Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34362d3436203d3e20323637323138.roa
File:                     323830343a346131383a616161633a3a2f34362d3436203d3e20323637323138.roa (raw, json)
Hash identifier:          2gE9YvSgzdpIpMQXMZafU3Kb1Nyf8enNAPlVsQWTnBs=
Subject key identifier:   EC:1B:EA:F3:C7:B9:BE:B2:00:CD:A1:0A:0A:70:44:6E:AC:C5:5B:F4
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       0FA785D4C53478FF5E19D8B62916AC453924B5C7
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34362d3436203d3e20323637323138.roa
Signing time:             Thu 02 Jul 2026 12:48:27 +0000
ROA not before:           Thu 02 Jul 2026 12:43:27 +0000
ROA not after:            Thu 01 Jul 2027 12:48:27 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:85:d4:c5:34:78:ff:5e:19:d8:b6:29:16:ac:45:39:24:b5:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Jul  2 12:43:27 2026 GMT
            Not After : Jul  1 12:48:27 2027 GMT
        Subject: CN=EC1BEAF3C7B9BEB200CDA10A0A70446EACC55BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:79:5a:98:5f:c8:cd:94:3b:af:33:1b:8e:
                    af:f1:f1:fa:cf:3d:09:e4:37:cd:e6:62:72:7a:06:
                    6f:51:8a:b5:09:67:26:48:d4:bd:d3:c9:b4:30:e9:
                    6b:4a:cf:0c:7e:84:5e:5f:30:bd:5f:43:8f:ab:e0:
                    5c:a2:1e:a8:0b:6b:32:57:da:3b:14:25:e1:0f:ff:
                    4a:c9:23:7e:67:03:f7:01:11:a8:55:c2:b9:25:53:
                    92:a0:39:50:a2:e1:27:03:d5:e8:2d:6d:82:5e:fd:
                    7e:f6:f1:1a:ed:d2:4b:0c:30:a4:88:45:c6:6b:55:
                    d0:f3:d3:c6:3c:07:e2:74:c9:58:17:39:78:30:5b:
                    aa:98:cd:6f:b0:6d:1f:22:3c:80:a5:08:dc:bd:5a:
                    c9:18:13:6c:dd:fe:d2:5e:50:57:27:e5:21:f8:45:
                    c6:c7:7a:d1:bd:ba:db:7e:c6:8c:6c:dd:ee:47:6e:
                    f1:6c:5e:24:21:60:bd:5b:40:cf:9c:62:b8:b2:a6:
                    2a:4e:91:b8:d0:78:b7:77:7f:9f:84:31:da:59:0d:
                    f4:3e:28:57:b1:9a:68:79:1f:0e:81:84:8e:df:3d:
                    41:59:2d:95:f9:e5:77:34:fb:69:32:da:2a:84:ac:
                    1a:62:b6:80:f3:7d:18:19:78:b3:25:39:a3:56:27:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:EA:F3:C7:B9:BE:B2:00:CD:A1:0A:0A:70:44:6E:AC:C5:5B:F4
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161633a3a2f34362d3436203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaac::/46

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:86:57:00:74:71:3e:3a:41:d3:2b:54:51:da:d5:d6:e8:
         8b:d3:a3:4a:c7:cf:57:1a:f2:33:90:29:9b:99:47:cf:73:47:
         18:ac:37:24:c0:8e:fd:4a:5b:f7:64:cd:f3:16:5f:f9:52:d6:
         6e:01:dc:71:6f:9a:e9:81:3b:73:fa:a6:1c:32:29:75:c8:d8:
         fc:3e:b6:44:f2:5b:41:7e:77:2b:d3:68:69:e4:dd:2d:f5:ab:
         4f:91:df:6d:48:da:03:58:2a:f6:70:cc:a9:e6:78:eb:18:10:
         3c:07:55:20:c0:7e:07:3d:c3:0e:b1:f4:b1:25:cf:0d:99:c9:
         26:b1:1d:20:70:2c:b9:af:54:2f:45:9f:b1:07:5d:2a:f4:af:
         64:4c:a5:c6:8a:85:a5:c9:cf:97:d8:aa:b4:79:99:c1:65:39:
         f2:24:9e:af:26:84:02:4a:2a:da:24:25:0b:6c:e7:aa:c0:60:
         a6:05:18:6e:e0:54:2e:bc:b1:73:af:4e:40:ef:86:35:8d:21:
         75:d3:f9:d3:1a:4e:3d:20:9f:74:1b:1a:80:bc:9a:ab:c2:79:
         a8:e9:bf:85:32:f1:12:e9:78:1e:f5:26:7f:1d:31:06:e2:fa:
         ac:87:b5:ad:86:9a:21:fc:97:8a:aa:6c:c1:a5:8f:dc:1e:70:
         41:e0:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:30:35 2026 by rpki-client