Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/323830343a346666383a3a2f33322d3332203d3e20323638333631.roa
File:                     323830343a346666383a3a2f33322d3332203d3e20323638333631.roa (raw, json)
Hash identifier:          Ja5AQtEsVhVHr6TLsIYS+4W37MlVFDxxrgrwgbu8iJs=
Subject key identifier:   D2:EF:55:D2:1E:0B:1C:0D:98:CD:75:1B:C4:AF:00:EB:48:D7:AB:8B
Certificate issuer:       /CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
Certificate serial:       4C6D80FA8165ABE098102808F6819D8F687E1C5A
Authority key identifier: D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/323830343a346666383a3a2f33322d3332203d3e20323638333631.roa
Signing time:             Wed 08 Jul 2026 19:48:32 +0000
ROA not before:           Wed 08 Jul 2026 19:43:32 +0000
ROA not after:            Wed 07 Jul 2027 19:48:32 +0000
asID:                     268361
IP address blocks:        2804:4ff8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl
                          rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6d:80:fa:81:65:ab:e0:98:10:28:08:f6:81:9d:8f:68:7e:1c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3
        Validity
            Not Before: Jul  8 19:43:32 2026 GMT
            Not After : Jul  7 19:48:32 2027 GMT
        Subject: CN=D2EF55D21E0B1C0D98CD751BC4AF00EB48D7AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:38:98:4f:49:5a:c7:0b:33:d5:9e:eb:80:
                    7f:7f:90:a1:62:75:d9:0c:4d:67:97:85:bf:15:cc:
                    10:5f:f7:f9:03:7f:98:3e:1c:bd:c3:50:0b:7c:c5:
                    56:5a:bc:81:ca:6d:1d:93:d4:ad:08:e2:88:14:e2:
                    4a:f4:62:37:43:35:c6:20:49:32:5b:04:9a:3b:86:
                    29:cb:57:5a:32:56:39:e5:f2:8d:ab:cc:fd:3d:6f:
                    65:a9:4f:f0:63:4d:51:b6:90:4d:ad:f4:93:99:00:
                    f9:9d:78:db:38:5f:67:ea:3f:e8:13:dd:96:f1:5f:
                    77:34:4c:08:5b:f7:a1:17:87:fe:9b:05:c0:41:65:
                    2d:f0:79:5c:9c:21:5f:66:52:89:fa:aa:40:db:33:
                    88:c3:d3:d2:06:4b:9b:bb:93:29:5c:c6:23:0d:3b:
                    7e:e2:f2:03:74:06:2b:91:e3:cd:34:bb:5b:2d:51:
                    89:e3:36:5c:13:a3:a0:ea:44:72:33:45:57:ca:72:
                    4d:2f:b6:56:d7:4b:24:18:90:17:4a:fb:59:17:f6:
                    46:a0:a6:74:ed:50:59:85:ce:bf:d6:3b:67:91:57:
                    5e:40:a6:1d:97:1f:77:f9:fd:8d:0d:28:fd:b1:80:
                    b1:ca:7d:70:ee:b2:0e:e5:c6:8e:ab:39:9f:d7:30:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:55:D2:1E:0B:1C:0D:98:CD:75:1B:C4:AF:00:EB:48:D7:AB:8B
            X509v3 Authority Key Identifier:
                keyid:D2:30:19:2A:7A:82:DC:5F:DC:C7:1C:9D:A9:8D:CE:7A:98:F5:05:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D230192A7A82DC5FDCC71C9DA98DCE7A98F505E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PP9XZGLaB9TEx2dfFrBZRNaSHoJqJyWWYiKAW99xxxU/0/323830343a346666383a3a2f33322d3332203d3e20323638333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ff8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:89:4b:15:74:73:2b:03:ca:f3:51:cd:aa:7b:e0:ab:ab:
         d5:0f:1a:64:2b:10:53:82:e6:03:e7:89:cd:fe:88:fe:bb:9c:
         77:67:bb:13:d8:81:21:fc:91:66:2d:0f:84:3f:4d:c0:2a:e6:
         34:f8:c7:e7:b4:d8:bc:77:8d:fc:49:25:ca:71:8d:28:e5:13:
         1b:c6:80:8b:0d:c7:72:01:5d:04:4f:19:1a:d6:82:4c:37:df:
         67:9c:5e:02:6b:27:92:e3:a0:db:ac:ee:97:e8:e2:5c:6a:ee:
         17:cb:1a:05:97:c0:77:70:79:be:7d:ce:8b:6e:90:0f:05:64:
         f1:4a:73:b4:04:2f:30:10:e6:aa:4d:70:0e:35:41:96:0e:8c:
         35:a5:6d:86:9f:69:e2:3b:fc:96:98:77:8f:06:bb:86:f3:d4:
         08:9a:b1:cb:76:cd:b4:ec:af:58:51:36:f7:8f:fd:17:73:7b:
         a8:31:fa:1b:37:32:b5:ca:0a:6f:22:64:ff:76:9a:25:cc:50:
         ca:e8:06:63:66:96:96:7b:9f:41:ce:33:a5:74:e5:1a:91:e5:
         92:76:21:ba:10:dd:3d:4c:52:9e:bb:d3:b8:84:10:63:e7:72:
         0b:b6:eb:fc:4a:a9:9e:f9:ea:91:3a:45:05:27:24:42:2d:9f:
         56:98:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:04 2026 by rpki-client