Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a383030303a3a2f33332d3333203d3e20323731363039.roa
File:                     323830343a376533343a383030303a3a2f33332d3333203d3e20323731363039.roa (raw, json)
Hash identifier:          wdgMrnGkSV5HhYwxd7RI9Q+/vJLgOK+tI98i/DMwFQw=
Subject key identifier:   CB:B2:13:51:D1:39:F9:F8:12:0E:03:A1:67:E3:03:7D:C6:31:9B:E8
Certificate issuer:       /CN=2E56A03774091A591386D596B225DD96F3C3B92C
Certificate serial:       0AD5EC44876262861E8F9BC45D1447E5F0F668F3
Authority key identifier: 2E:56:A0:37:74:09:1A:59:13:86:D5:96:B2:25:DD:96:F3:C3:B9:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a383030303a3a2f33332d3333203d3e20323731363039.roa
Signing time:             Thu 18 Jun 2026 23:34:04 +0000
ROA not before:           Thu 18 Jun 2026 23:29:04 +0000
ROA not after:            Thu 17 Jun 2027 23:34:04 +0000
asID:                     271609
IP address blocks:        2804:7e34:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.crl
                          rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d5:ec:44:87:62:62:86:1e:8f:9b:c4:5d:14:47:e5:f0:f6:68:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E56A03774091A591386D596B225DD96F3C3B92C
        Validity
            Not Before: Jun 18 23:29:04 2026 GMT
            Not After : Jun 17 23:34:04 2027 GMT
        Subject: CN=CBB21351D139F9F8120E03A167E3037DC6319BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:2d:f8:05:9d:1e:46:06:9b:82:75:04:9d:
                    5f:22:b6:bf:30:ae:9d:52:1e:ea:a9:66:16:3e:af:
                    62:eb:0f:69:b8:3c:2a:ca:bb:3c:e5:66:75:42:7a:
                    98:45:8f:c9:21:ac:43:47:92:ac:a6:16:75:b2:f2:
                    19:52:e2:9c:79:35:49:a4:1b:10:d6:71:32:3c:68:
                    e0:00:64:3a:12:da:08:0e:83:1a:d9:47:20:5d:7a:
                    de:5c:fa:81:35:86:9d:5a:fa:08:dd:76:7b:ac:f4:
                    0d:1a:1a:1a:de:d7:99:63:93:b0:ed:af:c9:af:4a:
                    62:3e:48:87:c8:40:16:dc:b5:61:21:8c:a7:0c:ee:
                    c6:c6:1e:c0:c3:e6:1e:b7:21:3c:09:6b:1e:27:31:
                    d6:2f:c3:d9:6b:f6:3c:e9:d2:21:f3:41:bd:83:f2:
                    56:83:3d:e2:09:c1:85:3f:96:ac:93:71:a6:77:bb:
                    2e:65:e7:ea:95:65:81:e0:fa:28:3a:f1:e8:0e:da:
                    9c:bf:c6:6a:71:d9:14:49:7f:09:b1:b7:1d:7c:2d:
                    a4:e9:9e:ff:d3:fb:10:d6:11:b2:bb:b6:a0:41:61:
                    66:9c:08:3d:cb:12:27:7c:fd:02:f3:6f:51:74:95:
                    50:8a:fa:19:c4:33:46:78:f6:3b:77:2e:dd:8e:c7:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:13:51:D1:39:F9:F8:12:0E:03:A1:67:E3:03:7D:C6:31:9B:E8
            X509v3 Authority Key Identifier:
                keyid:2E:56:A0:37:74:09:1A:59:13:86:D5:96:B2:25:DD:96:F3:C3:B9:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/2E56A03774091A591386D596B225DD96F3C3B92C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E56A03774091A591386D596B225DD96F3C3B92C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/323830343a376533343a383030303a3a2f33332d3333203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:e8:cb:60:01:ed:73:c4:9b:9e:52:2a:31:cd:ae:d7:70:
         2b:d9:81:42:a8:a6:3f:71:6c:2a:e6:05:8b:19:a8:30:c3:9e:
         8a:5d:b8:b0:69:52:ea:20:6f:2e:1f:cd:49:67:6a:e1:16:a6:
         57:17:cc:a7:b4:94:d1:46:e6:5c:51:c9:f1:4d:25:de:ab:7a:
         16:0f:a7:6f:43:38:4d:9d:a4:2e:c1:eb:73:2c:6c:bc:b8:20:
         8c:2f:f7:6b:bf:2f:f4:4a:14:9f:23:76:69:ee:15:34:8b:30:
         7e:ec:ba:e0:c1:e3:3a:67:c0:b4:0b:5c:ca:ad:2b:10:0a:41:
         b3:72:01:7b:7b:b2:44:a0:ea:eb:8e:87:d0:96:1d:7b:91:4a:
         db:53:ac:ab:c5:3f:9b:5f:d9:2d:0e:87:4c:76:ca:24:d8:a3:
         b2:3f:ab:37:16:46:14:a2:a8:86:df:f4:19:f7:13:a1:aa:3a:
         89:4d:2d:c1:ff:7c:60:b0:fe:3e:d6:fe:44:7e:5c:48:e2:24:
         e2:e1:5b:df:67:a1:d1:6d:68:ea:bc:6c:4d:58:fc:1a:b6:6f:
         b9:ec:21:f7:94:81:19:6d:56:e3:8d:ad:ac:42:ca:61:de:81:
         d2:f6:02:bd:e6:22:2e:ae:f2:24:b6:cf:dc:db:07:50:93:62:
         9a:0d:cd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:45:18 2026 by rpki-client