Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa
File:                     323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (raw, json)
Hash identifier:          j2+UhTaS4HDwHBXgeW6kbh+pUk8J9gBzzMeJXZp2pYQ=
Subject key identifier:   3C:F2:FF:47:CA:8D:74:B4:A3:49:03:24:EF:0B:CF:4D:9E:C3:AC:95
Certificate issuer:       /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
Certificate serial:       5BDC574ED590BF726F41D8E36CF66DF5A7375BDA
Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa
Signing time:             Wed 01 Jul 2026 17:02:45 +0000
ROA not before:           Wed 01 Jul 2026 16:57:45 +0000
ROA not after:            Wed 30 Jun 2027 17:02:45 +0000
asID:                     268500
IP address blocks:        2804:522c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl
                          rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:dc:57:4e:d5:90:bf:72:6f:41:d8:e3:6c:f6:6d:f5:a7:37:5b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0
        Validity
            Not Before: Jul  1 16:57:45 2026 GMT
            Not After : Jun 30 17:02:45 2027 GMT
        Subject: CN=3CF2FF47CA8D74B4A3490324EF0BCF4D9EC3AC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:44:a7:af:31:dc:8d:c2:fe:9b:49:fc:69:
                    48:66:13:16:f1:05:89:37:ee:6c:b3:fe:9b:d3:b1:
                    54:9d:f0:b0:e8:99:ce:f0:8a:60:00:3e:f8:fe:f6:
                    65:e5:fe:2a:06:06:3e:ec:17:2f:94:e4:b1:50:da:
                    e9:06:17:19:8c:f7:57:ab:a6:db:56:8e:6c:98:45:
                    cb:27:dc:5a:0c:64:13:64:65:1d:08:ea:06:81:36:
                    60:bc:5a:4d:d2:d0:df:9d:a3:a8:d2:ef:45:61:6b:
                    c1:60:3d:f6:63:f1:6f:15:cd:19:0f:5d:51:53:63:
                    07:73:1b:20:ca:0e:76:79:d1:90:81:92:dd:91:02:
                    61:05:b8:36:d1:e7:05:42:ad:05:f9:82:53:30:1d:
                    5a:c6:14:96:4d:9e:ab:c5:54:1a:a8:65:e3:34:32:
                    ef:a3:6e:9b:ee:34:20:0b:43:48:f6:d2:57:c3:f4:
                    6d:a5:b0:1d:1f:b5:b3:ac:21:a4:5a:a1:d2:da:f1:
                    fd:fb:4e:25:30:dd:c3:58:6c:be:d3:b8:7f:4b:ec:
                    e0:c1:ce:69:4c:90:4b:3c:70:8c:e9:78:55:a1:f2:
                    cb:3b:d7:46:7f:6e:9b:52:13:94:b6:e5:44:1f:bb:
                    d3:b7:ca:1b:d6:2d:7b:73:81:e6:7d:e8:a4:72:ce:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:FF:47:CA:8D:74:B4:A3:49:03:24:EF:0B:CF:4D:9E:C3:AC:95
            X509v3 Authority Key Identifier:
                keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/323830343a353232633a3a2f33322d313238203d3e20323638353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:522c::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:f5:72:34:fd:f7:09:e6:49:94:ac:0a:05:95:42:46:ef:
         fb:8b:4f:31:95:d0:6b:be:34:42:78:0d:ae:74:ee:32:67:e5:
         87:f9:b9:a0:17:1d:e3:53:f7:06:7f:7b:b6:81:4a:fe:21:24:
         35:cd:8e:d9:e6:e5:9e:d1:ed:cd:df:62:a9:89:4d:5f:2c:59:
         3a:f9:7c:6d:38:3e:f8:4d:f9:da:b3:da:74:95:7c:a3:d0:4f:
         76:f2:d6:5d:28:e1:07:ef:cf:10:cd:56:1b:cf:00:35:30:c8:
         13:70:6c:3b:76:09:23:6a:b2:d9:c5:a9:96:4a:15:08:b1:15:
         d4:e4:12:3f:59:ee:44:38:48:06:20:a7:ec:2a:0d:f3:62:d0:
         b6:98:92:c1:ef:77:56:3f:10:52:11:b0:4e:7d:5c:99:2d:7f:
         da:6c:74:e6:d5:fd:34:94:f0:89:82:1f:43:bd:7e:25:6a:4c:
         5b:9d:92:d4:89:ac:30:73:e1:3a:0e:6a:99:60:8a:34:05:82:
         4f:d3:98:e5:c8:5a:82:50:ef:e1:5a:6e:5a:e2:96:8a:e2:da:
         98:56:b1:62:7e:ba:3f:00:49:2f:49:c7:3f:7c:e2:b9:6a:3a:
         b4:96:cd:c0:3b:d2:a4:d6:1d:35:fa:a1:49:4b:fe:e6:d4:cc:
         86:1b:91:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:31:05 2026 by rpki-client