Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa
File:                     323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa (raw, json)
Hash identifier:          mLlUqOe/Ej28bewJydtNCcFzGJzQy8hmbvP9WPIgcj0=
Subject key identifier:   BB:D5:A3:A3:53:91:BC:71:48:D6:EA:C6:B8:40:F2:D4:EC:42:5B:DA
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       65938BD0D5158C876008A358733DFA99E17C086C
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa
Signing time:             Wed 01 Jul 2026 18:53:06 +0000
ROA not before:           Wed 01 Jul 2026 18:48:06 +0000
ROA not after:            Wed 30 Jun 2027 18:53:06 +0000
asID:                     262784
IP address blocks:        2804:1e0:7e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:93:8b:d0:d5:15:8c:87:60:08:a3:58:73:3d:fa:99:e1:7c:08:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jul  1 18:48:06 2026 GMT
            Not After : Jun 30 18:53:06 2027 GMT
        Subject: CN=BBD5A3A35391BC7148D6EAC6B840F2D4EC425BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:cd:c3:00:4f:54:5f:32:6b:43:9f:76:34:
                    b2:a7:d2:cd:20:9c:e9:94:de:88:0f:e2:f7:cb:a9:
                    c9:60:d5:c7:a4:c0:b1:c0:f0:23:4f:a9:84:73:c6:
                    1e:b3:07:dd:93:88:1e:d2:cd:81:b7:99:38:11:cd:
                    3c:92:b1:55:46:6d:d2:99:fb:28:58:06:53:fb:17:
                    8e:f3:70:fc:ca:d1:ee:8d:a7:c0:fb:0e:57:e1:3a:
                    15:84:e2:86:fa:e9:3e:7b:58:bc:fb:55:fd:88:ae:
                    63:7d:a8:41:66:59:e7:ed:e0:a7:e3:f5:a8:f5:b1:
                    38:22:12:5e:e6:cc:b7:90:79:55:dd:60:24:31:f9:
                    36:b9:a3:ad:93:26:c9:ab:1c:45:d1:28:af:9d:db:
                    9e:f3:ca:d2:f8:c8:bd:d3:10:08:3e:18:f3:60:9d:
                    f4:70:74:e4:29:e9:93:fb:3b:71:b0:69:78:74:cf:
                    a0:f7:68:68:85:0a:53:e5:f2:58:78:26:20:8d:d1:
                    02:3a:41:8f:0c:f0:91:1a:d1:b1:0b:b4:70:8c:26:
                    4f:6b:8c:22:43:89:73:e8:8b:5a:ad:eb:c6:b9:fc:
                    8e:74:44:5d:c9:49:59:8b:08:2c:d4:bf:eb:c2:b9:
                    73:45:ee:bc:f8:04:77:2f:e8:21:0d:ab:62:98:01:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D5:A3:A3:53:91:BC:71:48:D6:EA:C6:B8:40:F2:D4:EC:42:5B:DA
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/323830343a3165303a376530303a3a2f34302d3430203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e0:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         d7:71:3b:9f:b8:97:96:76:84:09:d3:97:cc:f6:ab:17:ab:3b:
         de:bc:15:d6:d5:27:28:c4:52:bf:4a:a9:ec:8c:55:24:f7:85:
         5e:7b:59:a8:e9:f4:fc:37:6e:7a:76:4c:2d:f2:8c:fb:fd:f4:
         ee:c7:33:c4:ec:d1:70:cf:24:81:12:02:b0:ff:db:78:62:f6:
         29:98:28:d8:df:23:a5:da:64:f8:45:58:8e:4b:09:e3:2b:d9:
         17:3c:6b:51:59:7b:05:62:30:49:4f:d8:c5:16:07:8d:57:01:
         14:b1:be:60:9d:e0:19:e0:51:64:86:83:75:4e:8d:85:7f:bb:
         43:df:4b:c3:bf:2c:d9:04:5a:e0:b2:6e:82:09:f8:d2:89:3d:
         07:a5:74:28:ca:66:46:95:bc:f0:fc:a8:77:2a:ec:75:ca:db:
         3d:6d:5d:dc:65:4c:57:3a:6c:d4:12:9d:a3:48:de:61:78:6c:
         d7:27:fe:01:73:37:52:ef:b0:76:67:38:53:e6:a8:81:6a:44:
         9e:29:5d:e0:a8:ac:da:8e:8f:ec:6e:7b:97:af:99:f0:ff:20:
         06:0c:b0:0d:09:07:83:a7:c4:75:58:59:83:01:bb:e3:49:9c:
         1d:f1:07:94:78:5a:12:fe:29:d4:fa:0d:d1:99:10:e5:11:e0:
         e0:06:cd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:15 2026 by rpki-client