Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/323830343a363334303a3a2f33322d313238203d3e20323639333439.roa
File:                     323830343a363334303a3a2f33322d313238203d3e20323639333439.roa (raw, json)
Hash identifier:          SswVqYy2HFdBFM+1saQ15sqY6kCrXnWbyS9g06H6QcU=
Subject key identifier:   F8:74:54:7D:1F:01:48:B8:29:39:6E:A6:FF:12:E8:81:7D:F5:2A:3F
Certificate issuer:       /CN=F2B59BD3044C648432C2D6D490B1D35218A43F8E
Certificate serial:       22A2D7B64A217D80DD73944D5BCC6921DE81B6FB
Authority key identifier: F2:B5:9B:D3:04:4C:64:84:32:C2:D6:D4:90:B1:D3:52:18:A4:3F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B59BD3044C648432C2D6D490B1D35218A43F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/323830343a363334303a3a2f33322d313238203d3e20323639333439.roa
Signing time:             Wed 22 Jul 2026 18:18:54 +0000
ROA not before:           Wed 22 Jul 2026 18:13:54 +0000
ROA not after:            Wed 21 Jul 2027 18:18:54 +0000
asID:                     269349
IP address blocks:        2804:6340::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/F2B59BD3044C648432C2D6D490B1D35218A43F8E.crl
                          rsync://rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/F2B59BD3044C648432C2D6D490B1D35218A43F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B59BD3044C648432C2D6D490B1D35218A43F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:d7:b6:4a:21:7d:80:dd:73:94:4d:5b:cc:69:21:de:81:b6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2B59BD3044C648432C2D6D490B1D35218A43F8E
        Validity
            Not Before: Jul 22 18:13:54 2026 GMT
            Not After : Jul 21 18:18:54 2027 GMT
        Subject: CN=F874547D1F0148B829396EA6FF12E8817DF52A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:3c:a0:21:76:27:e3:bf:69:a0:fb:cb:12:
                    30:6d:5e:4f:50:50:99:6e:48:7f:49:98:d5:95:80:
                    af:52:eb:9a:ed:d3:a8:4d:17:06:09:74:fc:31:af:
                    6d:a9:7e:a1:1e:79:94:26:bd:b6:3e:40:3e:ca:b1:
                    a5:c0:9d:ab:a9:bf:e0:d4:a7:b0:7a:6c:08:df:89:
                    71:76:66:6a:39:f1:4c:82:d4:1e:35:99:43:e7:c1:
                    a7:98:84:e4:da:9d:18:9f:8e:c7:75:ef:f1:98:a0:
                    d0:c5:1a:85:45:40:1b:c0:99:ad:a6:4f:67:86:3b:
                    07:08:f4:13:b9:e3:e7:f3:48:93:aa:7f:39:14:b6:
                    1a:0d:ca:1e:6a:55:1f:e0:f8:29:59:58:cc:27:b5:
                    8d:50:65:e4:54:5a:02:7c:b0:9a:c5:50:53:e7:25:
                    4e:00:6c:4c:28:68:22:8f:a6:d4:c9:45:e7:36:80:
                    a0:5c:0e:b2:67:5d:d3:f4:6e:c7:3e:92:88:ab:e4:
                    c2:af:c7:9a:6a:fd:f3:f5:89:e5:bf:b3:92:21:4e:
                    77:5f:cd:75:bd:bc:b7:4c:f0:08:7d:66:12:23:e2:
                    18:0b:50:f3:73:d9:3b:a8:cb:ae:6c:ee:98:1c:a4:
                    d8:04:77:8a:ea:c6:d9:da:a4:a3:da:13:04:3f:0e:
                    f7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:54:7D:1F:01:48:B8:29:39:6E:A6:FF:12:E8:81:7D:F5:2A:3F
            X509v3 Authority Key Identifier:
                keyid:F2:B5:9B:D3:04:4C:64:84:32:C2:D6:D4:90:B1:D3:52:18:A4:3F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/F2B59BD3044C648432C2D6D490B1D35218A43F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2B59BD3044C648432C2D6D490B1D35218A43F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aphvm9wx5R1iqpmNxrni6GAc2KfeVELtQsWBLk49i8Bd/0/323830343a363334303a3a2f33322d313238203d3e20323639333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:45:41:b7:08:11:4b:38:fb:ce:ed:7e:9c:81:8e:ac:cc:d1:
         0e:9e:1b:72:7b:8b:38:62:8d:42:a7:48:09:3a:13:3e:7f:73:
         44:0f:f9:ce:64:32:80:29:e6:32:42:16:b9:9f:97:88:ed:6e:
         e1:b0:fd:72:78:ec:fa:59:e2:29:44:b6:91:53:5c:50:f3:23:
         64:5f:8f:6b:b2:b0:79:7c:e6:ec:ee:b8:1d:dd:af:64:eb:ac:
         c6:5a:af:97:cf:a3:3f:a0:7c:42:2e:9e:4a:c0:b5:ca:ee:d3:
         c1:86:d5:12:31:0f:b4:03:ac:1f:08:03:c0:e5:66:fd:2b:8e:
         3f:08:f8:a7:c5:22:44:ae:b9:a9:3d:b5:24:0a:a1:c6:71:81:
         00:e3:b5:fc:cb:a4:6c:89:dc:8b:7c:a0:2c:2c:0a:46:12:17:
         17:9f:71:c9:d6:ac:cf:fa:db:28:9c:f3:47:83:83:83:41:f0:
         2e:4c:8a:db:c2:2d:59:a4:7d:8b:17:26:d4:41:bd:ff:7d:b5:
         b3:67:40:d0:58:f0:bb:b1:e2:37:a0:aa:66:5a:32:19:7c:de:
         96:d5:78:44:b6:12:cc:7b:66:e3:bf:f8:7f:18:6f:90:96:d0:
         4f:a9:7c:fd:b6:12:ce:eb:ce:a0:d9:18:f5:01:79:cc:75:1c:
         b9:53:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:11:51 2026 by rpki-client