Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a383030303a3a2f33332d3333203d3e20323638313731.roa
File:                     323830343a353932343a383030303a3a2f33332d3333203d3e20323638313731.roa (raw, json)
Hash identifier:          m4zEEoi6rMBo64vZ2RWAWXvU64SRAXkxvYsRFMkkVsk=
Subject key identifier:   3F:56:90:6D:34:68:98:61:C0:9F:6B:0B:43:23:52:CC:B8:BA:61:93
Certificate issuer:       /CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
Certificate serial:       7DBE070026C218B514645BBB6C94AE467452E0E8
Authority key identifier: 09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a383030303a3a2f33332d3333203d3e20323638313731.roa
Signing time:             Fri 17 Jul 2026 16:52:46 +0000
ROA not before:           Fri 17 Jul 2026 16:47:46 +0000
ROA not after:            Fri 16 Jul 2027 16:52:46 +0000
asID:                     268171
IP address blocks:        2804:5924:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl
                          rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:be:07:00:26:c2:18:b5:14:64:5b:bb:6c:94:ae:46:74:52:e0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
        Validity
            Not Before: Jul 17 16:47:46 2026 GMT
            Not After : Jul 16 16:52:46 2027 GMT
        Subject: CN=3F56906D34689861C09F6B0B432352CCB8BA6193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:6c:28:81:88:91:17:94:f9:13:ba:47:64:
                    31:a9:56:53:02:a9:e2:09:01:0b:21:0e:32:d0:71:
                    bb:c8:30:db:64:fa:53:0a:a1:ce:a0:ce:c7:80:2e:
                    e7:2c:b0:b1:aa:32:4e:ae:3d:6c:d3:2f:fa:b3:24:
                    a8:1d:1e:1e:8a:4a:f4:06:ac:18:02:cd:12:76:00:
                    79:d3:ff:28:4c:f2:4d:db:bc:f0:91:01:83:fd:b8:
                    81:21:d0:e1:81:16:a5:de:24:d8:b7:35:d1:29:b9:
                    cc:ea:42:da:b2:69:93:6c:03:58:a7:5c:02:2b:cd:
                    07:14:dd:77:70:05:53:d7:09:36:1d:05:ac:4a:6f:
                    9b:13:ce:79:9c:d6:3f:c8:e6:86:cc:f6:2c:81:b1:
                    cc:c5:65:65:be:3b:ec:66:a3:f7:8d:61:ed:ed:e9:
                    bc:80:49:e3:84:60:23:00:26:8c:bf:f8:24:29:07:
                    41:bc:07:09:02:b6:71:00:6e:35:74:3f:59:57:f4:
                    24:6e:0b:4e:0f:e3:f8:93:2a:99:9f:36:6f:e6:9a:
                    10:46:4b:b1:d6:85:83:87:5d:95:fc:35:1f:ed:b2:
                    25:1f:9a:94:83:ff:04:36:79:65:ac:b7:ac:2f:90:
                    9b:1c:6a:39:b3:99:fb:10:23:ec:a4:c0:40:e8:a8:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:90:6D:34:68:98:61:C0:9F:6B:0B:43:23:52:CC:B8:BA:61:93
            X509v3 Authority Key Identifier:
                keyid:09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a383030303a3a2f33332d3333203d3e20323638313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5924:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:e8:fe:93:81:be:4e:86:28:27:7c:85:b7:d5:5a:4b:29:
         6d:b0:67:7f:21:c7:44:c1:3b:54:20:0b:b5:8b:0f:17:e7:0b:
         f5:1a:8c:8e:e2:b3:3f:b4:a7:36:1e:74:7b:1c:d9:d0:74:ca:
         6c:09:f3:63:33:d3:36:9a:49:3f:9c:ee:7a:a0:9c:5f:52:46:
         59:7d:ef:45:cb:4b:d5:46:a3:f6:95:cd:fc:a1:b9:89:a1:5a:
         87:29:82:fa:42:9c:0d:68:20:fc:d0:69:93:22:0f:80:dd:65:
         e2:08:bb:68:6e:ae:8f:27:4c:be:9a:6d:27:3c:fb:12:48:07:
         59:2f:b7:06:93:a2:fd:87:a2:68:97:3c:ed:d4:eb:59:de:87:
         f4:00:98:12:63:bc:d6:e7:2f:05:9d:96:e4:c5:61:0b:8a:70:
         ad:92:41:0f:7b:92:3d:a1:ca:e0:33:91:e0:20:df:9e:89:0d:
         6c:7f:87:d6:04:2a:01:85:ec:ab:19:85:10:b4:76:ff:84:54:
         38:73:3c:47:7d:09:aa:f2:07:cf:bf:80:15:fa:c9:36:e7:02:
         91:65:7c:7a:af:45:17:82:46:bb:46:8c:55:e4:eb:09:95:59:
         af:80:24:1a:36:ad:07:71:b1:68:83:73:6a:c7:e0:50:03:18:
         28:98:90:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:10:59 2026 by rpki-client