Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a333030303a3a2f33362d3336203d3e20323633353137.roa
File:                     323830343a313332303a333030303a3a2f33362d3336203d3e20323633353137.roa (raw, json)
Hash identifier:          fdHg3PiyNww7pXvTH7Ns0cnv9Durr49QJKNsFfjUnDU=
Subject key identifier:   39:7D:59:E3:21:BC:CC:EA:DA:F4:7F:84:7E:BD:B1:32:CE:A1:C9:77
Certificate issuer:       /CN=25C491D82730A2AF6083391B8773D984D8728328
Certificate serial:       443604288DA2AC0B36EF7C25F053BF9E4786703A
Authority key identifier: 25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a333030303a3a2f33362d3336203d3e20323633353137.roa
Signing time:             Tue 14 Jul 2026 13:50:36 +0000
ROA not before:           Tue 14 Jul 2026 13:45:36 +0000
ROA not after:            Tue 13 Jul 2027 13:50:36 +0000
asID:                     263517
IP address blocks:        2804:1320:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:36:04:28:8d:a2:ac:0b:36:ef:7c:25:f0:53:bf:9e:47:86:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C491D82730A2AF6083391B8773D984D8728328
        Validity
            Not Before: Jul 14 13:45:36 2026 GMT
            Not After : Jul 13 13:50:36 2027 GMT
        Subject: CN=397D59E321BCCCEADAF47F847EBDB132CEA1C977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:98:23:c5:9c:95:f0:cf:c5:51:d2:bb:78:c5:
                    13:fb:c4:0b:03:2c:4c:df:13:0d:d7:dd:6b:ff:af:
                    74:c8:29:34:bd:80:e9:bc:8b:06:ad:d2:e9:f4:ac:
                    b8:1f:48:7a:39:fa:67:88:21:ef:91:4e:10:08:a7:
                    7a:ce:6c:95:99:0c:6a:d8:45:b0:9a:c4:09:4f:42:
                    38:d4:cc:d9:46:be:15:1b:c5:ce:82:66:38:26:15:
                    bf:bb:38:a0:f4:22:a0:11:bf:9a:b0:6b:e8:3f:a8:
                    9b:cc:fe:3f:de:29:c6:88:cc:da:bf:47:cb:d3:bd:
                    3b:46:16:4d:e7:6d:0f:7f:14:66:2d:07:8c:a4:23:
                    88:aa:e2:5c:de:6d:18:5a:9e:5c:ea:f5:78:55:af:
                    c0:37:5e:da:4b:f9:43:a3:df:2b:da:c1:0c:c7:06:
                    39:b1:c1:81:4a:6d:a6:a9:da:16:f1:04:48:75:ab:
                    ca:94:90:02:d2:68:f8:78:23:85:d1:0a:1d:9b:d8:
                    5d:2a:d7:c0:e8:a2:c4:73:15:c6:40:8d:86:a0:62:
                    8f:7a:b6:1a:6a:66:cd:ed:65:87:ce:f1:5e:57:f8:
                    58:82:e7:b9:0c:1f:09:dc:1e:38:85:eb:cd:1c:ea:
                    64:5b:b0:74:5e:ce:19:93:e6:2f:bf:ae:32:51:5c:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:59:E3:21:BC:CC:EA:DA:F4:7F:84:7E:BD:B1:32:CE:A1:C9:77
            X509v3 Authority Key Identifier:
                keyid:25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a333030303a3a2f33362d3336203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1320:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:8a:b7:b2:b5:ec:5e:d9:93:db:26:3f:6b:9e:a2:b9:12:78:
         38:5d:bd:bc:a3:2c:8d:7b:25:23:52:46:d3:60:61:26:01:5d:
         94:ac:a3:c1:70:3d:80:1f:a6:a0:85:a4:de:b8:d9:d4:93:4a:
         2d:ae:92:43:eb:7e:60:67:50:fe:51:1e:79:0c:60:d6:a6:f0:
         9a:b8:d8:e6:b0:fb:e3:f2:f3:06:29:8c:6b:31:9a:07:c8:3a:
         14:c8:fe:b5:e1:11:fd:b6:67:b0:31:2e:88:dc:92:86:9b:3e:
         dd:d3:6b:f3:90:fa:af:4f:e8:b9:fc:00:56:d5:f3:74:77:00:
         42:0a:34:d1:34:16:57:e0:28:5d:7c:71:c1:db:7d:07:a2:59:
         40:45:6b:da:e2:87:ec:09:63:56:f4:bf:09:3e:ec:1d:0d:67:
         7b:40:0c:64:93:33:c6:b2:81:c1:4f:31:6a:fb:f4:1e:52:7c:
         bf:bf:d8:0a:a8:e0:91:62:69:8e:07:89:70:04:58:a7:89:ae:
         8a:e0:b0:ba:51:69:9b:a8:fb:6d:75:1c:28:fd:24:be:f4:a3:
         5f:2a:45:2d:36:20:c2:fd:c1:39:47:b2:f3:8a:89:83:8e:09:
         a0:48:41:c6:55:0b:6d:82:cb:86:f7:8f:fe:0a:36:29:96:9b:
         9a:e3:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:13 2026 by rpki-client