Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a666666663a3a2f34382d3438203d3e20323639303338.roa
File:                     323830343a356538343a666666663a3a2f34382d3438203d3e20323639303338.roa (raw, json)
Hash identifier:          8aaIdjYMJHvBLsRG0slRnjA+ocovqnLyukYQ9r3VLk4=
Subject key identifier:   D0:5D:5D:3A:F8:26:EE:9C:C3:59:EA:27:AA:70:D4:C5:9E:86:FA:E3
Certificate issuer:       /CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
Certificate serial:       31AAF3FEB6F6CD103E1822F1B1F94064B8DADECF
Authority key identifier: 7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a666666663a3a2f34382d3438203d3e20323639303338.roa
Signing time:             Wed 01 Jul 2026 16:53:54 +0000
ROA not before:           Wed 01 Jul 2026 16:48:54 +0000
ROA not after:            Wed 30 Jun 2027 16:53:54 +0000
asID:                     269038
IP address blocks:        2804:5e84:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl
                          rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:aa:f3:fe:b6:f6:cd:10:3e:18:22:f1:b1:f9:40:64:b8:da:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CF640D40A98BEDEB3FAC955113876C0B04FEE62
        Validity
            Not Before: Jul  1 16:48:54 2026 GMT
            Not After : Jun 30 16:53:54 2027 GMT
        Subject: CN=D05D5D3AF826EE9CC359EA27AA70D4C59E86FAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:19:21:37:48:df:f4:78:0e:81:9d:11:f3:
                    02:50:10:f0:d0:4c:fb:f4:e6:48:74:89:99:eb:79:
                    d6:cd:67:60:72:b0:07:12:aa:be:60:67:c6:34:3a:
                    02:a4:c1:ce:f3:f8:08:30:7b:52:69:94:09:e2:af:
                    9f:45:88:f2:5c:67:b8:01:17:52:7a:d8:42:c1:a8:
                    fa:b6:ae:98:a0:24:da:26:f0:27:45:f5:02:d4:bb:
                    5e:1d:d9:fb:1f:5e:0e:35:81:1e:e3:da:8a:17:45:
                    8f:98:a2:aa:93:8d:97:a6:c4:dd:7a:34:e6:88:a0:
                    46:12:8f:c0:fc:67:40:f0:de:60:97:6d:76:53:9a:
                    85:9d:f6:73:74:16:20:8e:03:95:3b:26:8f:64:dc:
                    67:41:24:8d:ee:bc:b7:99:e2:d9:89:bd:7c:28:c1:
                    ed:52:35:af:de:4d:1c:57:03:7f:54:7c:90:87:fe:
                    98:77:d9:32:09:c8:fe:b0:f3:9b:ab:8e:c0:b6:7c:
                    24:25:df:40:65:ae:a9:a1:b9:0a:01:80:97:d5:fe:
                    5d:57:05:ac:64:79:44:6b:bf:b4:47:50:d3:25:0d:
                    3f:c7:29:de:f4:29:06:09:ba:90:89:98:9f:03:04:
                    35:7f:8a:16:60:c6:1d:f0:91:9f:aa:19:e7:be:92:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:5D:3A:F8:26:EE:9C:C3:59:EA:27:AA:70:D4:C5:9E:86:FA:E3
            X509v3 Authority Key Identifier:
                keyid:7C:F6:40:D4:0A:98:BE:DE:B3:FA:C9:55:11:38:76:C0:B0:4F:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF640D40A98BEDEB3FAC955113876C0B04FEE62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UJT7juoU6WF7k5MopLaj6G3LvRyCVd9FCtxFA4LaeCV/0/323830343a356538343a666666663a3a2f34382d3438203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e84:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:94:32:4a:c0:e0:46:7a:f0:f2:8e:50:40:6f:a0:3b:26:a9:
         22:00:56:95:75:12:34:1c:f0:0c:b3:a0:08:9c:2d:72:42:e4:
         c4:93:8c:0a:8c:5e:37:f5:fd:fe:98:78:33:16:90:dd:c3:1d:
         a5:8e:72:71:b2:de:e5:55:ad:05:d3:58:70:de:e3:68:f3:52:
         af:69:76:83:98:69:fd:25:ec:52:4c:6f:d1:71:15:a8:9b:d2:
         25:43:1b:d5:26:3c:3e:f2:ca:53:77:e9:44:e6:3d:6c:93:62:
         30:aa:7e:42:c8:49:2f:69:81:d9:a8:15:2f:21:cc:c0:26:50:
         82:eb:3e:89:c6:85:37:39:28:0f:b7:e7:74:78:fa:49:d7:d7:
         41:c6:08:23:fe:b6:30:db:bd:56:4f:11:50:de:e7:f9:60:70:
         7b:6f:e0:17:ff:45:d9:4c:29:35:3a:ae:da:55:14:05:dd:3b:
         fa:c5:e5:2b:e8:bf:6d:4f:2a:f5:55:68:d3:9a:70:90:f8:47:
         ea:28:90:e6:5c:c3:4c:ba:53:7c:84:c8:f4:ea:3c:60:e2:de:
         0b:f8:55:75:7d:51:be:9a:3d:df:82:94:db:f8:6c:27:01:a0:
         13:af:04:b7:24:c4:3e:60:74:63:c3:ae:20:47:e1:25:f2:e5:
         de:eb:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:31:18 2026 by rpki-client