D095D6BE
Authority key identifier: 5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa
Signing time:             Sun 05 Jul 2026 22:59:40 +0000
ROA not before:           Sun 05 Jul 2026 22:54:40 +0000
ROA not after:            Sun 04 Jul 2027 22:59:40 +0000
asID:                     267668
IP address blocks:        2804:4508:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:17:37:5a:c7:cc:05:bb:97:82:0e:b3:ea:d5:54:d0:95:d6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
        Validity
            Not Before: Jul  5 22:54:40 2026 GMT
            Not After : Jul  4 22:59:40 2027 GMT
        Subject: CN=D8587706F9387CCE78050BB51A0DD48E833DB29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:4c:2b:8b:40:49:c8:01:c7:26:59:25:14:
                    ca:6c:47:11:a1:b9:5f:25:16:98:52:0a:95:f6:71:
                    b1:0c:ce:3e:77:77:5e:ba:ec:9e:f5:39:d5:5a:84:
                    ca:74:13:a9:67:26:f7:1a:fc:63:3a:27:fa:ee:53:
                    17:63:22:c6:cc:13:3b:d6:c9:d6:92:bf:de:f2:27:
                    83:18:ef:48:8f:e7:e3:f0:04:bf:ac:8c:66:7e:63:
                    49:61:ee:ac:6b:06:bd:3a:fa:51:ae:42:3c:e0:1c:
                    09:29:8b:1b:af:33:84:da:67:fc:ad:aa:66:fa:08:
                    4b:0f:3d:38:7c:e1:36:06:1b:b8:18:82:9a:00:9c:
                    ec:8f:5e:d2:9b:3b:39:e3:84:10:50:dd:9c:9a:39:
                    fb:14:5f:f4:ef:61:09:bf:74:de:bb:63:ba:f8:53:
                    22:52:f9:7e:33:45:20:52:80:77:e5:09:1b:b5:6d:
                    1c:9b:29:d3:d2:ef:44:ad:cb:ca:13:c5:08:1b:84:
                    6b:d2:5d:06:89:86:30:ae:b3:80:d9:87:b8:3e:b7:
                    f0:f1:be:10:64:18:55:a8:f1:d8:7e:91:b8:c6:f6:
                    99:0e:ec:24:3b:16:23:72:85:c6:07:02:7c:e6:0b:
                    22:ca:e0:63:1e:15:97:b3:80:29:91:e5:76:04:f5:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:58:77:06:F9:38:7C:CE:78:05:0B:B5:1A:0D:D4:8E:83:3D:B2:9B
            X509v3 Authority Key Identifier:
                keyid:5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a313130303a3a2f34302d3430203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:bb:2c:24:d8:df:ef:d0:00:6a:94:f8:d6:bb:3e:b6:3f:
         50:2c:71:91:50:ea:54:cc:2c:1b:ca:72:46:10:c0:b8:31:5d:
         12:04:b8:27:c4:3c:8a:5e:03:4a:a5:57:a3:4e:fe:b3:43:0e:
         fc:72:f9:1b:1c:97:a9:1d:7d:f5:f5:73:b0:e5:10:0f:df:7a:
         29:e0:4d:e1:ea:50:26:37:a7:80:d5:22:02:74:59:b8:bf:3a:
         6f:78:09:11:c1:74:d1:01:20:82:56:3b:2e:32:8a:e1:46:69:
         7f:2b:f0:65:52:25:bb:7e:e5:0a:da:e2:62:b1:e1:d1:5d:37:
         7f:2d:e3:c1:67:d3:9e:bb:83:64:3f:57:42:52:ab:28:c4:8d:
         dc:7f:cb:bd:8a:09:e7:1d:eb:47:b8:2c:08:bc:85:41:ec:e2:
         a8:80:26:25:a4:b2:8e:cf:4c:6b:1b:bf:14:fe:cd:3a:94:00:
         1f:07:29:7b:d9:9d:89:2b:bc:7b:e5:05:79:f3:ad:e3:be:ad:
         9c:ec:ea:40:36:40:90:82:5b:1f:93:4b:bc:f9:b2:c2:5d:ee:
         9c:3d:c8:95:3e:ff:c6:73:ac:e5:2c:d8:17:65:17:97:de:32:
         83:93:1c:20:2f:b2:9b:ae:58:fe:bd:aa:e9:22:48:9e:3c:b8:
         78:00:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:16:12 2026 by rpki-client