Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          Jr7B4zymL/R5OSaE4BCEhlW7e2ufap80gBxxuvYCMXk=
Subject key identifier:   12:90:C7:04:6F:65:A0:AA:3F:AA:AF:20:8D:88:28:C3:DB:37:8C:F0
Certificate issuer:       /CN=7815341A1229226B045BA14CE69989047BDCE9B3
Certificate serial:       74716185BAEAB484B8F75DF2D9BF45A8997A1120
Authority key identifier: 78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Sat 27 Jun 2026 18:13:14 +0000
ROA not before:           Sat 27 Jun 2026 18:08:14 +0000
ROA not after:            Sat 26 Jun 2027 18:13:14 +0000
asID:                     271484
IP address blocks:        2804:7c40:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:71:61:85:ba:ea:b4:84:b8:f7:5d:f2:d9:bf:45:a8:99:7a:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7815341A1229226B045BA14CE69989047BDCE9B3
        Validity
            Not Before: Jun 27 18:08:14 2026 GMT
            Not After : Jun 26 18:13:14 2027 GMT
        Subject: CN=1290C7046F65A0AA3FAAAF208D8828C3DB378CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:54:51:83:91:e9:eb:97:97:4a:aa:2a:e3:
                    dc:32:b7:95:43:89:0f:d1:27:92:94:e2:00:65:71:
                    c8:71:9b:b3:3c:be:5d:5a:a8:c6:b7:2d:55:f0:40:
                    11:48:ec:d2:14:5e:02:83:e8:6c:67:24:10:0a:03:
                    82:70:76:c0:aa:a4:39:d1:e2:b1:e1:6e:4f:20:46:
                    6a:2e:dc:93:d8:23:f3:76:cf:a3:59:ea:88:1f:ec:
                    2f:a6:ff:94:d9:3b:db:62:22:14:3d:68:05:bd:a9:
                    cb:5c:88:9b:17:b2:40:48:86:36:54:b9:09:b3:82:
                    b2:df:6e:03:3d:aa:ab:70:d7:23:81:42:42:b0:41:
                    0c:6e:62:7e:27:8c:95:03:bb:30:57:a8:fa:ec:bf:
                    61:65:1a:cb:ba:8f:a5:29:0b:66:66:02:09:34:5e:
                    60:5f:fc:83:45:99:75:c5:91:1a:d3:3a:d5:40:7c:
                    3a:b3:3a:59:ae:68:4d:14:0d:05:70:10:5c:50:b7:
                    70:bd:8f:0e:9f:d1:4a:7b:4f:ae:f6:fc:8d:be:18:
                    3d:03:47:75:a6:17:82:f4:34:51:00:28:43:ed:3b:
                    05:98:77:fa:ea:6d:88:d7:bc:63:d4:3f:a2:e3:97:
                    53:52:a0:76:b4:09:b5:a3:82:3a:7c:2b:d6:d9:11:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:C7:04:6F:65:A0:AA:3F:AA:AF:20:8D:88:28:C3:DB:37:8C:F0
            X509v3 Authority Key Identifier:
                keyid:78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:35:c9:43:1c:95:d5:a1:89:35:20:07:ff:61:00:a3:10:
         b4:b9:92:5e:b7:f9:0d:fc:48:26:5b:50:a6:a3:33:88:4d:e7:
         dd:ef:e0:de:82:6f:e0:da:18:5b:b7:01:d1:1d:9f:50:7b:d5:
         63:19:60:04:5f:ea:23:0f:f1:eb:fe:5b:8c:95:aa:3e:7f:89:
         af:04:db:a6:2c:2f:67:14:4a:69:45:81:7f:38:b8:f0:77:97:
         4c:38:60:ec:ce:94:0b:97:00:d3:6b:eb:3c:95:68:6d:de:d1:
         cb:bf:a7:61:a5:65:6a:d5:3b:9a:d3:b5:cc:5c:23:6f:3b:82:
         5f:3d:b7:fd:95:43:03:0a:67:c6:6b:82:bb:0c:e6:f9:9d:c3:
         bc:88:00:3e:f9:05:44:8f:2f:08:b8:f6:7e:79:d4:38:ab:4e:
         7b:1e:bc:a7:11:b9:16:63:45:dc:ae:1e:f9:c7:06:c0:ff:ac:
         27:bd:ae:55:76:bc:f3:d4:6e:88:cd:43:79:57:b9:de:3b:ae:
         d4:e8:6b:d1:4e:af:d6:ae:30:f4:6e:01:6f:a3:97:91:cb:8f:
         7f:01:af:be:68:ee:37:58:0f:06:e1:50:3c:3d:d2:2b:ad:68:
         13:40:92:c4:99:c3:d6:f1:f1:61:ab:73:39:f4:ec:73:1f:fe:
         6b:ff:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:45 2026 by rpki-client