Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa
File:                     323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa (raw, json)
Hash identifier:          4bUUyWlZUzXj3WiGIC1CS1qeE3KZx8xg1UdgBmRgud4=
Subject key identifier:   25:ED:6C:5C:43:F2:20:AB:9D:11:2B:EE:C3:89:F7:E8:A8:F7:28:07
Certificate issuer:       /CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
Certificate serial:       0EBB2FBDE8C72D54441AC1AF2435859C5399ED99
Authority key identifier: 1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa
Signing time:             Tue 14 Jul 2026 20:21:30 +0000
ROA not before:           Tue 14 Jul 2026 20:16:30 +0000
ROA not after:            Tue 13 Jul 2027 20:21:30 +0000
asID:                     264229
IP address blocks:        2804:248c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bb:2f:bd:e8:c7:2d:54:44:1a:c1:af:24:35:85:9c:53:99:ed:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
        Validity
            Not Before: Jul 14 20:16:30 2026 GMT
            Not After : Jul 13 20:21:30 2027 GMT
        Subject: CN=25ED6C5C43F220AB9D112BEEC389F7E8A8F72807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:d4:87:00:ef:d0:d7:99:a3:0c:92:8d:09:
                    5f:cb:73:da:e2:24:82:11:cf:5e:71:ac:d2:b7:4c:
                    3d:8e:18:b7:eb:bf:69:af:45:5f:53:82:d6:d2:be:
                    b6:c7:57:89:b7:34:39:d6:b8:f5:72:16:91:b1:32:
                    66:0f:94:67:df:90:b6:3d:38:0d:0d:3b:fa:01:eb:
                    44:68:50:9d:94:d6:f7:7f:62:c5:d1:4b:0a:64:ab:
                    ac:c5:47:8b:6a:9f:1b:71:20:af:42:a2:cd:df:25:
                    96:ee:8e:73:5a:f8:a0:1c:02:6a:de:4f:6e:77:ee:
                    11:39:e1:93:01:ac:48:a6:e5:fb:4f:a2:91:7c:e5:
                    85:1a:5c:ee:e8:18:22:a6:19:47:42:1c:5f:06:c7:
                    76:1a:8a:82:5a:17:8c:e9:be:98:88:13:0d:bd:3b:
                    75:57:62:f9:16:28:6d:0e:3d:15:e9:4e:07:61:26:
                    9e:22:e7:72:e7:68:e5:eb:68:33:3a:93:5c:be:0a:
                    0c:2f:59:d1:7d:43:30:fe:e5:7b:d4:64:80:17:93:
                    1a:fe:50:05:95:7d:b8:86:75:da:4c:a0:a5:66:20:
                    52:1a:c6:8c:7b:31:37:47:5a:61:fe:d8:f2:cb:73:
                    45:8d:64:d1:8f:df:de:18:e3:a6:1d:a6:66:ea:9a:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:6C:5C:43:F2:20:AB:9D:11:2B:EE:C3:89:F7:E8:A8:F7:28:07
            X509v3 Authority Key Identifier:
                keyid:1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:248c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:e8:ae:f3:9b:d2:ca:20:ad:46:42:9a:df:c7:52:df:d4:
         29:b3:07:d8:32:4f:fe:1f:09:38:4e:50:c9:9a:09:31:fb:59:
         94:53:ea:1e:26:c0:75:e5:63:45:fe:ef:85:d5:cd:50:86:0e:
         19:8c:1b:36:2d:4f:e8:76:47:ae:07:3a:48:4e:ba:54:a1:7a:
         a5:d1:7a:46:ea:9f:fe:55:42:84:5e:80:bc:43:74:d0:cd:04:
         59:f8:68:bf:b6:57:39:1f:d9:dd:4c:cf:9e:77:06:9a:38:5b:
         8b:db:d6:69:4c:25:09:96:a7:15:3c:44:ee:2f:26:dc:f0:dc:
         84:bd:80:c6:4d:ca:21:77:a2:6f:bf:d1:d1:92:05:c1:8c:e4:
         ef:2b:d5:6a:60:90:53:35:57:02:0d:a9:ed:40:2b:89:02:5b:
         7c:38:76:55:d7:cb:1e:b5:cb:1d:70:70:33:aa:3b:ea:eb:e6:
         85:4a:22:cc:2b:d9:66:43:f7:b1:be:c0:38:d6:3a:3b:59:12:
         45:88:bf:e3:7c:94:96:d0:1f:0a:f1:fe:08:50:50:82:ac:e4:
         b4:63:5d:d4:b0:93:cf:af:48:6e:d0:6d:88:92:1e:7a:e2:d4:
         ec:2f:1b:4c:03:78:59:fc:9a:df:df:aa:65:71:e4:fd:68:cf:
         8e:29:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:40 2026 by rpki-client