Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6533303a3a2f33322d3438203d3e203131333338.roa
File:                     323830343a6533303a3a2f33322d3438203d3e203131333338.roa (raw, json)
Hash identifier:          a4XAyHKspEzWkEr1aXmCss/Y4IkFq2yl4Rv8s+QfhIo=
Subject key identifier:   9C:DE:56:2D:D0:F9:32:BB:F3:86:A6:27:DA:27:F8:B8:47:E8:7A:DE
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       7DAE59883589B7E1F7E8A7F5D553517CC17293CB
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6533303a3a2f33322d3438203d3e203131333338.roa
Signing time:             Wed 22 Jul 2026 18:04:49 +0000
ROA not before:           Wed 22 Jul 2026 17:59:49 +0000
ROA not after:            Wed 21 Jul 2027 18:04:49 +0000
asID:                     11338
IP address blocks:        2804:e30::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ae:59:88:35:89:b7:e1:f7:e8:a7:f5:d5:53:51:7c:c1:72:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Jul 22 17:59:49 2026 GMT
            Not After : Jul 21 18:04:49 2027 GMT
        Subject: CN=9CDE562DD0F932BBF386A627DA27F8B847E87ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:67:1c:db:47:a1:dc:e0:96:c2:75:c9:d5:
                    35:4b:74:3b:26:0c:b4:c2:f0:a5:a5:6f:56:2b:f5:
                    2f:3f:52:f5:c6:23:29:2b:95:00:2b:5e:03:62:60:
                    01:eb:d3:3c:df:1d:d5:0c:09:39:9c:88:70:15:31:
                    61:30:3e:10:37:53:2d:5d:e0:78:ea:35:34:65:d1:
                    72:69:80:16:ed:b4:18:c8:af:05:ab:ef:54:6d:79:
                    35:96:b5:49:24:6f:a9:4d:ed:8d:13:02:b0:ed:82:
                    1e:72:8c:72:39:c0:8d:66:f9:06:8b:bc:2d:37:4d:
                    01:f8:89:97:25:f0:38:85:56:f2:bb:c0:e1:1b:76:
                    cd:47:12:cd:dd:30:fb:ac:52:f7:6f:dc:5f:78:28:
                    f0:5c:6e:d7:6f:2f:f2:9e:56:a6:10:dd:bf:d3:53:
                    fe:b1:15:be:2e:1d:4b:28:3c:6b:0e:15:8e:71:85:
                    c8:e5:cd:68:39:90:e4:9c:82:8d:37:90:de:cf:6f:
                    1d:eb:ec:3b:6b:6d:c4:a3:e1:12:2f:1d:69:4f:2d:
                    95:1f:9b:1d:bd:d6:ce:92:ee:1b:f8:86:f2:d0:c7:
                    5d:43:81:d2:34:6e:75:57:4c:2c:8f:98:08:96:49:
                    7f:aa:be:5d:c3:e2:5e:4d:5c:dd:d1:ec:f2:2c:f8:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DE:56:2D:D0:F9:32:BB:F3:86:A6:27:DA:27:F8:B8:47:E8:7A:DE
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a6533303a3a2f33322d3438203d3e203131333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:17:c4:22:13:68:1a:b2:3c:b0:cc:7d:f6:18:a2:13:a8:
         09:3a:d7:d8:1b:7f:1b:0b:ed:b4:74:dc:ca:2d:9a:2e:83:af:
         eb:b1:47:63:50:dc:e3:ca:2c:d1:63:ce:86:52:43:77:83:af:
         dd:d2:ab:e2:27:f2:a5:26:69:c5:a7:86:cc:dc:7c:21:9e:1e:
         c2:c3:35:1f:b2:6d:bb:83:fa:e9:93:99:7b:22:85:97:41:52:
         81:23:ad:78:d2:c7:2b:91:07:df:c7:9f:b6:2b:e0:a6:9c:04:
         c1:80:12:bf:09:43:07:b1:41:8d:a2:e4:92:df:43:f1:ec:7d:
         83:ca:fd:c2:43:45:5c:2c:bd:80:c9:1f:4f:2a:c2:7b:a4:9e:
         04:39:aa:89:9b:46:57:3f:0f:9f:15:5a:af:2f:47:a8:b3:05:
         72:54:a6:e8:de:25:18:53:9c:fc:8e:02:47:fa:ea:a4:58:5c:
         72:45:17:7f:48:d6:85:ec:6f:f2:a7:f7:4c:b4:6c:4f:22:b7:
         52:f4:7a:41:d9:98:bb:6c:19:4d:c4:f7:78:70:84:55:06:30:
         54:dd:16:69:7e:42:4b:8b:06:69:ee:f0:9e:b8:c8:d3:9a:e9:
         c8:63:99:22:1e:0f:c0:1e:ac:37:f8:de:90:cd:49:0f:c2:49:
         e6:1c:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:53:03 2026 by rpki-client