Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d313238203d3e20323638303437.roa
File:                     323830343a353732343a3a2f33322d313238203d3e20323638303437.roa (raw, json)
Hash identifier:          Qp3nFYHn0aQI4A3gC7rhu38SZ8UdTYy8Sf7B740YPz0=
Subject key identifier:   9C:F0:77:3A:F2:C5:17:D7:45:FD:79:11:98:06:ED:41:41:21:60:8C
Certificate issuer:       /CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
Certificate serial:       7EFECAB9CA0D3A76A10059BCF33138E4C9BEC4F6
Authority key identifier: C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d313238203d3e20323638303437.roa
Signing time:             Tue 11 Aug 2026 18:06:00 +0000
ROA not before:           Tue 11 Aug 2026 18:01:00 +0000
ROA not after:            Tue 10 Aug 2027 18:06:00 +0000
asID:                     268047
IP address blocks:        2804:5724::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl
                          rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 06:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fe:ca:b9:ca:0d:3a:76:a1:00:59:bc:f3:31:38:e4:c9:be:c4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35B2425B757FAD0CEC0226AA474E0261F79D4AD
        Validity
            Not Before: Aug 11 18:01:00 2026 GMT
            Not After : Aug 10 18:06:00 2027 GMT
        Subject: CN=9CF0773AF2C517D745FD79119806ED414121608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:f7:ba:ec:9d:f8:62:41:e5:5d:00:d9:ad:
                    d8:37:f5:81:a4:91:7d:05:d1:7e:03:0b:11:e1:61:
                    13:43:fc:71:4e:35:0e:26:9f:87:c7:1a:02:f4:72:
                    80:1b:bd:c4:cb:88:fd:d3:a8:cb:89:e1:f0:c0:52:
                    9a:ad:eb:82:60:d4:e8:66:9d:d2:80:6a:1f:3e:a4:
                    df:a1:e4:10:62:7b:b8:f8:e1:d8:81:22:05:13:f5:
                    0e:bd:4b:b1:00:54:d3:73:31:0b:ef:96:5e:04:11:
                    e7:e2:47:88:a2:c2:5b:98:c6:91:6f:6c:ea:c7:55:
                    1c:f5:51:5a:68:b8:52:32:5a:9b:9c:e4:77:6b:65:
                    46:0d:21:51:88:55:ac:43:a9:55:56:dc:05:2d:6d:
                    95:0f:e2:a7:80:b3:fb:0a:04:15:5f:76:b5:a7:81:
                    ca:18:1d:12:13:d2:a5:15:cb:4c:b2:2a:dc:eb:8c:
                    08:ff:ed:90:1a:61:10:83:4a:b5:72:97:8f:6e:45:
                    69:94:76:48:76:65:db:ba:8e:64:c9:93:f9:2a:99:
                    65:bf:4b:1f:53:75:03:d4:f2:96:21:ae:72:9d:e9:
                    dd:9b:c0:9f:b2:2c:ce:af:0a:f6:cb:2b:64:ad:8f:
                    62:52:52:e4:4f:18:ec:2b:39:2e:76:7d:26:ee:90:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F0:77:3A:F2:C5:17:D7:45:FD:79:11:98:06:ED:41:41:21:60:8C
            X509v3 Authority Key Identifier:
                keyid:C3:5B:24:25:B7:57:FA:D0:CE:C0:22:6A:A4:74:E0:26:1F:79:D4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B2425B757FAD0CEC0226AA474E0261F79D4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d313238203d3e20323638303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5724::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:60:7f:7c:62:6f:42:8e:ea:62:19:7a:61:87:9a:51:2c:4c:
         b9:f0:b9:e9:dc:55:28:50:ea:f9:af:a0:7a:d6:5d:9f:1a:d0:
         1b:a6:b9:85:5b:44:65:c4:34:ce:95:4d:c1:e0:87:71:c0:fe:
         51:0b:e4:ca:c3:c6:34:f7:24:4d:4f:0b:10:25:c0:e6:02:4d:
         84:19:8d:92:04:7b:87:d6:c5:65:b2:26:de:c3:9c:30:25:a2:
         07:5c:2b:fd:b5:82:09:7c:e4:8f:c7:7d:ea:41:80:ac:44:b8:
         46:5a:55:15:f6:0d:c9:8d:71:22:74:9f:18:a1:aa:21:7c:64:
         f0:9e:b4:d5:c7:48:4c:11:8e:69:a1:29:4b:90:72:d8:0d:a2:
         1e:c9:ef:ff:86:9f:13:9d:40:86:fe:c6:96:3d:fb:68:a6:b3:
         ac:27:0d:42:62:69:20:13:0e:10:bf:bd:bb:92:f3:73:1e:c0:
         23:0a:d1:43:e2:f7:74:f1:4f:16:59:fa:a8:27:29:2d:ec:14:
         fb:ad:22:e4:c0:3b:30:5d:a5:49:01:bd:17:64:13:de:5b:1d:
         0a:81:25:ed:1a:0a:09:04:48:55:af:7f:54:bc:8d:8a:a5:2d:
         91:f6:6c:97:3c:fc:fb:be:16:02:4c:f9:48:3c:25:ef:8f:7c:
         34:68:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:55:25 2026 by rpki-client