Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33332d3333203d3e20323635343535.roa
File:                     323830343a333436383a3a2f33332d3333203d3e20323635343535.roa (raw, json)
Hash identifier:          MKfeDWwdZyDlg4js9p6A8876LwIdKI92iXYZY+atLQ0=
Subject key identifier:   5D:0A:BB:06:C3:59:FC:A1:B7:14:56:A0:D4:02:4A:C8:10:5F:B9:B0
Certificate issuer:       /CN=02DC74163A88F81D8B63F23F57A7016D972478F4
Certificate serial:       2447561D2E70903E723FB8AD6C780119982925C8
Authority key identifier: 02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33332d3333203d3e20323635343535.roa
Signing time:             Tue 30 Jun 2026 19:02:27 +0000
ROA not before:           Tue 30 Jun 2026 18:57:27 +0000
ROA not after:            Tue 29 Jun 2027 19:02:27 +0000
asID:                     265455
IP address blocks:        2804:3468::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl
                          rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:47:56:1d:2e:70:90:3e:72:3f:b8:ad:6c:78:01:19:98:29:25:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02DC74163A88F81D8B63F23F57A7016D972478F4
        Validity
            Not Before: Jun 30 18:57:27 2026 GMT
            Not After : Jun 29 19:02:27 2027 GMT
        Subject: CN=5D0ABB06C359FCA1B71456A0D4024AC8105FB9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:f1:99:73:cd:e3:16:d0:7c:c4:8b:3d:7e:
                    80:a8:f9:8e:71:89:df:29:f5:3e:40:1d:76:49:03:
                    c0:7c:de:0a:b5:81:66:34:6b:05:4f:2e:49:cf:cc:
                    a1:6f:58:98:74:a3:75:ba:16:ca:5f:06:72:e0:45:
                    81:27:a1:18:93:14:1c:92:f0:e1:e4:cd:df:4c:8e:
                    f0:d1:4c:3f:83:6b:a8:3b:bb:57:2a:e9:cb:51:90:
                    12:0c:0e:bc:2d:ca:5b:80:1c:4a:cd:d0:e8:88:eb:
                    c5:2e:01:32:06:66:26:65:a1:9f:2b:fa:8d:a9:16:
                    ec:55:3e:d5:5d:84:30:ed:a1:3d:96:40:48:77:b0:
                    a3:a4:5d:65:e9:a5:e3:15:be:51:31:1e:64:47:7c:
                    ee:93:27:7d:57:fc:0c:41:61:03:2b:6d:68:58:f7:
                    d4:b8:14:ae:79:c8:08:82:a6:6b:05:c7:33:7a:b4:
                    87:0c:f1:54:eb:4c:76:7a:7d:b8:12:4c:df:ae:5c:
                    f6:a8:1b:e6:99:5d:b8:79:de:9e:2e:7d:10:06:f7:
                    b8:76:4d:8c:eb:6c:2a:b6:5c:a1:90:ae:e0:a3:a8:
                    05:9d:28:25:81:ac:01:aa:c3:f8:ce:61:7b:41:38:
                    67:e3:f2:10:ca:58:0f:3e:bb:b8:fe:1b:41:29:c9:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:BB:06:C3:59:FC:A1:B7:14:56:A0:D4:02:4A:C8:10:5F:B9:B0
            X509v3 Authority Key Identifier:
                keyid:02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/323830343a333436383a3a2f33332d3333203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3468::/33

    Signature Algorithm: sha256WithRSAEncryption
         c6:1e:0b:53:e1:25:12:4a:23:e1:d6:98:94:28:25:dc:73:ec:
         c4:a9:2b:b9:ad:09:73:01:9e:6e:0b:e9:9e:51:dc:56:02:50:
         e2:66:f3:fa:05:00:32:87:c5:63:3e:92:02:25:86:0c:35:08:
         bf:22:34:c6:71:3b:d6:9f:e8:78:79:8f:65:a1:8c:ff:1b:8d:
         0f:55:a8:15:e9:4c:b3:ec:1f:aa:e1:47:b3:5b:79:e6:43:86:
         be:83:3d:2e:88:f3:c8:b4:aa:06:d3:11:4c:1f:f1:04:58:05:
         3f:91:de:70:22:59:3b:fd:3f:22:d7:20:e8:59:8a:5a:2e:47:
         1d:c9:d3:b8:b8:24:b0:38:5e:8a:4c:af:cb:42:c7:ca:87:c1:
         c4:b6:69:5b:23:8d:2a:e3:e8:a0:fd:c7:ee:5b:51:cc:af:93:
         98:7a:9d:66:39:c6:e8:e4:bc:85:b2:12:23:40:d3:20:17:43:
         d6:32:80:4e:48:c7:f3:ae:db:ea:f3:12:06:2b:af:63:fb:71:
         f0:ef:14:1e:18:3f:81:b7:aa:a6:07:52:bd:bb:35:c6:2e:60:
         71:15:2f:45:90:ea:64:c7:d1:4e:3c:2f:bd:4f:10:cc:6f:3e:
         d8:d5:48:05:09:08:f6:b5:2c:6a:dc:4b:95:3f:95:8d:64:a4:
         62:83:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:59:30 2026 by rpki-client