Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a353130303a3a2f34302d3430203d3e20323637363638.roa
File:                     323830343a343530383a353130303a3a2f34302d3430203d3e20323637363638.roa (raw, json)
Hash identifier:          4hje9QIO6Cf5jJIf3/0vze2B3WnpGiFY/6Pai3dZX7Y=
Subject key identifier:   8F:85:EA:BF:49:87:A8:87:B1:37:D3:A3:DC:49:00:AE:F7:13:14:04
Certificate issuer:       /CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
Certificate serial:       6282547A4ECD971256E111DEA2CA57022FF6CF14
Authority key identifier: 5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a353130303a3a2f34302d3430203d3e20323637363638.roa
Signing time:             Sun 05 Jul 2026 22:59:56 +0000
ROA not before:           Sun 05 Jul 2026 22:54:56 +0000
ROA not after:            Sun 04 Jul 2027 22:59:56 +0000
asID:                     267668
IP address blocks:        2804:4508:5100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl
                          rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:82:54:7a:4e:cd:97:12:56:e1:11:de:a2:ca:57:02:2f:f6:cf:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F4A2C3E1A428B876DEF7FD3D7F193580770871F
        Validity
            Not Before: Jul  5 22:54:56 2026 GMT
            Not After : Jul  4 22:59:56 2027 GMT
        Subject: CN=8F85EABF4987A887B137D3A3DC4900AEF7131404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:3c:54:81:34:8d:77:08:e8:d4:09:c4:03:
                    d0:67:ed:3e:cf:61:35:d3:8f:ab:ed:60:90:7c:ab:
                    17:20:9d:8d:a7:e0:2d:2d:e0:cc:73:5d:0c:2e:91:
                    e0:9c:b1:87:10:bf:d8:63:de:82:75:96:a9:23:bf:
                    48:39:7b:68:63:f1:99:2c:9f:59:48:ee:ea:97:b2:
                    b2:ce:59:3e:1c:18:05:f5:14:3d:4c:e3:25:bf:bb:
                    28:f3:d6:2a:46:e3:09:74:de:3e:7e:9d:bf:3e:7f:
                    f1:cd:26:2a:d5:ba:42:00:c3:19:da:c9:ac:89:98:
                    a4:ab:c4:d3:14:2c:92:57:45:bd:3a:1d:52:96:b0:
                    25:dc:9e:03:e3:89:d2:53:2f:54:be:90:22:6f:cb:
                    65:36:09:e3:04:14:a3:a9:06:f0:82:19:e8:36:34:
                    c7:91:a8:77:37:1b:41:c8:43:92:93:26:a9:c7:c0:
                    c0:fb:cf:09:a3:1b:7f:62:01:82:f3:ad:e4:64:5b:
                    74:2e:d2:b8:4c:b1:53:70:f2:bf:6d:d1:8a:78:9f:
                    d3:d8:95:ae:63:6c:66:ca:59:8f:4a:82:30:4e:5a:
                    d3:19:a6:c6:ac:34:99:31:9f:90:eb:eb:f0:8c:8f:
                    b7:85:94:78:d5:b3:e0:ff:fe:46:40:ed:63:5a:6c:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:85:EA:BF:49:87:A8:87:B1:37:D3:A3:DC:49:00:AE:F7:13:14:04
            X509v3 Authority Key Identifier:
                keyid:5F:4A:2C:3E:1A:42:8B:87:6D:EF:7F:D3:D7:F1:93:58:07:70:87:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F4A2C3E1A428B876DEF7FD3D7F193580770871F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/323830343a343530383a353130303a3a2f34302d3430203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4508:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:96:cd:9e:65:f6:ac:10:af:50:74:8d:cf:f6:ac:ff:f4:
         c6:39:df:77:a6:56:16:cf:fd:61:c7:f8:42:57:dc:98:d5:98:
         2f:a2:67:90:71:19:ca:df:42:83:ef:12:92:61:e4:04:0b:f4:
         86:1d:a0:8a:e5:e7:c2:3c:c1:7c:c7:56:c4:3a:45:28:ba:87:
         df:9e:0d:eb:0c:45:37:3c:15:9b:3e:70:ff:b5:bd:6c:76:23:
         53:76:3a:f9:1d:ec:7d:81:50:d8:64:c5:6a:89:44:f3:9d:7d:
         8c:c8:0f:ba:f4:c2:bf:65:1b:23:a1:e6:a6:08:49:4f:a2:d1:
         bf:9f:35:2a:3e:37:f6:c4:0f:2c:64:99:8b:b4:18:0d:b3:12:
         a0:0d:b6:22:e1:bd:bc:60:6c:ac:85:58:74:e3:40:7d:91:38:
         6d:58:ec:37:20:e0:8f:d3:40:15:22:fd:44:49:a4:a9:fd:01:
         10:3e:bb:aa:ff:42:08:06:10:0a:06:84:5a:0b:d8:d9:2b:75:
         58:35:3f:d2:d2:69:8f:93:8d:39:76:dc:82:15:11:d9:7d:7b:
         85:b8:90:ab:f0:a8:0c:d0:fb:b1:6f:9c:41:c5:18:18:65:2c:
         2a:03:fb:87:dd:ec:04:55:16:f0:de:19:c7:78:d3:db:4f:29:
         13:68:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:12:32 2026 by rpki-client