Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa
File:                     323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa (raw, json)
Hash identifier:          0WB8KD7RLLWlmf2ljGM7Cr45spOgGbkYO4Z4QNpSxkY=
Subject key identifier:   A6:C9:4C:DF:27:37:C9:DC:C4:B4:50:0A:8A:27:2E:22:0B:4A:97:A8
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       06EC0D8F1CF32C1C9DE385D53AD6E0911A7DF3CD
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa
Signing time:             Tue 21 Jul 2026 15:01:12 +0000
ROA not before:           Tue 21 Jul 2026 14:56:12 +0000
ROA not after:            Tue 20 Jul 2027 15:01:12 +0000
asID:                     28580
IP address blocks:        2804:5f4:c000::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ec:0d:8f:1c:f3:2c:1c:9d:e3:85:d5:3a:d6:e0:91:1a:7d:f3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 21 14:56:12 2026 GMT
            Not After : Jul 20 15:01:12 2027 GMT
        Subject: CN=A6C94CDF2737C9DCC4B4500A8A272E220B4A97A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:5b:3e:02:f5:2a:e3:ae:61:93:66:c7:a1:
                    4d:f1:1d:6f:5a:f5:79:22:6b:a8:99:90:7d:cb:4b:
                    ba:19:3f:23:3e:45:eb:09:30:c0:f7:17:88:77:b9:
                    2e:78:af:8c:af:ba:36:28:5a:cc:08:c8:3d:c3:95:
                    46:64:ea:9e:ad:f6:27:2d:40:7f:c1:af:7c:34:91:
                    ba:27:13:d7:54:94:b4:b2:20:1e:21:44:74:17:bd:
                    f4:ee:5b:cd:20:d3:b4:e7:70:5a:f6:d5:d6:56:bf:
                    40:01:ab:4b:92:dd:ee:7d:56:4e:0d:fb:fa:6f:01:
                    3f:24:90:a4:42:ca:4d:97:00:8d:8c:a5:53:cd:c4:
                    83:e0:1e:3c:e4:2b:bb:88:72:7f:74:b4:8c:27:fd:
                    7d:bb:88:8d:80:60:5f:75:21:44:c6:5c:76:45:81:
                    00:72:51:7c:6c:81:98:fc:c7:2a:93:d8:59:7e:8d:
                    aa:55:e8:4d:e4:4c:ef:96:52:fa:19:84:be:06:aa:
                    be:7e:b7:45:bd:25:39:10:c0:43:10:2f:a9:4f:12:
                    39:ae:e6:1a:a5:aa:1b:fa:03:66:9d:b5:38:b1:d0:
                    7c:b1:4c:9c:05:cb:19:ce:9a:c9:71:ba:ab:b0:4f:
                    2f:f3:a1:49:76:7e:71:92:f1:22:6e:10:80:24:61:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:4C:DF:27:37:C9:DC:C4:B4:50:0A:8A:27:2E:22:0B:4A:97:A8
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:3f:43:28:73:29:2a:be:89:a6:ea:db:7a:30:ba:7f:9f:6e:
         c8:55:dc:c1:31:cd:14:d2:f6:b9:91:88:5c:05:75:9b:d0:d0:
         44:79:3e:d1:42:5a:de:9d:7b:05:1b:97:52:b1:9b:04:84:cf:
         86:b9:77:e6:58:10:1b:21:0f:9c:74:2a:f6:33:1b:b0:10:4d:
         30:20:77:0a:95:46:ef:d9:70:5f:33:1f:28:3f:d9:1d:1b:6a:
         ce:e9:f3:85:0e:2f:49:51:69:d5:f2:10:73:df:4a:4e:f3:6b:
         df:78:04:e6:03:48:a8:37:1c:8e:34:82:40:5b:21:4c:29:f0:
         1b:b2:32:e1:6e:ba:94:92:31:19:42:da:3f:62:e4:c0:59:73:
         b1:ed:e0:c6:65:44:7c:54:78:d1:1d:58:46:ec:51:f4:d2:8b:
         dd:d6:b3:b2:d7:dd:3d:fe:5f:d4:91:29:e7:c4:56:b8:32:6d:
         3d:bd:cd:7e:4b:39:ee:fe:3b:b2:a2:55:f9:c7:5e:8f:10:d9:
         c9:8b:de:c5:fd:e1:a3:ad:3c:41:18:c9:f1:b5:e6:c6:26:8c:
         b0:82:85:e2:41:46:7a:27:69:ec:92:94:c7:4f:17:c1:9d:ee:
         b0:ed:e3:3c:f9:9b:d3:ef:64:50:43:2e:d0:84:9b:fc:ab:35:
         95:85:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:39:31 2026 by rpki-client