Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa
File:                     323830343a323434303a3a2f33322d313238203d3e203532363836.roa (raw, json)
Hash identifier:          XzHuTQF/Jyiu+TqGdLX8XNM9Cye7gAasEnDjSAySmno=
Subject key identifier:   8F:00:59:42:3B:7E:61:A9:50:95:10:4E:F6:BC:1E:4E:83:FA:F7:A7
Certificate issuer:       /CN=C8C4D8D74757FD4136DB07A158797CB7D867256C
Certificate serial:       3C63C4B09F452C0E63E78A58BC7D6C51A865C059
Authority key identifier: C8:C4:D8:D7:47:57:FD:41:36:DB:07:A1:58:79:7C:B7:D8:67:25:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8C4D8D74757FD4136DB07A158797CB7D867256C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa
Signing time:             Thu 02 Jul 2026 19:28:15 +0000
ROA not before:           Thu 02 Jul 2026 19:23:15 +0000
ROA not after:            Thu 01 Jul 2027 19:28:15 +0000
asID:                     52686
IP address blocks:        2804:2440::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/C8C4D8D74757FD4136DB07A158797CB7D867256C.crl
                          rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/C8C4D8D74757FD4136DB07A158797CB7D867256C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8C4D8D74757FD4136DB07A158797CB7D867256C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:63:c4:b0:9f:45:2c:0e:63:e7:8a:58:bc:7d:6c:51:a8:65:c0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8C4D8D74757FD4136DB07A158797CB7D867256C
        Validity
            Not Before: Jul  2 19:23:15 2026 GMT
            Not After : Jul  1 19:28:15 2027 GMT
        Subject: CN=8F0059423B7E61A95095104EF6BC1E4E83FAF7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:4e:46:80:9e:ab:a8:a9:f0:90:fc:ab:d0:
                    58:75:37:76:63:32:0f:a0:f8:56:f8:90:ed:cb:7b:
                    95:28:04:cf:70:1e:13:f7:cf:c7:8f:fc:e4:b1:53:
                    75:27:25:53:77:55:61:f7:2c:dc:d5:60:76:cd:f4:
                    dc:30:a5:08:3b:5f:69:6f:5c:ac:e2:18:be:74:ee:
                    9e:84:fa:c4:5f:5c:d6:bd:a3:63:66:73:2b:88:8e:
                    f7:d5:9f:fc:54:df:62:75:b7:d2:c2:1e:a2:8e:f2:
                    50:84:08:33:e8:a8:2a:99:86:18:d0:64:82:20:60:
                    c9:b8:e0:2b:d9:5a:7a:2f:33:7b:09:7f:bc:cd:88:
                    e5:5e:83:9f:76:e5:4e:29:78:eb:a7:49:71:17:06:
                    16:8c:d6:ff:35:53:5c:99:14:d5:e0:90:64:1c:00:
                    44:5d:b4:39:bb:f9:45:0e:7e:9d:4e:cb:a6:93:51:
                    82:55:5d:fd:b1:1a:e6:cf:33:49:c3:39:85:96:51:
                    3d:90:52:b9:dc:f9:04:3a:a9:77:25:ac:6e:6e:86:
                    a0:93:de:c5:08:a2:02:39:52:0c:27:92:cb:3a:43:
                    78:26:6e:37:e6:0a:a9:ce:5b:ae:fe:35:71:76:03:
                    4b:89:8a:6e:a7:1b:6c:30:df:81:ab:76:d7:95:db:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:59:42:3B:7E:61:A9:50:95:10:4E:F6:BC:1E:4E:83:FA:F7:A7
            X509v3 Authority Key Identifier:
                keyid:C8:C4:D8:D7:47:57:FD:41:36:DB:07:A1:58:79:7C:B7:D8:67:25:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/C8C4D8D74757FD4136DB07A158797CB7D867256C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8C4D8D74757FD4136DB07A158797CB7D867256C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vo9x8VeGdnQvwUtRvmvWUdsKk8VZaqAcjQBM8PVMHP7/0/323830343a323434303a3a2f33322d313238203d3e203532363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:37:5e:96:af:aa:95:90:c8:28:ba:86:49:e7:2f:ed:2c:27:
         e5:d6:4f:ab:89:6b:09:a4:c3:f9:1e:6e:43:ca:43:98:05:af:
         e4:3e:4b:fc:44:49:80:ac:68:c4:d6:de:e9:fb:49:68:bb:6c:
         53:93:07:fe:5a:18:70:70:15:0c:5e:be:42:46:15:ba:24:33:
         fb:d7:99:e2:10:c9:50:d3:94:ea:ff:91:34:18:81:31:9d:b3:
         d8:2c:c2:8a:83:97:f3:12:c6:b2:aa:d3:cd:ce:69:f9:18:b5:
         fc:37:bc:0a:0e:66:02:c8:93:86:8a:e1:6b:ea:47:1b:08:96:
         50:0e:a4:df:dd:9a:fa:5c:04:20:a6:28:64:70:d4:d3:dd:10:
         5a:e0:aa:75:2e:d2:16:3e:2f:1d:71:e4:11:69:c4:97:00:d0:
         cc:28:a0:ee:8d:83:ca:9f:55:0e:08:46:3d:66:c2:a5:04:34:
         59:92:19:8d:64:96:3d:14:38:f8:48:8b:e5:40:bc:cf:73:c6:
         4a:ac:71:ad:88:83:ef:03:0c:f2:b3:f2:4f:1d:91:ba:ce:fb:
         93:e3:b5:49:5b:ea:62:b3:2f:28:f3:1d:ff:7f:35:6c:96:35:
         27:b6:3b:64:47:89:80:ba:f7:86:ff:93:b5:8a:77:75:6a:80:
         b3:a7:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:12 2026 by rpki-client