Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          vmn1E26YPuSE3acMDsEfeiOsb/sgY25sCpK0AjnuNT4=
Subject key identifier:   F6:A6:49:DE:A0:9C:BA:90:C8:EB:7A:ED:D4:32:DC:02:E1:7C:C1:55
Certificate issuer:       /CN=AE2DEC3D52404723589988E57C6E36A30F63278B
Certificate serial:       01899401D2ADD93E49CE06873F3AB557E04686BD
Authority key identifier: AE:2D:EC:3D:52:40:47:23:58:99:88:E5:7C:6E:36:A3:0F:63:27:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Fri 26 Jun 2026 17:37:37 +0000
ROA not before:           Fri 26 Jun 2026 17:32:37 +0000
ROA not after:            Fri 25 Jun 2027 17:37:37 +0000
asID:                     265393
IP address blocks:        2804:3364:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:94:01:d2:ad:d9:3e:49:ce:06:87:3f:3a:b5:57:e0:46:86:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2DEC3D52404723589988E57C6E36A30F63278B
        Validity
            Not Before: Jun 26 17:32:37 2026 GMT
            Not After : Jun 25 17:37:37 2027 GMT
        Subject: CN=F6A649DEA09CBA90C8EB7AEDD432DC02E17CC155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ff:17:2d:9c:a8:61:9c:2b:92:9a:90:74:51:
                    20:a0:d8:26:a5:b2:1e:f0:15:16:90:97:4d:31:c7:
                    48:7c:79:23:e9:9e:8c:66:f2:ac:af:99:a1:8a:81:
                    ad:94:df:4d:12:e2:c1:93:4f:0d:89:38:5d:e8:40:
                    05:a4:d1:c6:86:ce:4f:27:5b:b4:3c:f3:48:c8:5b:
                    cb:ae:5f:fd:45:7f:6e:62:24:e2:9c:d8:2c:ce:e5:
                    5e:92:d7:5e:4f:09:ea:df:f7:f7:03:ba:cc:22:ab:
                    8e:46:be:07:c8:7e:e9:a0:b7:fc:30:cd:8b:0d:22:
                    b2:05:d8:81:a1:de:0d:ee:8a:6f:80:d2:17:9c:61:
                    38:bd:01:ea:f6:59:f5:c1:32:10:2c:f2:f1:d7:d2:
                    0b:39:9e:0b:13:fe:69:1b:e8:db:bf:53:9f:89:92:
                    10:d1:83:15:3f:1f:fa:fc:f9:41:3f:09:68:7c:17:
                    97:14:8e:c5:fb:a2:31:8b:ef:e8:54:62:1a:6e:2f:
                    50:d9:3c:6e:07:5d:a4:8e:9e:06:6c:90:f7:d1:d6:
                    8e:25:a7:18:6e:0e:2a:63:d5:b9:d1:be:bc:bc:bc:
                    d1:65:2f:4e:ae:b8:f0:12:22:5a:e9:87:d5:53:aa:
                    ac:30:f8:3b:e3:dc:b6:59:a3:90:05:cc:a1:67:f9:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:49:DE:A0:9C:BA:90:C8:EB:7A:ED:D4:32:DC:02:E1:7C:C1:55
            X509v3 Authority Key Identifier:
                keyid:AE:2D:EC:3D:52:40:47:23:58:99:88:E5:7C:6E:36:A3:0F:63:27:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/AE2DEC3D52404723589988E57C6E36A30F63278B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE2DEC3D52404723589988E57C6E36A30F63278B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383030303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:ef:2f:b1:10:b5:eb:79:d9:bd:14:5e:c8:51:81:a6:06:
         8e:76:a9:82:8e:cf:a1:1d:42:e0:86:37:16:8f:4d:43:f5:90:
         90:69:bb:43:0e:eb:49:5f:78:e5:d8:63:c5:c7:e4:63:a3:8b:
         07:f7:b7:3f:12:a0:8a:bf:4f:83:75:6a:0e:98:f9:97:27:24:
         5c:1f:62:05:c8:a5:9a:e1:74:07:e0:88:63:dc:71:66:df:65:
         3c:fd:dc:c8:13:00:ef:4a:51:ea:9f:1b:7a:22:23:41:41:bd:
         bb:9d:7d:e7:69:5b:fb:d6:56:6e:9a:e3:e1:bd:de:a7:29:c5:
         7f:59:3c:0b:5f:98:5b:bd:f0:e3:a5:58:1d:93:c6:34:64:1a:
         8e:35:38:fc:1d:87:2e:32:09:6a:93:63:8c:0d:55:fb:08:d9:
         2b:89:fc:9b:de:40:80:b2:1f:b5:dc:90:99:f1:c8:61:18:81:
         5d:45:ef:44:1e:4f:53:42:2d:aa:65:00:84:55:29:59:68:1d:
         cd:04:a0:11:29:3b:67:05:22:38:df:85:82:37:82:b2:11:35:
         f8:86:42:4f:59:6a:0d:c7:0c:47:c1:94:cc:ad:bd:88:d6:26:
         a7:03:46:f9:a0:df:ac:cc:72:ff:2c:28:a7:8a:f3:89:00:13:
         fa:71:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:48 2026 by rpki-client