Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa
File:                     323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa (raw, json)
Hash identifier:          chdeMLp8upRnsocN6XJCTtv4wFK27TDsqra+qcy1ZEw=
Subject key identifier:   48:52:51:3D:17:77:42:31:A6:57:D7:A3:01:FD:EA:A6:83:0C:07:BD
Certificate issuer:       /CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
Certificate serial:       6C6526C8CEEEFCC9DFFBCCEF564C4B068110C9C9
Authority key identifier: 1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa
Signing time:             Tue 14 Jul 2026 20:21:39 +0000
ROA not before:           Tue 14 Jul 2026 20:16:39 +0000
ROA not after:            Tue 13 Jul 2027 20:21:39 +0000
asID:                     264229
IP address blocks:        2804:248c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl
                          rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:65:26:c8:ce:ee:fc:c9:df:fb:cc:ef:56:4c:4b:06:81:10:c9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FAB27DF0501A80D35F996602ED2081F3C7A6B63
        Validity
            Not Before: Jul 14 20:16:39 2026 GMT
            Not After : Jul 13 20:21:39 2027 GMT
        Subject: CN=4852513D17774231A657D7A301FDEAA6830C07BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:fb:e2:b0:bf:d8:d6:06:01:68:1a:8d:0b:
                    72:75:92:bd:f7:31:9e:e3:7d:fb:db:aa:4a:1c:01:
                    ee:b1:0b:1e:5c:18:52:74:a2:1b:76:9c:76:f3:dc:
                    89:1d:18:14:ff:7e:81:0f:33:ff:24:ce:23:e9:10:
                    ad:87:80:1c:55:ad:01:0e:98:dc:07:99:dd:1a:66:
                    d8:4f:78:ea:1e:4c:48:d8:f5:57:7b:cf:a4:d7:0b:
                    c4:1d:c3:e6:92:83:7f:98:55:d2:d9:b5:c6:b2:5c:
                    9f:e8:94:f6:0e:bb:28:00:50:34:54:ad:56:af:cc:
                    a8:56:a3:d8:ba:d1:ad:fc:1d:72:63:6a:96:49:92:
                    fb:54:4b:2e:d1:72:a2:a0:bc:46:19:35:2f:7b:64:
                    3a:ca:0e:41:8a:d0:5f:2d:58:6e:4b:e1:59:35:25:
                    35:90:5d:9b:36:f3:32:5a:b8:c6:50:31:63:08:a4:
                    43:ca:49:da:78:39:83:31:f8:35:f2:4a:af:4b:0c:
                    73:f9:a8:38:28:84:7a:6a:d9:10:11:dd:ca:6d:82:
                    62:4b:9c:64:26:04:c1:cd:2a:b4:05:fb:ce:a3:e1:
                    50:6d:06:db:8f:9e:c0:1c:19:ff:47:0d:84:85:19:
                    03:8c:78:80:90:f1:14:8c:49:7b:cd:d8:cb:dc:ae:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:52:51:3D:17:77:42:31:A6:57:D7:A3:01:FD:EA:A6:83:0C:07:BD
            X509v3 Authority Key Identifier:
                keyid:1F:AB:27:DF:05:01:A8:0D:35:F9:96:60:2E:D2:08:1F:3C:7A:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FAB27DF0501A80D35F996602ED2081F3C7A6B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:248c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:42:6b:d1:b3:42:6b:c7:49:8d:8d:c7:ce:f3:d7:d5:0a:
         be:10:f4:69:e2:92:12:2c:7a:94:d6:14:7e:f3:4f:2a:01:7a:
         1d:c3:c4:e2:3c:9d:a3:65:01:ff:f3:2b:0e:f0:66:b4:e9:e6:
         b4:cc:21:b0:09:7d:a9:bc:9f:cd:c0:dc:79:62:2f:e4:c4:3a:
         88:b0:78:33:6f:79:0b:7d:2b:18:38:3f:3c:07:34:6b:1e:89:
         4d:b8:c0:54:cb:a3:a4:ac:1e:31:c8:ae:f2:44:4f:b0:2b:a4:
         b3:51:20:a7:69:38:d4:d2:20:8e:64:dc:f3:ef:ec:eb:9d:19:
         9f:ad:4f:9c:cd:b3:56:2d:c5:00:c2:8b:c6:32:c4:e3:79:c9:
         e4:cb:a7:81:7d:07:6c:da:50:a5:8a:8f:59:7c:55:a0:ef:b0:
         df:30:33:1f:d5:f5:78:61:2e:63:90:1f:e4:1f:dd:cd:ad:ba:
         27:4c:60:f7:ac:5b:ac:ad:74:db:84:37:16:58:a9:7b:b8:f9:
         b5:f0:f4:3e:47:d0:89:4f:49:d9:22:9d:bb:fd:35:e8:44:be:
         b9:10:2a:14:d7:e4:35:3c:a9:33:0b:bc:09:98:ab:2e:1d:7f:
         a1:19:9b:ff:8b:04:62:84:95:60:b0:2c:e8:7a:1c:2a:32:a2:
         50:69:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:34 2026 by rpki-client