Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a633030303a3a2f33342d3334203d3e20323638313731.roa
File:                     323830343a353932343a633030303a3a2f33342d3334203d3e20323638313731.roa (raw, json)
Hash identifier:          X8w3yZq3gA4QH8KYLyjTeQ83MezWX8vc0Y6Aw9BFWQ4=
Subject key identifier:   86:73:7B:91:E4:92:99:3E:0C:10:D2:85:C3:78:C3:38:9A:54:D1:AF
Certificate issuer:       /CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
Certificate serial:       22062CC8250C4B3E61DC8FAF8FDB1909F799F111
Authority key identifier: 09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a633030303a3a2f33342d3334203d3e20323638313731.roa
Signing time:             Fri 17 Jul 2026 16:53:23 +0000
ROA not before:           Fri 17 Jul 2026 16:48:23 +0000
ROA not after:            Fri 16 Jul 2027 16:53:23 +0000
asID:                     268171
IP address blocks:        2804:5924:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl
                          rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:06:2c:c8:25:0c:4b:3e:61:dc:8f:af:8f:db:19:09:f7:99:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094453EB55B24D99D96954DEF7C05CFA205A0B25
        Validity
            Not Before: Jul 17 16:48:23 2026 GMT
            Not After : Jul 16 16:53:23 2027 GMT
        Subject: CN=86737B91E492993E0C10D285C378C3389A54D1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:1a:61:5a:a2:86:f2:40:ff:a0:b2:19:16:
                    85:1c:61:5b:9d:43:c4:3b:4d:34:38:3b:0a:8b:bb:
                    cc:65:3d:f3:ba:13:52:5b:4e:be:2d:1a:5b:ec:a0:
                    ec:55:92:06:ab:43:12:a3:59:d4:ef:7e:d5:5c:ad:
                    ce:9a:b1:0d:47:45:68:fb:52:1b:50:c5:b4:2b:b4:
                    c5:4a:91:03:b4:13:6a:3e:c4:54:8c:d0:79:d7:8b:
                    5c:b8:bf:46:e4:c6:47:a8:1b:f7:e0:f7:f8:11:a5:
                    d0:4a:08:23:1e:ed:06:e7:b1:10:e2:15:83:f2:c5:
                    c9:17:5b:14:da:d3:e5:c2:7e:4f:34:96:f9:d4:03:
                    b3:c7:e6:db:59:bb:dd:40:d8:ec:48:62:6b:01:6f:
                    f2:6a:8a:b2:16:0f:09:f5:3a:a3:fd:12:dd:36:64:
                    9a:18:66:1f:73:4d:28:2f:01:8f:fc:11:85:8d:5b:
                    7b:ec:6d:1f:99:2e:e5:7c:3e:d8:bd:71:dc:ce:9a:
                    29:fa:36:18:f5:51:e9:c6:a8:93:51:df:86:9e:5e:
                    c2:4b:c4:79:76:65:9d:67:66:85:18:75:ac:91:c5:
                    9b:37:41:f6:12:40:4b:4c:7d:ff:13:a3:17:8f:0e:
                    d6:fd:e3:e6:c2:28:2f:77:98:2d:2b:19:cd:24:9d:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:73:7B:91:E4:92:99:3E:0C:10:D2:85:C3:78:C3:38:9A:54:D1:AF
            X509v3 Authority Key Identifier:
                keyid:09:44:53:EB:55:B2:4D:99:D9:69:54:DE:F7:C0:5C:FA:20:5A:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/094453EB55B24D99D96954DEF7C05CFA205A0B25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/094453EB55B24D99D96954DEF7C05CFA205A0B25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rZL63yywkDk5FQehyHRXNDtNha5pscTa9w4co4j1pU2/0/323830343a353932343a633030303a3a2f33342d3334203d3e20323638313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5924:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:38:3e:b8:5f:77:40:20:93:ef:d8:36:af:ba:0f:7b:81:c1:
         f1:0a:48:a8:e8:26:95:e9:b6:62:27:a0:4f:39:3d:1b:cd:f0:
         3e:c7:91:06:6e:6c:bd:33:b5:fe:77:12:13:b8:1c:73:82:41:
         55:3f:40:2a:f0:b8:64:be:16:24:1c:64:4b:34:f2:92:3b:52:
         9a:71:d2:c0:92:57:36:45:91:7b:29:08:20:ce:09:96:52:db:
         25:3c:77:81:eb:3b:14:1b:46:16:05:64:a6:75:e1:66:5a:70:
         35:bc:60:4d:ad:07:d0:b8:d3:0d:dd:2d:3a:7a:8c:67:c4:03:
         d1:89:56:60:bc:48:b9:7e:0c:25:5b:98:fa:28:45:93:95:fc:
         5b:e8:32:b5:0d:55:ce:12:b4:db:ee:f4:d9:9c:07:e3:1d:d6:
         64:64:59:6e:3c:92:a3:3c:75:3b:dc:3b:26:78:ef:d6:ec:a9:
         ce:32:63:16:0a:7b:80:f0:32:66:25:4a:3b:5d:32:fa:f8:bd:
         19:11:9b:7f:54:f1:af:a3:66:e6:d1:42:86:c2:8f:79:b4:52:
         ae:11:b0:96:24:6a:6d:8b:1e:71:cf:b5:0e:52:57:f0:7f:fa:
         21:94:b4:1e:38:e1:86:0f:68:99:6d:50:7e:35:9f:83:fe:70:
         0e:3e:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:01:13 2026 by rpki-client