Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa
File:                     323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier:          uwLHAHP6eVKIN9LSKU3TNLOMyTdKyxGBMYJqGnjOPts=
Subject key identifier:   A7:CF:80:03:63:8E:4D:7D:FD:78:A0:D6:CD:46:BD:35:E0:38:62:6E
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       14B905CE78150D63AE99BADB654FD4540F0F224C
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa
Signing time:             Mon 29 Jun 2026 12:02:30 +0000
ROA not before:           Mon 29 Jun 2026 11:57:30 +0000
ROA not after:            Mon 28 Jun 2027 12:02:30 +0000
asID:                     28131
IP address blocks:        2804:170:7200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b9:05:ce:78:15:0d:63:ae:99:ba:db:65:4f:d4:54:0f:0f:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Jun 29 11:57:30 2026 GMT
            Not After : Jun 28 12:02:30 2027 GMT
        Subject: CN=A7CF8003638E4D7DFD78A0D6CD46BD35E038626E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:a2:0d:dd:54:52:de:2c:bd:95:b9:28:16:
                    d3:3f:d8:95:0f:95:ad:50:c6:38:4a:b9:52:0e:55:
                    23:f5:9f:44:8f:36:b3:e9:c5:41:ca:84:cc:04:7c:
                    2b:8d:f6:c4:e6:5f:72:4d:ac:c1:66:aa:29:ed:0d:
                    d9:19:40:e3:f8:70:93:68:16:c4:f5:4d:fc:b8:6e:
                    57:ad:12:ce:1c:de:ef:c4:27:88:c1:f0:f6:a7:ca:
                    40:62:87:16:4b:d8:28:1f:f9:ac:6d:c1:24:99:4c:
                    31:76:0f:b2:d5:3b:85:a5:6c:c3:9d:94:85:21:db:
                    97:1e:69:c8:7c:7f:42:92:d2:43:fc:6a:aa:c6:0f:
                    78:29:57:50:1d:ec:83:44:28:0d:3e:8f:88:d8:66:
                    bc:42:ef:80:e7:5a:ea:10:d9:0e:1b:3f:23:67:47:
                    43:ae:bd:24:0a:df:b1:b2:89:0d:57:92:a3:9b:12:
                    7e:62:ed:db:1d:1d:45:fb:1f:1e:c2:a7:7e:94:29:
                    8e:65:50:86:59:e5:50:30:48:59:ed:02:98:52:5e:
                    c9:17:4b:55:62:67:db:ad:ca:48:3f:37:3a:44:a9:
                    d9:d6:28:49:1d:0b:9f:7a:bc:64:7e:ba:5d:4a:8d:
                    7e:16:1d:25:e5:c8:33:3a:f8:a5:88:e2:09:b1:f9:
                    67:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:80:03:63:8E:4D:7D:FD:78:A0:D6:CD:46:BD:35:E0:38:62:6E
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a373230303a3a2f34302d3430203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:93:62:9d:e4:71:60:32:f4:a2:39:46:ba:2e:b9:d0:71:5d:
         b4:53:26:b1:c4:41:17:26:32:83:f1:18:5d:4a:e8:bd:cc:ad:
         07:f3:93:63:ca:46:7f:15:f4:c2:86:d5:44:a4:ba:eb:e1:a0:
         2c:85:de:0b:fe:1f:a8:95:2c:56:75:c9:1c:d2:cd:a3:b1:6f:
         de:ae:be:c2:9b:37:cb:55:4e:71:9e:3f:5e:61:95:2d:ae:78:
         ca:87:80:27:be:8e:12:d4:74:a5:7b:de:d1:38:07:08:82:6a:
         c6:26:ac:69:fb:88:6d:66:8e:a1:ee:ab:97:d3:37:2e:b2:eb:
         c7:07:38:bb:0d:ae:19:bc:e8:c4:42:17:ea:22:43:62:e2:52:
         23:a9:58:91:3c:3f:78:12:29:94:50:f6:59:29:a3:22:ad:b9:
         6f:00:e6:38:14:52:f3:da:9d:c4:9a:28:36:f9:f8:7f:4d:0f:
         88:60:43:9e:32:3e:8d:33:fa:cd:70:04:74:a4:49:bf:51:d3:
         4f:62:b2:75:10:16:50:92:37:bf:c0:be:3e:95:f1:4f:ab:12:
         20:79:1b:d9:32:a0:44:f7:1d:2a:c2:37:f6:90:bd:74:96:bf:
         24:48:eb:0c:2c:e2:7d:18:a1:dd:7c:03:f5:d0:a7:28:2f:7c:
         64:a7:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:19 2026 by rpki-client