Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33332d3333203d3e20323633393135.roa
File:                     323830343a323761383a3a2f33332d3333203d3e20323633393135.roa (raw, json)
Hash identifier:          DSpTofAE1Jh2nfCaTN4ZG3vvqB22ozCpTOwyKizUXYs=
Subject key identifier:   2E:7A:74:7C:1D:C9:C0:6A:D1:BA:D7:21:97:E3:EE:BA:45:5A:88:7F
Certificate issuer:       /CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
Certificate serial:       60E2EF0E31367FA2A513B3757A6F9C6ADE7DAD09
Authority key identifier: D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33332d3333203d3e20323633393135.roa
Signing time:             Mon 20 Jul 2026 14:56:36 +0000
ROA not before:           Mon 20 Jul 2026 14:51:36 +0000
ROA not after:            Mon 19 Jul 2027 14:56:36 +0000
asID:                     263915
IP address blocks:        2804:27a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl
                          rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 18:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e2:ef:0e:31:36:7f:a2:a5:13:b3:75:7a:6f:9c:6a:de:7d:ad:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643
        Validity
            Not Before: Jul 20 14:51:36 2026 GMT
            Not After : Jul 19 14:56:36 2027 GMT
        Subject: CN=2E7A747C1DC9C06AD1BAD72197E3EEBA455A887F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:06:28:84:32:39:bc:d0:19:d5:27:ed:6a:
                    94:61:04:a3:53:0e:2f:20:b1:a0:31:d7:ef:66:c7:
                    b8:d6:44:4f:6d:91:28:cd:e3:0a:b6:26:fb:27:8b:
                    7f:e5:fe:ad:5e:59:21:61:c0:8f:fa:45:09:c6:db:
                    01:28:fe:6e:f8:2f:2d:06:9b:af:de:10:3a:b5:f8:
                    87:a3:da:c9:5a:58:e6:68:6a:01:3f:6c:b9:4d:ef:
                    c0:45:b4:bb:17:f2:d6:cc:30:eb:fa:38:3f:27:73:
                    58:c5:bb:9f:d7:2c:64:34:f2:5d:a1:f2:25:96:a9:
                    e2:a9:a0:4b:ff:44:56:26:a2:fb:66:e3:51:89:81:
                    53:97:61:4c:f0:7a:59:9a:32:75:4e:ca:f3:a9:f0:
                    a2:06:d5:e8:1f:72:80:5e:e9:43:17:b9:d5:45:fc:
                    24:6a:76:4f:15:93:a3:44:73:a1:18:7e:d4:61:b1:
                    ad:a7:99:77:db:31:1c:68:cc:dc:0d:c8:5e:ee:26:
                    76:a9:21:99:6c:b9:a0:3a:33:66:9f:b0:97:79:9c:
                    3d:12:02:a8:2c:99:8e:52:7f:8a:27:e4:4c:0a:42:
                    fa:a2:a8:15:11:60:4b:da:5d:1d:06:a1:39:56:a1:
                    37:fc:76:2f:97:3d:a1:a0:bb:05:1c:a8:3c:23:8b:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:74:7C:1D:C9:C0:6A:D1:BA:D7:21:97:E3:EE:BA:45:5A:88:7F
            X509v3 Authority Key Identifier:
                keyid:D3:CB:04:EE:0B:E9:FF:3E:45:D2:10:20:E3:5A:20:C0:2C:DF:96:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB04EE0BE9FF3E45D21020E35A20C02CDF9643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/2/323830343a323761383a3a2f33332d3333203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:b3:96:d8:34:fd:cd:c3:09:55:ba:3e:bf:65:4b:b4:d0:
         af:b4:b9:83:69:07:3f:ab:86:bf:a4:cd:6c:33:c5:9b:e3:5d:
         86:53:79:bb:bd:a4:76:43:e1:78:64:50:94:86:08:6a:b0:6f:
         fa:7a:e7:37:59:76:a5:b9:26:c7:bf:c4:9d:f2:ed:a6:06:77:
         99:0f:6a:94:f0:3e:72:ff:c0:f8:28:a3:3c:7d:c1:8e:59:89:
         ed:80:ed:7a:9f:ee:4d:2c:a1:5f:e7:9b:bd:7d:f1:19:6a:5e:
         c7:13:f8:5a:33:aa:d7:94:fd:5f:a2:dc:23:31:06:8e:db:7d:
         62:61:d4:0f:47:be:19:ef:ca:9b:e6:2a:38:e9:14:1e:fa:44:
         cd:ca:75:86:be:04:ea:47:d6:59:76:12:59:ce:c2:ca:d1:55:
         b7:bc:dc:15:da:38:71:07:d7:13:d8:66:35:ab:a7:48:1c:78:
         10:60:af:75:4d:24:25:d6:9e:f2:aa:f2:1b:7f:5b:c6:3b:2f:
         6c:65:e9:b9:d5:3a:6e:e8:a4:0a:ea:67:b0:9c:bb:67:f3:c1:
         7c:4d:50:dc:6f:27:66:5a:3c:ad:68:9f:9b:db:0e:01:68:9d:
         fe:d7:dc:5e:30:bd:7b:42:be:7c:6c:6b:cf:d3:ae:e2:25:dc:
         78:7c:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:51 2026 by rpki-client