Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33322d3332203d3e20323638313731.roa
File:                     323830343a353932343a3a2f33322d3332203d3e20323638313731.roa (raw, json)
Hash identifier:          zKQUXKiOvwJXycbWEjN1NZVgVe/i/qkSmeKxr7w2LeA=
Subject key identifier:   D8:65:CD:FE:6B:48:13:3B:34:1E:5B:99:BF:97:A5:F4:A1:CA:4A:EF
Certificate issuer:       /CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
Certificate serial:       3E84D2649C72BCAE275749850D978874072B6E5F
Authority key identifier: 09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33322d3332203d3e20323638313731.roa
Signing time:             Fri 17 Jul 2026 16:52:00 +0000
ROA not before:           Fri 17 Jul 2026 16:47:00 +0000
ROA not after:            Fri 16 Jul 2027 16:52:00 +0000
asID:                     268171
IP address blocks:        2804:5924::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl
                          rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:84:d2:64:9c:72:bc:ae:27:57:49:85:0d:97:88:74:07:2b:6e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
        Validity
            Not Before: Jul 17 16:47:00 2026 GMT
            Not After : Jul 16 16:52:00 2027 GMT
        Subject: CN=D865CDFE6B48133B341E5B99BF97A5F4A1CA4AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:6d:62:1b:ac:61:f2:3c:29:dd:a6:38:ab:
                    c3:c4:90:c9:ca:c0:2c:49:f1:40:e8:e2:59:0d:9d:
                    9e:2a:37:da:cd:de:ab:4a:d9:0b:d5:25:f2:4c:b0:
                    8f:cf:b7:d6:03:18:2d:14:8d:8e:71:ca:c2:f7:94:
                    6c:1d:6e:ed:f9:50:84:5b:18:bd:5b:7e:34:45:77:
                    82:7f:bb:82:17:aa:e5:4c:ec:4d:62:72:a0:1d:d1:
                    0c:5d:95:b6:ce:1c:cf:8b:65:b3:8c:28:11:c1:13:
                    51:e7:80:da:7c:42:64:08:24:1f:53:63:f7:a0:21:
                    53:86:dd:ee:e2:67:a9:fb:5f:98:57:9a:1d:e7:5c:
                    ee:26:4f:35:db:55:d3:4e:10:c5:7b:fa:5e:7a:fa:
                    bb:c4:c9:6f:da:17:d5:0c:c6:9e:bb:71:1d:13:68:
                    25:83:a9:2f:b4:b7:9f:ed:d0:e8:69:08:ff:8a:82:
                    5b:14:12:ac:ed:c0:3d:81:16:e2:b7:79:32:8e:3e:
                    0b:10:b1:b8:d2:f6:42:d1:02:01:e0:1d:5a:d9:ba:
                    6c:9d:40:52:60:e9:33:eb:cb:c4:31:e6:dc:63:3a:
                    4d:fe:3c:ae:39:87:95:0e:16:be:bc:60:fe:68:d5:
                    ae:64:9e:7e:1f:4b:c2:f5:4c:c3:f2:ce:5c:9c:fb:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:65:CD:FE:6B:48:13:3B:34:1E:5B:99:BF:97:A5:F4:A1:CA:4A:EF
            X509v3 Authority Key Identifier:
                keyid:09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33322d3332203d3e20323638313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5924::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:cb:7e:d6:ff:fa:81:6f:23:0f:ba:ef:fd:d6:f8:4b:49:
         5d:14:09:69:59:cc:ff:df:13:9b:23:78:20:4d:86:11:ff:9e:
         f7:fa:3f:39:c1:f2:a4:8c:29:c2:1c:26:59:3f:ab:22:17:c2:
         a0:a8:8b:69:01:37:35:63:da:0e:a5:cc:88:0d:74:b7:84:aa:
         97:e8:d6:88:f1:88:1e:e1:61:be:77:3d:b1:36:14:59:7a:dc:
         5b:5b:8b:1a:cb:d2:fc:1f:41:0f:8e:3e:b8:9b:b2:fe:ee:a6:
         6a:0e:b0:0d:53:3a:aa:bd:cd:14:2a:ec:cb:a4:e1:3c:bc:67:
         35:13:00:e4:db:99:b8:38:59:a7:a7:a4:13:64:ec:bc:75:7f:
         49:ab:03:a1:1b:44:9e:de:f3:23:eb:12:16:d6:fe:14:94:a4:
         a9:4a:82:46:b3:01:00:1b:73:64:d7:72:7d:05:78:e5:27:b5:
         72:6a:29:5d:45:b3:52:5c:11:6d:b7:9f:3c:76:ac:11:22:2d:
         f5:7c:80:f4:5a:3a:04:9d:f9:82:f5:94:95:71:dc:3a:b2:a9:
         6f:97:50:35:1e:72:66:a2:88:8a:c8:72:65:33:96:cb:b9:7c:
         c1:d5:a0:22:86:50:e4:63:b0:8c:6a:3c:73:91:89:ee:ce:19:
         82:fe:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:06 2026 by rpki-client