Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa
File:                     323830343a353830633a3a2f33342d3334203d3e20323638313033.roa (raw, json)
Hash identifier:          8fJflTZEcDXsTkN9CKflx6+6wiI4UrV9D83vm4kLivA=
Subject key identifier:   E6:69:32:22:82:22:DE:D3:85:4F:29:96:20:63:DA:2D:C4:A6:7E:9B
Certificate issuer:       /CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
Certificate serial:       47DA8B3A7647FCC7A9C1CA3C1454018E75205BED
Authority key identifier: 39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa
Signing time:             Wed 22 Jul 2026 04:02:27 +0000
ROA not before:           Wed 22 Jul 2026 03:57:27 +0000
ROA not after:            Wed 21 Jul 2027 04:02:27 +0000
asID:                     268103
IP address blocks:        2804:580c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl
                          rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:8b:3a:76:47:fc:c7:a9:c1:ca:3c:14:54:01:8e:75:20:5b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39F1F6C3A26D816A2FCB216B7D6FC224391E0DED
        Validity
            Not Before: Jul 22 03:57:27 2026 GMT
            Not After : Jul 21 04:02:27 2027 GMT
        Subject: CN=E66932228222DED3854F29962063DA2DC4A67E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:b3:fb:04:6a:78:17:7b:9c:4e:37:eb:bc:
                    37:84:5f:5b:21:93:e3:ac:09:f2:50:79:ae:28:4d:
                    51:b5:e9:68:b4:50:b5:f1:cc:43:62:45:3e:21:bd:
                    26:3b:49:58:b9:d6:6b:10:5e:fc:d8:f2:4c:7f:d9:
                    69:41:d3:48:3d:9a:3e:e9:5b:0f:2f:a9:d0:f7:d0:
                    0d:c3:16:ab:b6:11:64:db:be:8b:5c:ac:83:e6:54:
                    97:34:41:02:f8:e0:53:6b:dd:7d:f4:89:4a:53:82:
                    c3:94:e6:fc:6b:ae:f6:1a:ba:5f:d4:93:15:db:2a:
                    a3:6a:37:57:8a:61:84:16:da:f5:ec:87:44:44:d6:
                    f2:16:0c:4f:1d:dd:0a:bc:fd:0e:6d:63:69:09:a9:
                    cd:04:5d:54:84:f8:ee:d9:a6:1b:0f:e3:4c:07:4e:
                    25:11:0a:41:c2:28:b1:a0:a5:90:0b:82:41:cf:d2:
                    0d:b7:d5:31:fd:21:ea:1a:fe:39:ad:a3:d6:3b:25:
                    62:1d:65:70:4b:d7:e9:ac:5e:16:25:64:77:4f:30:
                    ed:96:ab:35:22:ff:3a:fc:8e:57:a0:c2:75:49:30:
                    82:ca:8e:a5:48:8a:6c:17:6c:06:1a:90:3e:78:07:
                    58:0a:06:3a:2f:6d:eb:35:d2:5e:7e:e4:67:cc:36:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:32:22:82:22:DE:D3:85:4F:29:96:20:63:DA:2D:C4:A6:7E:9B
            X509v3 Authority Key Identifier:
                keyid:39:F1:F6:C3:A2:6D:81:6A:2F:CB:21:6B:7D:6F:C2:24:39:1E:0D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39F1F6C3A26D816A2FCB216B7D6FC224391E0DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YZ2bVnaoaraNUntkZBufnTiePMFDwVkzDoLCHnmgFYB/0/323830343a353830633a3a2f33342d3334203d3e20323638313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:580c::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:9b:32:1f:95:b2:ea:8e:ba:b2:14:6a:b1:2e:2e:93:54:
         a6:15:98:98:93:a1:2d:34:37:cc:0c:88:53:4e:de:63:29:fd:
         86:1a:0d:4d:50:a1:d5:69:67:cd:0c:5d:11:71:be:10:f4:a9:
         ef:f0:23:c6:55:70:c5:2e:cb:48:f5:f8:a1:eb:a6:cc:91:65:
         a1:75:77:03:e6:e0:ef:3d:f4:ee:9a:de:6d:c0:4d:d3:47:03:
         14:43:a2:80:d4:ae:18:ac:6e:77:1e:59:08:cf:a2:e4:f0:0d:
         17:66:ee:71:65:11:e8:b3:19:1c:51:80:12:4c:f5:96:8f:ca:
         26:ae:df:32:6a:a1:a6:ed:ed:7e:a0:5f:f4:27:2b:c1:50:a3:
         83:04:de:96:66:56:e0:fe:63:90:44:89:27:5d:bd:88:6d:f2:
         c4:75:ad:e1:39:8f:44:fc:67:53:77:04:15:8a:cc:da:32:d2:
         76:a6:5e:57:1e:a3:3d:f5:d6:88:c7:cf:af:4d:5c:18:16:6c:
         b6:b7:ca:23:2e:4a:bf:85:a0:af:b9:89:6c:d3:6e:fb:a1:f1:
         0f:33:2b:2b:51:03:4e:50:0f:9a:f6:34:44:3d:15:50:74:c4:
         dc:ab:9a:b8:8c:f3:de:2d:0f:a1:bf:78:8d:dc:67:be:83:a5:
         d6:b3:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:53:43 2026 by rpki-client