Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33342d3334203d3e20323638313731.roa
File:                     323830343a353932343a3a2f33342d3334203d3e20323638313731.roa (raw, json)
Hash identifier:          10vV41lmL92HVZfh93PWTPA5lPxTlRxyJElsod/o4P4=
Subject key identifier:   A0:D3:21:7A:1E:09:5B:4A:A0:24:5C:AE:C2:74:C8:4E:B3:1A:7F:9E
Certificate issuer:       /CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
Certificate serial:       43A0E82C75218D37497CF3DF46953CFC86BEF100
Authority key identifier: 09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33342d3334203d3e20323638313731.roa
Signing time:             Fri 17 Jul 2026 16:53:14 +0000
ROA not before:           Fri 17 Jul 2026 16:48:14 +0000
ROA not after:            Fri 16 Jul 2027 16:53:14 +0000
asID:                     268171
IP address blocks:        2804:5924::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl
                          rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:e8:2c:75:21:8d:37:49:7c:f3:df:46:95:3c:fc:86:be:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
        Validity
            Not Before: Jul 17 16:48:14 2026 GMT
            Not After : Jul 16 16:53:14 2027 GMT
        Subject: CN=A0D3217A1E095B4AA0245CAEC274C84EB31A7F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:10:27:60:85:17:f4:f8:81:be:e6:45:6e:
                    59:07:31:18:de:1d:89:d1:3c:a7:f5:f8:0f:58:db:
                    41:6e:bf:75:19:dc:cf:be:c3:01:f3:5e:a1:70:82:
                    70:d6:74:79:b2:a4:69:e3:95:62:75:9b:b6:a8:b7:
                    36:a3:95:cc:5a:25:c8:cd:e3:a1:32:ba:be:99:1b:
                    47:1d:28:02:89:37:6e:70:28:6c:6a:01:0c:ea:1d:
                    b2:fb:ea:da:f1:3a:78:ff:f9:c3:e2:86:bc:83:89:
                    c4:a0:80:4c:7f:ed:c0:06:dd:a1:dc:ea:7c:8f:f9:
                    d4:c9:2d:3a:c6:f9:38:f3:4d:b9:67:38:3e:26:23:
                    6d:a4:81:14:c3:fc:c7:52:08:7d:56:ed:da:43:31:
                    a7:9c:0e:05:fe:ce:43:a5:f9:73:51:be:c4:cb:87:
                    6e:78:e6:a9:9e:96:45:f5:81:b9:c3:79:94:a3:da:
                    6c:fc:a3:93:c3:24:3d:e1:cb:b1:e0:4f:82:47:21:
                    62:e4:8f:d3:df:2d:16:8c:94:25:97:78:db:24:4d:
                    bb:56:71:ed:0f:61:4b:2e:17:2f:38:7a:5a:a8:51:
                    01:66:87:f3:c3:ea:e9:a4:f7:43:fb:f2:cf:c0:5a:
                    00:88:c8:ea:b2:77:45:d7:44:70:8d:20:1e:7c:6e:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:21:7A:1E:09:5B:4A:A0:24:5C:AE:C2:74:C8:4E:B3:1A:7F:9E
            X509v3 Authority Key Identifier:
                keyid:09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a3a2f33342d3334203d3e20323638313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5924::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:3e:2c:58:eb:c3:b5:9f:e6:ce:de:e9:18:aa:22:e5:80:6a:
         8b:e8:81:89:26:35:5a:aa:9c:36:c7:57:76:16:d4:3a:cc:f2:
         44:46:cd:bf:59:41:a9:dc:7d:5a:ab:9d:db:68:4a:37:60:b4:
         b6:43:8f:09:15:fc:a9:0c:e8:c3:2a:da:2b:81:ea:34:94:92:
         0f:48:66:dd:2f:fa:d5:94:95:53:47:11:31:a4:3b:db:98:c8:
         9d:fe:24:c8:fa:c6:ee:6a:ea:3c:8b:66:65:c6:b4:94:44:29:
         f5:de:f1:18:8f:28:86:19:9d:45:cd:9b:5d:2a:e9:19:16:76:
         cc:93:26:e2:50:7c:c4:90:1b:1f:0a:e0:5d:09:b0:2b:64:5f:
         28:4a:ac:e8:a2:81:e2:55:5f:af:99:65:49:ed:e4:01:86:85:
         8c:28:ed:13:a2:5d:b3:55:c2:dc:04:62:e7:53:b9:4b:84:32:
         14:1a:1e:47:0b:bf:6e:60:af:6a:45:ce:76:06:69:e2:fb:0b:
         ee:37:15:bd:14:7e:f8:08:12:d1:f8:ad:23:70:0d:8f:5e:57:
         9e:8d:c8:31:12:79:e0:c1:84:0b:99:90:0b:e6:ed:96:9e:64:
         ce:8e:37:a8:f2:5e:8a:c1:e4:be:12:b8:4e:b8:e6:c6:04:b7:
         bb:ff:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:44 2026 by rpki-client