Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa
File:                     323830343a393665343a3a2f33322d3334203d3e20323734333636.roa (raw, json)
Hash identifier:          v26DjerDxSnwLxhq5NEgqiqGhptpIU+CLrPhTUiI5HI=
Subject key identifier:   1B:7E:19:F9:17:83:6E:F4:5F:3B:64:40:50:A6:32:FE:56:E1:A2:FA
Certificate issuer:       /CN=4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C
Certificate serial:       4BAD926398A86123AEFFB9DBE5A2B7535E165267
Authority key identifier: 4B:23:5A:1A:B7:44:46:1E:39:CD:6D:3A:D9:AB:4A:71:8B:D7:E2:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa
Signing time:             Thu 02 Jul 2026 15:21:17 +0000
ROA not before:           Thu 02 Jul 2026 15:16:17 +0000
ROA not after:            Thu 01 Jul 2027 15:21:17 +0000
asID:                     274366
IP address blocks:        2804:96e4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.crl
                          rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:92:63:98:a8:61:23:ae:ff:b9:db:e5:a2:b7:53:5e:16:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C
        Validity
            Not Before: Jul  2 15:16:17 2026 GMT
            Not After : Jul  1 15:21:17 2027 GMT
        Subject: CN=1B7E19F917836EF45F3B644050A632FE56E1A2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:59:98:27:01:02:4a:d6:82:ff:0e:b7:c7:
                    d9:97:3e:c7:87:ad:ae:dc:d4:ab:0d:80:56:8f:88:
                    29:02:5d:8e:3f:e3:98:7d:8e:a3:48:6a:17:80:c3:
                    6c:f6:e2:6f:9c:fd:a1:61:f0:dc:60:bd:e5:84:8e:
                    1b:fb:06:56:de:39:cf:c9:8d:2e:ee:00:62:89:4b:
                    57:3c:4a:78:0d:65:62:a7:fe:93:8b:a9:c0:64:20:
                    75:c0:b7:f0:ae:72:13:97:02:65:93:4f:ec:05:c3:
                    70:02:eb:ef:39:e7:74:bc:79:1d:8a:18:b5:80:51:
                    d0:c5:74:be:f3:9a:73:78:0c:6e:e1:73:ec:16:48:
                    c1:52:55:e8:72:c4:2a:dd:e6:f5:75:de:7d:91:21:
                    6d:e7:06:f0:c7:36:63:20:c7:10:c8:72:3c:4c:f8:
                    b1:3d:44:fe:0e:8d:6d:36:32:54:71:ae:30:79:1e:
                    1b:af:45:88:e6:5c:51:f3:31:bb:d0:46:ca:da:28:
                    17:03:47:ff:5b:f4:18:1d:98:9d:c4:2c:c0:64:d8:
                    4f:26:ba:4c:6d:8c:3c:39:45:a0:4c:cf:4c:29:1f:
                    c9:76:47:e7:5a:39:84:8b:4e:6a:fc:d8:bc:90:55:
                    9b:13:bc:18:0a:b7:f8:fd:f3:88:17:89:fe:f3:b8:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:19:F9:17:83:6E:F4:5F:3B:64:40:50:A6:32:FE:56:E1:A2:FA
            X509v3 Authority Key Identifier:
                keyid:4B:23:5A:1A:B7:44:46:1E:39:CD:6D:3A:D9:AB:4A:71:8B:D7:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/323830343a393665343a3a2f33322d3334203d3e20323734333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:aa:ca:fe:ba:97:30:d5:9a:13:5b:78:06:38:60:5b:16:
         05:b5:b2:f4:be:78:f3:a2:f6:3a:6b:6a:e8:c8:9a:2e:97:7c:
         37:d7:f3:16:e7:09:81:75:94:a2:d9:40:56:10:f3:a8:e9:b1:
         3b:69:a1:fe:7f:61:68:fc:38:5c:5c:cb:12:ab:c4:c3:f5:67:
         6c:de:1a:ca:40:1f:41:a5:f7:c9:6e:0e:c5:0d:f5:42:4a:77:
         fd:99:ca:f2:a1:8d:fa:51:c3:92:51:dd:cd:6e:2f:d7:68:66:
         2f:c8:55:ac:58:22:e0:db:a7:71:b2:5e:67:cd:6e:60:59:1a:
         fe:3b:89:a7:da:49:05:13:48:a8:20:8f:b5:53:18:ae:05:66:
         31:f3:0d:81:ec:ed:df:0c:4d:68:8e:b7:35:a1:61:0b:82:51:
         46:f8:f6:ac:20:ef:67:c3:24:ea:e4:66:51:0e:2e:f5:a2:b5:
         9b:f3:43:df:01:8a:0c:5d:58:1d:18:59:9f:f6:3d:35:fb:03:
         bf:11:47:51:21:99:f4:d1:f6:96:ac:5a:66:c4:63:ce:9c:db:
         11:57:98:bb:ec:22:6d:23:33:bf:cb:f4:5d:69:fe:0a:ba:70:
         9a:fa:f9:ee:b4:cb:96:47:87:a4:03:fd:3c:58:6d:cc:9c:22:
         dd:37:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:06:31 2026 by rpki-client