Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          X7sH8e1EDf0CPOzR5PPq6eeRpgB6wQUabU2hlae/HTM=
Subject key identifier:   6C:83:76:8A:66:99:43:D2:D0:E1:F4:D7:34:C2:79:09:18:FF:CA:8F
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       7D489D293F6F98A5DB453FF10C0E513BBBD7168E
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Sun 03 May 2026 15:36:03 +0000
ROA not before:           Sun 03 May 2026 15:31:03 +0000
ROA not after:            Sun 02 May 2027 15:36:03 +0000
asID:                     262713
IP address blocks:        2804:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:48:9d:29:3f:6f:98:a5:db:45:3f:f1:0c:0e:51:3b:bb:d7:16:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: May  3 15:31:03 2026 GMT
            Not After : May  2 15:36:03 2027 GMT
        Subject: CN=6C83768A669943D2D0E1F4D734C2790918FFCA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:80:45:a4:84:c6:7f:5e:b4:74:fb:f8:a0:
                    4d:6c:96:b2:44:44:5f:aa:0f:f9:37:53:87:0f:4c:
                    14:aa:62:5c:d2:7a:57:87:f1:29:4d:19:68:ea:b7:
                    a7:da:b9:7b:e6:4c:08:4c:ba:1b:ab:6c:e7:08:74:
                    c0:8d:a1:c2:96:b0:51:f1:bb:10:00:5d:6c:1b:16:
                    7f:6d:7c:bc:1c:e1:26:73:f3:b5:d9:28:29:28:af:
                    0b:15:d0:ff:50:da:18:1e:ba:19:0d:b3:77:d6:9c:
                    10:d3:f9:98:25:77:12:16:75:c1:ae:da:4e:0e:e5:
                    c4:91:0f:6e:47:be:ca:e1:6f:6a:21:9f:34:cf:65:
                    da:df:b7:09:22:79:7b:2a:88:98:d6:0a:31:c7:ba:
                    d7:22:3c:50:51:86:1e:54:78:9c:d4:2b:36:8b:ec:
                    16:da:b0:67:57:f8:8a:eb:01:d6:75:d8:9e:ce:41:
                    c4:0f:bc:59:b9:05:70:41:e5:0a:73:4f:7e:f6:66:
                    5f:e0:6f:db:53:0a:b8:03:b0:b7:8d:f3:92:fe:ee:
                    f1:c5:54:02:69:a2:33:85:8e:c3:b4:6d:d0:20:24:
                    4e:04:2c:40:9c:e0:34:8c:d7:77:38:5d:3b:2a:cc:
                    27:cb:9a:79:2c:24:e5:7e:98:62:1e:3c:7d:ed:ed:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:83:76:8A:66:99:43:D2:D0:E1:F4:D7:34:C2:79:09:18:FF:CA:8F
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/323830343a3634303a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:33:01:1c:a0:90:df:33:a3:fe:67:7f:05:ec:d6:60:07:
         ca:86:bd:88:a4:82:05:fb:56:65:f9:f5:c9:8b:f0:46:ef:91:
         fa:e8:c6:41:fe:d1:46:c8:f6:58:36:97:b1:0d:ac:f5:86:0b:
         aa:89:24:97:16:44:06:59:6c:d1:88:60:b8:87:6d:8e:09:b3:
         12:c8:cf:63:e6:87:0b:54:13:38:b6:4f:7c:bf:cb:66:75:9b:
         a5:59:91:1a:c6:11:38:f7:a4:22:33:d1:19:8b:48:a0:69:aa:
         ac:f8:e3:30:e7:ba:5f:1f:a3:76:8b:de:1f:75:d1:ef:d7:c4:
         72:3c:86:8a:02:79:df:85:11:0b:51:71:16:f6:b1:a7:7d:e3:
         35:13:27:e6:8b:d3:21:6c:ca:2d:9d:ab:b1:f3:01:f8:0c:44:
         f7:9f:51:90:4e:59:6c:8f:08:ab:ff:07:da:f9:80:4b:2e:77:
         d3:3c:0c:76:3d:b9:09:58:96:d8:c3:82:0c:f8:d2:65:30:79:
         0c:a5:2e:36:d5:15:09:7d:8f:2a:97:c3:26:7c:5e:7e:71:8d:
         2e:48:61:37:c7:d7:be:3e:24:d5:95:1d:a8:e2:2b:85:81:ff:
         5f:3b:95:cc:47:73:ac:45:d8:fc:cd:eb:55:39:cd:7a:02:53:
         fb:88:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:30:18 2026 by rpki-client