Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa
File:                     323830343a313436383a3a2f33322d313238203d3e20323633333238.roa (raw, json)
Hash identifier:          3wQeAdzNFRAqy0OxmQOWNuALdsmlCWNOFTk9fw4LTMw=
Subject key identifier:   18:67:C2:B6:24:AA:71:68:57:9A:4B:4C:72:01:65:6D:F1:12:22:0B
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       4D6246821C0B27308D60948BFB172EC611435217
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa
Signing time:             Tue 21 Jul 2026 13:53:27 +0000
ROA not before:           Tue 21 Jul 2026 13:48:27 +0000
ROA not after:            Tue 20 Jul 2027 13:53:27 +0000
asID:                     263328
IP address blocks:        2804:1468::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:46:82:1c:0b:27:30:8d:60:94:8b:fb:17:2e:c6:11:43:52:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Jul 21 13:48:27 2026 GMT
            Not After : Jul 20 13:53:27 2027 GMT
        Subject: CN=1867C2B624AA7168579A4B4C7201656DF112220B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:a3:b3:b7:15:74:ed:1e:6d:a0:a2:28:bf:
                    94:70:c0:2c:08:aa:5a:ec:da:13:f5:3a:13:08:b9:
                    fd:70:62:42:78:73:7b:06:71:97:1f:b3:2d:68:67:
                    ad:fe:0a:d8:fd:c3:68:49:de:89:c7:fe:e6:5c:98:
                    0d:cf:a0:8e:06:cb:05:34:d6:ab:92:90:3e:fe:6f:
                    6e:2a:04:68:9a:a2:54:ad:10:e5:22:00:bc:85:2b:
                    29:93:31:10:d9:aa:f3:c7:af:08:dc:93:c3:97:11:
                    d4:bf:f4:e4:37:f2:e1:2b:ce:57:df:55:62:29:9b:
                    88:61:b4:5b:f9:62:c2:27:b5:55:3e:55:3d:7b:43:
                    d2:b0:08:60:eb:0b:db:82:1f:f7:51:cf:74:08:9b:
                    08:88:87:88:fc:2e:80:70:49:19:b4:10:86:90:d3:
                    fd:7c:82:2a:74:c4:cc:46:24:c9:59:a8:b3:c0:ce:
                    b2:fe:80:23:d6:a7:bb:29:c0:7b:2d:95:f2:1a:7e:
                    0e:02:f9:9e:d9:4d:ec:1d:2b:bb:1b:24:10:2d:a0:
                    cc:db:79:e2:bc:62:8a:c6:90:fd:2a:1e:24:b5:ca:
                    6f:48:a5:62:60:69:3e:a6:e3:6d:59:2c:1d:45:32:
                    b5:15:62:97:16:c0:0d:1a:83:ce:1b:bc:05:dc:ad:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:C2:B6:24:AA:71:68:57:9A:4B:4C:72:01:65:6D:F1:12:22:0B
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/323830343a313436383a3a2f33322d313238203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1468::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:54:7b:82:3e:9b:07:1e:7f:26:00:61:6f:c3:90:8a:fd:4a:
         bc:5c:d9:5d:a7:3a:f5:70:65:c5:6b:8c:fe:66:59:84:8e:5a:
         31:1f:80:9a:74:f2:a7:bc:5d:4b:14:c4:ec:a1:84:2e:14:03:
         bb:2c:eb:a4:83:7e:ca:0e:3f:00:c6:a6:85:09:b1:a6:96:5d:
         b8:05:96:75:f6:8d:da:e4:5d:e9:6e:26:8c:48:6f:3a:2b:11:
         1d:24:e6:12:9d:98:35:e8:0f:89:cc:a4:17:ec:b6:59:a6:99:
         41:32:e8:45:2f:f4:44:20:62:4a:3b:c5:48:40:a9:ad:f4:fc:
         01:91:6f:92:5d:88:db:2d:1d:7d:04:b9:08:87:92:d9:57:92:
         54:2a:14:06:a5:ab:2e:0b:e3:6b:ca:99:71:99:f4:b7:75:12:
         bc:68:ec:3f:67:03:ab:ad:71:b3:fd:9b:cc:ba:8c:4b:fd:eb:
         fa:73:5a:67:58:04:d2:d7:e8:64:03:63:49:d7:69:42:58:a0:
         19:bb:49:7c:66:37:54:8d:33:7c:45:e7:23:a4:ee:2c:df:4d:
         7c:b2:1d:53:38:ee:ee:02:57:d9:53:bc:cb:28:ae:0a:30:77:
         a1:1b:88:ab:d5:84:af:4c:0a:c7:78:8d:7b:cb:bb:ac:0f:65:
         ff:5c:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:57 2026 by rpki-client