Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33332d3333203d3e20323730373039.roa
File:                     323830343a373032383a3a2f33332d3333203d3e20323730373039.roa (raw, json)
Hash identifier:          Su1Oi4jEIKK4nHQaxIuLEO0zyTgs1Rx3PRTuJEuHLH8=
Subject key identifier:   2E:5C:CF:0A:9C:BA:4F:66:07:62:F4:AB:22:93:63:A6:DD:B3:05:43
Certificate issuer:       /CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
Certificate serial:       111208FA92FA1EFEA2B15073D03E361009D122F4
Authority key identifier: CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33332d3333203d3e20323730373039.roa
Signing time:             Sat 27 Jun 2026 02:33:51 +0000
ROA not before:           Sat 27 Jun 2026 02:28:51 +0000
ROA not after:            Sat 26 Jun 2027 02:33:51 +0000
asID:                     270709
IP address blocks:        2804:7028::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl
                          rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:12:08:fa:92:fa:1e:fe:a2:b1:50:73:d0:3e:36:10:09:d1:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
        Validity
            Not Before: Jun 27 02:28:51 2026 GMT
            Not After : Jun 26 02:33:51 2027 GMT
        Subject: CN=2E5CCF0A9CBA4F660762F4AB229363A6DDB30543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:19:8f:60:50:af:ed:7e:25:e4:63:8b:fd:
                    a8:49:93:3e:e8:56:46:e4:53:74:14:8d:b7:8a:c4:
                    3c:76:1d:64:cc:7c:8f:ac:e7:44:50:6f:40:fc:4f:
                    c7:a5:ba:34:97:e8:47:00:0f:47:8e:53:29:61:70:
                    77:6c:8b:0f:6c:fb:2d:23:37:50:b9:ec:23:8b:f4:
                    1b:fa:af:78:65:f3:af:e5:37:9c:3b:8c:a7:e5:88:
                    d1:99:9b:9f:2d:a3:7e:80:77:65:21:4c:20:5f:72:
                    cb:4d:ba:a2:96:da:9d:34:f7:8b:d6:99:e3:9c:0b:
                    6f:6c:41:68:c3:21:f9:48:8d:f4:12:b4:b4:81:53:
                    ce:41:76:c4:1d:2c:a1:73:5c:b2:f5:ac:ec:bc:b7:
                    a8:0e:18:55:d0:95:47:b5:15:90:d3:9c:9c:f7:df:
                    3d:5a:ec:3e:1f:6d:52:39:96:ff:de:df:22:62:d1:
                    cf:92:5f:73:94:69:13:9e:77:e2:35:da:c8:9c:7f:
                    c3:cc:90:ba:76:e1:55:b9:04:79:5e:46:6e:97:6d:
                    47:11:b5:8b:d7:84:44:34:68:43:5e:64:6d:b6:5a:
                    9d:a6:a2:4b:6c:81:c8:37:c9:fd:57:b0:1b:63:67:
                    88:15:43:3b:05:ca:d2:d2:c0:00:cb:3e:f3:dc:06:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:CF:0A:9C:BA:4F:66:07:62:F4:AB:22:93:63:A6:DD:B3:05:43
            X509v3 Authority Key Identifier:
                keyid:CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/323830343a373032383a3a2f33332d3333203d3e20323730373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7028::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:7b:ff:df:84:0b:b0:49:65:77:4b:cc:22:85:c9:2f:34:c1:
         b5:8b:b4:9f:c1:5b:63:33:52:16:2a:b3:a2:b8:51:65:1b:f6:
         24:f6:71:c6:f6:69:62:f2:2a:5d:ed:64:7e:b4:c5:ad:00:4c:
         36:f8:b9:c1:f1:ab:15:00:03:ca:48:8d:f5:f0:1b:b5:a8:50:
         83:0f:a2:df:de:5e:6d:23:e3:b7:10:fd:4a:f9:c9:01:d2:31:
         17:99:be:f6:4a:d7:f3:f4:34:b5:93:a3:4a:1e:5b:e5:dc:d4:
         c4:e9:54:6d:54:6a:20:41:73:49:c8:1d:2e:ba:8b:7a:0d:69:
         5f:17:bf:66:8b:ed:23:1d:c0:82:21:d5:1e:b7:cb:1a:d6:7f:
         49:5b:f4:0c:99:fe:f1:f7:c0:c7:d1:92:c6:44:7e:14:3c:6a:
         a6:ac:85:99:c5:88:51:14:65:b0:a7:59:a6:22:9b:e9:c0:15:
         73:fa:71:21:a5:0f:19:45:1d:b3:0d:7d:76:d4:46:86:eb:53:
         66:fc:d8:1c:c1:ad:fc:3d:39:db:57:74:c9:6b:1e:c7:27:c7:
         dc:39:a9:7c:0f:c0:10:bc:27:27:a1:83:3e:e0:ed:90:d6:17:
         df:4e:e1:59:7b:10:83:82:c3:62:1c:b1:4b:1d:50:de:0a:2a:
         22:15:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:26 2026 by rpki-client