Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
File:                     323830343a343033303a3a2f33322d3438203d3e20323635393433.roa (raw, json)
Hash identifier:          qXqTcAx/BAD79mCfG5IqT02k34eRHPlwXVfWiyGG3Sw=
Subject key identifier:   0A:B5:27:DF:1F:88:33:28:54:02:AD:A5:62:FF:1E:07:A2:3D:EC:AF
Certificate issuer:       /CN=E4AD7D5E692195B8B699FA8929256133345D81F1
Certificate serial:       1CE2144909948020AFE4923ED3282C572A76C55D
Authority key identifier: E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa
Signing time:             Thu 02 Jul 2026 17:50:03 +0000
ROA not before:           Thu 02 Jul 2026 17:45:03 +0000
ROA not after:            Thu 01 Jul 2027 17:50:03 +0000
asID:                     265943
IP address blocks:        2804:4030::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/E4AD7D5E692195B8B699FA8929256133345D81F1.crl
                          rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/E4AD7D5E692195B8B699FA8929256133345D81F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e2:14:49:09:94:80:20:af:e4:92:3e:d3:28:2c:57:2a:76:c5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4AD7D5E692195B8B699FA8929256133345D81F1
        Validity
            Not Before: Jul  2 17:45:03 2026 GMT
            Not After : Jul  1 17:50:03 2027 GMT
        Subject: CN=0AB527DF1F8833285402ADA562FF1E07A23DECAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:c8:83:4b:1e:3f:eb:14:fd:5a:4d:04:44:
                    3d:2f:c7:04:5b:5c:dd:98:26:f2:21:4b:00:7b:23:
                    ce:26:a3:65:9e:0e:4e:e8:58:f8:9a:34:33:63:ac:
                    e2:cd:7f:68:02:06:5d:a2:79:0e:7d:13:e2:04:db:
                    74:ef:b1:42:ce:2e:f5:e1:ff:45:4c:07:3b:60:6e:
                    4d:62:ef:d2:b7:d7:8a:7d:a1:c1:fe:fb:d1:f9:d4:
                    ff:b3:98:5c:04:85:05:fb:34:53:4c:43:a7:d1:60:
                    39:06:44:d6:98:a2:1e:2b:50:35:7b:9d:7c:87:dc:
                    9f:74:9c:2b:a9:71:81:33:1d:e8:f4:40:21:b4:c4:
                    35:56:9d:d8:85:07:5a:97:bc:bc:35:2f:e5:23:d2:
                    f5:f3:29:8e:39:87:b7:89:40:57:22:6e:d2:1f:f8:
                    b4:7b:25:49:98:a0:20:47:de:de:74:45:28:00:26:
                    22:ab:68:f4:bf:4e:62:57:7a:0b:a2:7d:91:2e:71:
                    c7:21:79:04:fa:b7:f8:5d:65:50:e5:56:fc:34:8a:
                    32:1d:66:b7:bc:44:56:58:2a:b4:9c:df:d3:05:75:
                    70:79:29:38:c7:bc:26:86:8e:81:05:a5:53:a9:ca:
                    ae:fc:1b:e3:62:46:c3:76:90:a2:3b:56:82:90:2c:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:27:DF:1F:88:33:28:54:02:AD:A5:62:FF:1E:07:A2:3D:EC:AF
            X509v3 Authority Key Identifier:
                keyid:E4:AD:7D:5E:69:21:95:B8:B6:99:FA:89:29:25:61:33:34:5D:81:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/E4AD7D5E692195B8B699FA8929256133345D81F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4AD7D5E692195B8B699FA8929256133345D81F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3438203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4030::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:85:6b:61:59:2d:92:bc:60:e6:cd:4c:24:72:fc:be:aa:
         5f:93:d4:64:c3:c4:e2:00:95:3d:9c:16:d5:c2:1a:b8:3e:6c:
         64:e4:98:6b:24:db:67:a5:5c:a5:36:df:a8:dc:a3:dc:c4:77:
         70:b3:2b:53:25:8b:03:e9:63:aa:29:b3:fd:ba:90:ba:90:b0:
         f4:65:0f:0d:35:98:63:90:df:2e:de:66:ca:79:0e:cf:82:c7:
         49:fa:35:7a:ed:b2:55:c6:1e:b1:78:ad:1f:60:10:5b:78:1f:
         0c:91:aa:7f:3d:a5:34:d7:70:db:6e:11:3e:21:67:fb:35:d5:
         fe:0d:a5:8a:f6:e2:19:f0:8b:4a:f2:f7:8a:8a:6a:ac:c7:58:
         13:40:a8:c1:ed:5b:08:7c:0b:61:d0:a1:88:5b:c4:63:32:9c:
         86:51:98:97:86:55:19:fa:01:d3:b5:43:78:88:f0:1a:bc:04:
         b3:70:0b:b5:54:63:0a:2c:c2:b5:64:7d:d1:b9:6f:70:a8:40:
         01:c1:b6:4a:cc:f2:80:d5:25:d9:87:f4:33:c9:e8:a4:a0:ac:
         6e:bc:52:a3:16:bc:0e:5d:b0:e5:33:8d:31:92:49:7e:d5:83:
         0c:ff:f9:a3:48:8b:28:b8:45:17:5f:56:30:d5:f6:f5:63:aa:
         8f:1a:8f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:17:37 2026 by rpki-client