Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/323830343a366234383a3a2f33322d313238203d3e20323730333930.roa
File:                     323830343a366234383a3a2f33322d313238203d3e20323730333930.roa (raw, json)
Hash identifier:          6wxa0TxoA/2vZRyT5gnhkBk/xV+40fcNNCi1N1hiUTg=
Subject key identifier:   75:F5:FE:5A:36:38:41:EF:75:0B:8C:D7:7A:C7:85:B6:E3:A7:5A:5D
Certificate issuer:       /CN=15730E3A6867D29F195428CD09644FEB75828102
Certificate serial:       3E2E5795C2C6A1A64DEB6C735543BDFD64415262
Authority key identifier: 15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/323830343a366234383a3a2f33322d313238203d3e20323730333930.roa
Signing time:             Tue 21 Jul 2026 19:41:34 +0000
ROA not before:           Tue 21 Jul 2026 19:36:34 +0000
ROA not after:            Tue 20 Jul 2027 19:41:34 +0000
asID:                     270390
IP address blocks:        2804:6b48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl
                          rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2e:57:95:c2:c6:a1:a6:4d:eb:6c:73:55:43:bd:fd:64:41:52:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15730E3A6867D29F195428CD09644FEB75828102
        Validity
            Not Before: Jul 21 19:36:34 2026 GMT
            Not After : Jul 20 19:41:34 2027 GMT
        Subject: CN=75F5FE5A363841EF750B8CD77AC785B6E3A75A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:06:bf:bc:ef:91:4a:a9:be:0b:4f:4c:85:
                    80:92:49:ad:86:18:77:27:f2:d2:9c:38:61:34:71:
                    e0:0b:4d:ab:e5:42:f3:61:e0:79:ee:d8:e1:0f:1e:
                    c1:4c:d6:c1:2b:8b:9f:c3:57:bf:c2:0b:b7:47:b2:
                    5f:91:21:3a:3e:f1:e9:4a:e9:71:f1:95:3f:a5:55:
                    ce:77:8c:42:f7:0d:6f:cc:a3:17:ee:ef:06:64:7c:
                    5a:62:56:f1:3b:28:0d:1c:5d:2f:45:3b:f0:a1:26:
                    33:53:ed:6e:ee:5c:c2:aa:f3:9a:72:cc:ca:69:d8:
                    f8:db:2b:a2:14:1e:f8:fd:e0:e6:12:9d:76:84:4e:
                    20:cc:f5:d8:c4:24:41:7d:5b:4e:cc:41:51:d9:ae:
                    b9:be:9c:37:1b:eb:9c:78:f2:23:35:7a:a0:43:4e:
                    af:23:36:23:5a:6f:e9:b6:6e:6f:e1:54:36:98:d4:
                    da:47:47:a8:26:75:38:e3:01:ca:e8:81:ae:7e:45:
                    62:67:5b:90:05:36:4c:bc:38:3c:8c:0a:25:03:c8:
                    32:64:c5:49:8a:d6:f3:ea:a0:09:bb:87:14:b2:6f:
                    cb:21:fc:2d:4b:81:aa:cb:39:3e:a4:a3:45:74:77:
                    e4:0e:b4:c2:7f:9b:90:51:d9:58:fe:6c:2d:25:7c:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F5:FE:5A:36:38:41:EF:75:0B:8C:D7:7A:C7:85:B6:E3:A7:5A:5D
            X509v3 Authority Key Identifier:
                keyid:15:73:0E:3A:68:67:D2:9F:19:54:28:CD:09:64:4F:EB:75:82:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/15730E3A6867D29F195428CD09644FEB75828102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15730E3A6867D29F195428CD09644FEB75828102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQ5u95i8TJTTCzm6aHQbYhrpWJsb1f3HN2rHt3WY1y5H/0/323830343a366234383a3a2f33322d313238203d3e20323730333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b48::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:be:a6:84:78:c9:af:8c:e4:1f:d0:1b:41:8e:13:39:a0:
         44:eb:24:b0:fe:be:ca:83:b1:41:c7:e8:f9:8e:d5:31:27:ae:
         17:d6:26:bb:c4:a9:27:9b:de:45:79:fe:81:ef:d0:03:1b:40:
         11:92:25:73:5f:55:71:b2:7f:5a:62:65:96:13:26:78:19:1e:
         11:14:5d:a7:be:f5:05:ce:64:e9:d8:30:db:dc:77:23:5a:ee:
         75:4a:1d:84:b0:11:d2:f5:e3:bb:24:1a:35:04:3a:8a:b7:18:
         92:ab:69:34:64:41:d6:a6:47:a4:76:ee:ef:40:35:2d:5b:68:
         cf:d9:50:f4:91:25:8d:37:82:82:d8:a0:4c:80:b0:36:21:cb:
         89:e5:cc:72:d9:a5:ed:24:07:f6:0b:92:3a:2b:56:4e:b7:57:
         98:29:0c:80:47:28:74:80:49:44:2b:3c:7d:40:3b:2c:fe:cf:
         4a:92:a0:ba:15:13:00:90:b2:c7:57:2c:53:f5:52:e3:76:96:
         98:57:d6:f0:c6:9b:a6:78:d9:0f:04:43:bb:aa:06:37:33:64:
         ab:b0:07:84:bb:d1:1e:9e:be:c5:32:09:b1:1b:cb:e8:14:83:
         5e:9a:c9:0f:91:0a:14:a7:a7:65:76:4c:ac:f8:74:0f:d9:90:
         03:dd:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:17:11 2026 by rpki-client