Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa
File:                     323830343a3361343a3a2f33322d3438203d3e203238313538.roa (raw, json)
Hash identifier:          KVRj5UQDMIF7Lu1VCKKvXpenYkscFGw++83r/y/0s88=
Subject key identifier:   7A:CC:35:BD:BD:8C:F1:47:CA:D6:67:60:54:16:F5:4D:2B:0B:52:53
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       417F6A16264F57D7238238C56969AC200BDC78E5
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     28158
IP address blocks:        2804:3a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7f:6a:16:26:4f:57:d7:23:82:38:c5:69:69:ac:20:0b:dc:78:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=7ACC35BDBD8CF147CAD667605416F54D2B0B5253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:33:48:eb:f0:03:29:0a:2c:48:f4:c3:20:
                    73:fc:4f:f3:76:e3:0f:fb:d4:fe:c2:a4:56:be:6a:
                    fd:2a:c5:7c:b9:6e:de:3a:92:42:7c:2f:7c:29:d4:
                    01:57:14:f4:15:56:bd:ce:e9:a2:90:9d:69:5e:49:
                    b9:77:8e:a0:89:6b:de:b7:9a:2c:91:ec:87:56:f6:
                    86:66:9b:89:57:ef:72:51:ea:bf:49:0a:0b:ca:66:
                    71:65:ab:40:51:cd:17:e7:57:74:10:5b:1c:3e:51:
                    56:39:c3:2a:b4:45:23:89:34:76:41:0f:b2:d8:82:
                    dd:2e:9d:14:e8:b0:e3:22:4e:67:ff:b3:32:97:8c:
                    76:27:b6:be:b6:f7:30:15:7c:69:18:28:84:f5:3d:
                    27:b2:d4:21:1d:f9:b1:ab:ae:c0:e7:52:ac:98:29:
                    46:11:d5:9f:1a:9c:7b:4a:b1:ee:ea:92:d7:bc:bf:
                    3b:61:18:73:ef:27:15:fd:b9:00:c6:f4:af:28:ce:
                    f2:ee:e5:15:fa:22:70:ea:d2:7a:e3:1f:fe:29:6a:
                    38:50:12:f5:fb:74:e9:9e:0d:ba:0a:6f:a1:1e:8f:
                    92:3a:41:7b:60:2f:a1:1d:0b:3b:03:3a:7a:30:2a:
                    d2:00:ad:b7:a3:24:4d:d7:17:92:ff:8e:a7:f0:a0:
                    a2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CC:35:BD:BD:8C:F1:47:CA:D6:67:60:54:16:F5:4D:2B:0B:52:53
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/323830343a3361343a3a2f33322d3438203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:7f:44:8a:01:2f:ba:76:51:64:64:ad:52:5c:b4:9c:23:5c:
         36:74:74:46:3f:f3:84:60:4d:69:60:68:85:f1:1e:b8:f3:8a:
         7e:a0:99:cc:9e:0d:45:e2:38:24:3e:b0:df:f0:4b:71:b0:36:
         20:48:6d:19:d5:c6:40:62:c4:22:c6:17:c5:b9:7f:b0:73:40:
         41:ff:90:37:8e:fe:ba:f0:6d:c6:f3:e0:b9:8b:aa:8e:21:73:
         cd:25:51:0c:6d:95:57:fe:e6:0b:f2:4c:81:bf:d8:2f:9b:7c:
         be:f0:72:db:07:e3:06:2d:d0:47:71:13:bf:8a:0f:ad:60:5a:
         e1:81:47:4e:fd:73:db:e0:dc:1d:82:0b:48:84:82:37:8f:13:
         b8:a5:e4:a2:57:2a:26:8a:d7:c1:0e:41:17:23:54:b5:53:9e:
         9a:23:cd:a9:24:91:0f:71:dc:f0:8b:72:77:f9:4e:68:5a:b3:
         c0:e9:11:29:21:2b:c6:72:72:60:a0:a5:f9:2f:9d:d3:02:5f:
         29:c2:fa:8a:66:06:69:b3:29:f6:d1:40:84:c0:94:e5:ae:b1:
         56:93:d5:c2:40:02:a0:a8:cf:ad:6f:e4:a3:fc:87:ea:b3:df:
         b3:cd:03:9a:49:b0:f7:38:c7:29:96:af:a8:be:f8:1b:3f:8f:
         1a:67:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:30:06 2026 by rpki-client