Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33342d3334203d3e20323632383432.roa
File:                     323830343a373333383a3a2f33342d3334203d3e20323632383432.roa (raw, json)
Hash identifier:          DkA2sK9BHLrQoKE5LDjKcfIcXYG63IHEaka7vn3k//k=
Subject key identifier:   CA:CB:3B:A8:9B:D1:B6:D2:1C:5F:FF:BB:09:7F:3D:04:A3:90:01:40
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       5CB253DFE82BFE3E992B8265E9F47364F08F81E5
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33342d3334203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:23 +0000
ROA not before:           Fri 10 Jul 2026 14:18:23 +0000
ROA not after:            Fri 09 Jul 2027 14:23:23 +0000
asID:                     262842
IP address blocks:        2804:7338::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b2:53:df:e8:2b:fe:3e:99:2b:82:65:e9:f4:73:64:f0:8f:81:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:23 2026 GMT
            Not After : Jul  9 14:23:23 2027 GMT
        Subject: CN=CACB3BA89BD1B6D21C5FFFBB097F3D04A3900140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:92:52:f7:b8:aa:d5:33:6f:95:43:9d:2c:
                    81:da:1f:4f:da:a7:7f:d0:bf:be:13:e1:53:5b:2a:
                    d3:eb:82:f0:1a:b2:9a:79:d1:c8:0f:ad:c4:2f:2b:
                    ad:72:10:18:6b:67:87:93:3a:9f:2a:9d:51:61:6f:
                    1f:7d:18:c2:51:73:6f:1d:d9:22:26:2f:61:57:07:
                    c4:1c:88:60:c2:7a:45:2e:ca:23:2c:e8:b2:65:e8:
                    b2:8d:aa:e2:e3:16:d9:ff:3d:26:51:96:88:c0:05:
                    59:0d:8b:a8:85:d5:67:65:3e:84:6c:47:8e:50:01:
                    d7:be:a0:49:77:86:a1:62:d7:77:4d:3c:86:ee:57:
                    8b:fb:5c:5d:9c:84:4e:1e:71:11:ec:41:49:af:b4:
                    ea:20:bc:5a:21:39:17:83:60:34:1b:da:37:28:b3:
                    6b:a0:18:92:5d:e6:8f:54:d7:f5:8a:5f:96:7e:b6:
                    3d:e6:f3:1e:31:e5:c8:ce:ca:51:e9:15:48:0b:af:
                    a9:1f:1b:1f:a0:68:90:bd:15:60:a2:69:4a:b7:f8:
                    85:a8:21:38:eb:f1:ed:3a:cd:42:17:24:01:85:69:
                    5a:e5:8b:3b:b8:07:f1:4b:2c:5e:74:62:51:c6:06:
                    8c:9b:af:0c:62:b2:31:2c:6a:09:4a:cf:49:fb:b0:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CB:3B:A8:9B:D1:B6:D2:1C:5F:FF:BB:09:7F:3D:04:A3:90:01:40
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/323830343a373333383a3a2f33342d3334203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7338::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:7f:4e:46:2e:eb:35:0a:5a:94:fd:a7:a4:b2:c7:70:e2:
         a4:14:97:ec:3f:55:d6:12:d3:d2:7c:ea:91:bd:71:52:1c:0f:
         63:41:f2:08:9c:c2:ce:77:c8:b9:df:e0:8e:a8:b7:3b:8f:dd:
         e6:ab:dc:4b:9a:54:67:e2:3d:4a:80:59:33:e1:fd:82:fa:0b:
         e2:d0:f9:0a:46:d3:e8:3f:d5:a2:ca:81:13:76:12:2d:0f:d7:
         1f:cd:ee:3c:62:de:46:0e:b4:ab:ec:9b:5e:a8:e3:1b:53:8a:
         93:52:48:1a:30:4c:5e:15:a3:0e:1e:06:dd:77:db:d5:ca:b2:
         4a:69:eb:2a:2c:1c:f9:50:cd:1a:7f:34:ce:18:99:c3:fb:17:
         2b:f2:92:b2:85:2a:9a:0d:54:49:fb:90:ed:f5:83:67:66:dd:
         5d:bf:dc:f9:d0:2a:cf:04:40:17:4f:2f:0a:1c:f4:b7:a3:f5:
         3c:3c:f0:ca:f3:2f:69:37:1a:2d:55:d3:e3:90:9c:b3:f9:60:
         34:66:61:e6:81:b1:ba:3e:2f:8a:28:4c:e6:4e:d1:a7:ed:9f:
         8b:54:17:1d:9f:bc:41:93:8c:b3:45:7a:cb:e2:53:37:f4:b2:
         8b:ca:1d:bd:c7:f1:2f:be:bd:bb:b3:13:88:4d:21:85:0c:a8:
         a4:9b:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:52 2026 by rpki-client