Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a393030303a3a2f33362d3336203d3e20323633353137.roa
File:                     323830343a313332303a393030303a3a2f33362d3336203d3e20323633353137.roa (raw, json)
Hash identifier:          T9VJbqwLFfMEvg50kMRH0759QXlig6NlZLFDg+8dtzU=
Subject key identifier:   D1:C4:22:46:5C:B1:96:12:27:20:FD:C5:52:C2:D9:B6:00:90:BC:A6
Certificate issuer:       /CN=25C491D82730A2AF6083391B8773D984D8728328
Certificate serial:       4CBAB9BA7599BA1E7684BC6A98CDD142CD8F3763
Authority key identifier: 25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a393030303a3a2f33362d3336203d3e20323633353137.roa
Signing time:             Tue 14 Jul 2026 13:50:36 +0000
ROA not before:           Tue 14 Jul 2026 13:45:36 +0000
ROA not after:            Tue 13 Jul 2027 13:50:36 +0000
asID:                     263517
IP address blocks:        2804:1320:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl
                          rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ba:b9:ba:75:99:ba:1e:76:84:bc:6a:98:cd:d1:42:cd:8f:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C491D82730A2AF6083391B8773D984D8728328
        Validity
            Not Before: Jul 14 13:45:36 2026 GMT
            Not After : Jul 13 13:50:36 2027 GMT
        Subject: CN=D1C422465CB196122720FDC552C2D9B60090BCA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:7d:15:e6:6a:05:46:fb:0d:ee:99:57:a9:
                    a4:96:92:7c:3f:d1:a4:a1:4c:c3:e8:23:b6:1e:11:
                    97:22:26:54:af:aa:8d:cb:8c:b7:03:3a:0c:11:7c:
                    1f:c7:7c:09:59:da:1a:af:dc:65:39:51:ee:61:7b:
                    37:37:9b:eb:ed:1d:5a:30:a0:d7:ad:19:e5:a1:21:
                    8f:86:e0:07:a9:e6:43:5d:68:2c:27:65:d2:5b:d3:
                    7b:7d:10:51:04:5c:86:85:7c:52:dd:20:fd:d0:48:
                    0e:5a:c4:52:28:95:29:7c:36:56:e1:74:cf:2b:ff:
                    43:7b:68:3e:70:c1:db:bc:24:f9:9b:f1:75:6a:8b:
                    15:34:3b:4c:23:32:c3:d1:d2:37:ee:75:fc:c6:f4:
                    79:4f:b1:ee:46:a8:18:92:c8:68:c3:29:22:89:74:
                    17:67:dc:4b:a9:6f:b5:db:23:f2:04:12:9c:36:52:
                    f8:ce:9c:5f:bd:e1:9f:88:fb:d5:31:eb:be:79:2f:
                    95:b1:bd:b8:b0:40:6f:9f:15:9c:69:39:76:cf:ff:
                    3f:0c:7e:97:c7:50:a2:3c:8d:30:49:39:9a:10:c1:
                    bb:58:fe:bd:b9:af:29:df:08:22:b1:3c:19:97:50:
                    74:ba:ae:8f:21:aa:c7:fb:2e:91:1f:ee:26:b0:95:
                    78:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C4:22:46:5C:B1:96:12:27:20:FD:C5:52:C2:D9:B6:00:90:BC:A6
            X509v3 Authority Key Identifier:
                keyid:25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/323830343a313332303a393030303a3a2f33362d3336203d3e20323633353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1320:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:07:c2:9a:28:40:af:cc:26:69:26:47:82:c2:00:86:66:
         33:81:2a:18:f5:b8:95:7c:fe:02:4b:29:f6:12:64:8d:1f:b8:
         77:77:35:9b:3f:4c:75:7f:8f:37:f5:3a:39:b6:b9:0e:de:81:
         ce:b1:70:70:f2:f1:43:de:3c:61:35:87:7e:b8:df:6f:d9:73:
         a4:aa:ae:c2:08:05:df:74:de:13:51:ab:ed:57:5f:5c:12:56:
         4b:6b:b5:0e:bd:f6:c5:45:85:22:8b:27:04:82:4d:3d:f2:a7:
         fe:9c:45:d9:0f:65:1b:ef:a1:89:d3:b0:0b:63:a2:17:76:a8:
         98:df:a6:74:8e:fb:b0:83:93:63:00:e3:36:e3:e7:2b:7e:c3:
         60:5c:5f:d8:55:15:16:b8:5f:cd:4d:d3:39:02:8b:d0:2f:a2:
         98:94:ef:98:b2:da:4d:7e:37:de:45:06:dd:b3:e3:da:2b:5e:
         ec:28:a9:14:4c:e5:4b:6f:c5:c7:e8:71:9b:7d:21:06:94:66:
         04:0a:4c:5b:d9:1d:2c:cc:d5:56:9a:18:67:74:ca:54:2e:c1:
         3e:c9:cf:c7:46:a6:53:3f:1d:84:e0:46:9d:c7:e1:d0:41:c7:
         e7:65:52:cb:d1:59:c6:b5:d2:51:cd:e7:27:e3:71:d3:59:aa:
         30:75:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:09:25 2026 by rpki-client