Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
File:                     323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (raw, json)
Hash identifier:          ShlA2oCj/PNImFG0NSE9sZwqC2V3/0fL91TBBq0+nqk=
Subject key identifier:   61:FD:C1:CB:F2:53:80:72:9C:F6:87:C5:A6:0B:E5:69:88:0E:3B:77
Certificate issuer:       /CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
Certificate serial:       07B9B3F1BE4F166C89C3FE8D012EDE8ADC112BC4
Authority key identifier: D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
Signing time:             Tue 21 Jul 2026 22:02:27 +0000
ROA not before:           Tue 21 Jul 2026 21:57:27 +0000
ROA not after:            Tue 20 Jul 2027 22:02:27 +0000
asID:                     263252
IP address blocks:        2804:17cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b9:b3:f1:be:4f:16:6c:89:c3:fe:8d:01:2e:de:8a:dc:11:2b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
        Validity
            Not Before: Jul 21 21:57:27 2026 GMT
            Not After : Jul 20 22:02:27 2027 GMT
        Subject: CN=61FDC1CBF25380729CF687C5A60BE569880E3B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:9a:bc:5c:36:1b:a5:01:7d:73:5a:10:a5:
                    64:f5:34:77:eb:48:29:8a:d8:b6:fe:80:73:54:23:
                    c4:01:9a:6b:31:fe:77:69:4d:37:d1:2d:38:27:c9:
                    fb:17:23:0a:32:0d:54:30:8b:77:e4:fe:07:f2:52:
                    8f:ef:69:d4:3c:17:b7:48:59:78:04:f9:4b:b9:81:
                    e0:b9:dc:48:c7:7f:c4:6f:99:0a:04:f8:8e:b7:7d:
                    19:05:82:6b:bd:6d:15:4e:36:a0:d5:03:f0:71:e5:
                    11:19:fc:7d:de:31:13:2d:49:a5:9e:53:3a:2e:a9:
                    64:03:38:5f:f4:cf:9a:2a:81:8b:86:1a:18:48:7a:
                    d7:5d:2e:bb:37:33:e6:59:1f:e6:57:b3:27:ae:96:
                    cd:89:e7:2b:2a:72:aa:21:d3:a8:2a:5f:fc:81:b6:
                    2b:96:18:bd:07:7b:81:a2:2e:51:ca:e9:11:88:d2:
                    27:15:e9:43:7d:84:1c:64:79:76:1b:b2:74:b8:12:
                    f5:fb:51:00:f4:5d:9c:5c:a4:23:7b:e5:ff:5f:23:
                    e0:af:af:b0:2d:b6:6a:60:c4:1d:a7:4d:37:56:96:
                    b7:61:e5:02:44:e9:d4:73:dd:f2:03:2e:7a:a1:4b:
                    0a:a2:cf:67:14:4b:ea:02:2b:c8:1a:00:e4:ee:89:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:C1:CB:F2:53:80:72:9C:F6:87:C5:A6:0B:E5:69:88:0E:3B:77
            X509v3 Authority Key Identifier:
                keyid:D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:57:e2:56:c7:8e:c6:2d:17:ab:83:88:c2:8f:3b:32:03:c6:
         a9:e1:72:08:f4:22:b4:05:ab:98:b0:ef:4c:02:b1:6c:24:75:
         f6:a9:02:8e:f4:89:b8:56:1f:24:4c:cc:13:0e:cb:1e:19:09:
         9d:89:9e:a8:57:7f:f5:64:3d:ee:af:37:fb:b2:46:ce:e8:a0:
         29:dc:79:1f:d4:3d:80:f5:9a:a1:f0:ce:2b:de:b1:1e:a8:b1:
         19:78:a8:c7:ed:d9:f0:be:26:06:d3:f9:79:f6:4c:6e:03:ce:
         62:d7:f6:92:31:63:14:64:d1:33:89:58:5b:81:e6:4e:df:c7:
         e4:f7:4b:55:c1:66:0d:cc:ea:d5:6b:03:dd:82:04:fd:23:c7:
         83:59:f0:07:73:e7:73:16:41:5f:9f:00:b2:5e:91:91:f3:6a:
         ca:38:c2:90:05:96:6e:af:34:c4:07:4b:2d:a7:89:71:7d:f3:
         c8:b6:89:dd:dc:1a:1e:5c:58:bf:67:4c:1b:35:73:f1:19:3a:
         1f:34:e0:c7:49:04:1c:7e:17:35:a5:83:ac:4f:fd:c0:7b:8c:
         c3:95:d0:7f:72:66:25:8a:a0:42:86:19:79:5d:b3:29:34:c5:
         ca:aa:ed:67:72:eb:0d:c5:e7:67:c9:e5:25:d3:74:57:d5:df:
         5e:77:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:42:48 2026 by rpki-client