Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a633030303a3a2f33342d3334203d3e20323637343132.roa
File:                     323830343a346431383a633030303a3a2f33342d3334203d3e20323637343132.roa (raw, json)
Hash identifier:          C3oh8jg6x3ss6NgqIzrqVXVoDSU+W9AkegjVJ5o6YjU=
Subject key identifier:   CD:CF:F2:99:2C:6C:A0:9F:3D:E7:61:B9:9F:18:91:73:D3:4A:95:03
Certificate issuer:       /CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
Certificate serial:       76224F1CE1AAF362F0E99E719D77F8C6B33DCCC6
Authority key identifier: D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a633030303a3a2f33342d3334203d3e20323637343132.roa
Signing time:             Tue 21 Jul 2026 19:45:28 +0000
ROA not before:           Tue 21 Jul 2026 19:40:28 +0000
ROA not after:            Tue 20 Jul 2027 19:45:28 +0000
asID:                     267412
IP address blocks:        2804:4d18:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl
                          rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:22:4f:1c:e1:aa:f3:62:f0:e9:9e:71:9d:77:f8:c6:b3:3d:cc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D384D2C597E4FB4AE0929CF5FDE05B99DDF31173
        Validity
            Not Before: Jul 21 19:40:28 2026 GMT
            Not After : Jul 20 19:45:28 2027 GMT
        Subject: CN=CDCFF2992C6CA09F3DE761B99F189173D34A9503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:ee:e9:76:75:44:75:d9:1e:bb:86:76:45:
                    7e:32:ec:18:15:0e:9d:2e:df:74:ad:ab:96:43:90:
                    8f:5a:f0:6a:4f:83:13:c4:ab:21:a1:ec:f1:11:a9:
                    fd:25:a6:b8:e1:3e:e4:5d:99:87:72:08:39:cf:ac:
                    17:13:0d:12:b2:90:09:40:cc:02:b0:75:fa:f6:e1:
                    84:e0:f2:ce:7f:0a:86:12:5a:48:c7:e9:df:3c:c2:
                    58:0b:0a:84:fb:81:91:78:ca:cd:e9:63:bf:23:97:
                    f8:ad:6d:50:2d:e5:07:9b:85:31:bb:fd:d1:c3:52:
                    bc:18:07:7b:ae:d8:53:75:0c:d2:0c:f4:4f:1c:22:
                    5a:74:aa:67:55:e1:f6:87:3c:04:d1:a5:18:10:dd:
                    e0:ee:21:67:2e:6b:57:69:8d:85:aa:d8:7b:ab:ee:
                    b9:9b:ba:75:57:68:2d:b4:5d:db:4b:a2:35:a3:70:
                    27:cc:14:11:cc:d3:22:38:d7:a3:93:c8:21:89:89:
                    0d:a8:59:aa:30:42:df:7c:8d:56:44:b9:06:ab:e1:
                    44:9c:fa:89:37:18:11:8b:1f:ef:39:01:22:87:48:
                    60:e7:b9:47:48:4c:2e:04:69:8a:53:ed:b3:e9:b2:
                    41:cf:bb:f3:a7:91:29:90:f3:42:5a:4c:4c:e0:a6:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:F2:99:2C:6C:A0:9F:3D:E7:61:B9:9F:18:91:73:D3:4A:95:03
            X509v3 Authority Key Identifier:
                keyid:D3:84:D2:C5:97:E4:FB:4A:E0:92:9C:F5:FD:E0:5B:99:DD:F3:11:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D384D2C597E4FB4AE0929CF5FDE05B99DDF31173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T6FA5vN6Uy3M1gg4abcRpbJun8TyAL9e7C8dhrKcaCB/1/323830343a346431383a633030303a3a2f33342d3334203d3e20323637343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d18:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:e8:97:b3:ee:4c:8d:84:b0:3a:05:82:12:81:5b:57:fe:
         f1:23:9e:12:f5:43:f0:36:60:97:c2:28:82:46:38:eb:51:31:
         da:17:a8:d6:08:9d:47:3c:1a:58:64:d5:99:65:3f:86:f4:a3:
         62:35:52:ee:e8:24:96:13:47:59:a2:d9:5f:6f:04:fb:f0:6f:
         22:f7:e9:0d:69:e7:8b:31:0e:d3:32:f3:ae:98:f9:79:96:7b:
         f0:35:bf:ba:1b:87:a7:eb:fa:14:54:a0:01:63:74:b3:64:ff:
         b9:7b:9d:e0:ad:a9:a0:df:7e:14:8d:89:c5:54:7c:af:36:85:
         ac:57:d3:59:c5:b8:6f:ac:8e:d4:76:bf:6d:ba:11:55:0a:ac:
         5d:0a:38:74:fb:b6:8a:86:54:58:d7:f5:86:0a:5b:96:8a:4f:
         47:09:76:15:35:4f:9b:51:6d:1f:3a:a1:a9:e0:5d:5a:5f:69:
         ff:4d:d4:e6:fb:d8:70:b1:bc:2e:7a:88:56:9d:fb:90:84:68:
         d6:7f:ae:98:03:ba:0e:bf:e4:ff:7a:80:fa:50:0a:f7:e3:2b:
         07:4b:ba:fa:ba:b8:3a:bc:84:39:47:97:45:6f:36:6a:eb:b0:
         9d:07:9f:09:46:50:ef:14:b1:95:80:a0:5c:f0:66:48:da:5d:
         d1:d5:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:33 2026 by rpki-client