Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
File:                     323830343a333061383a3a2f33322d3332203d3e20323634393637.roa (raw, json)
Hash identifier:          DOr5aU5BxUPsERDDhsXQwfN1ijkAgVUpxB7Ye0zhDvU=
Subject key identifier:   0D:02:F5:EF:BB:4C:13:D0:90:18:B5:23:02:A2:A2:FE:3C:4A:EA:02
Certificate issuer:       /CN=BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D
Certificate serial:       4A361AE306DB76636D92E4AC880C9FC1C5B50282
Authority key identifier: BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa
Signing time:             Thu 25 Jun 2026 14:42:04 +0000
ROA not before:           Thu 25 Jun 2026 14:37:04 +0000
ROA not after:            Thu 24 Jun 2027 14:42:04 +0000
asID:                     264967
IP address blocks:        2804:30a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:36:1a:e3:06:db:76:63:6d:92:e4:ac:88:0c:9f:c1:c5:b5:02:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D
        Validity
            Not Before: Jun 25 14:37:04 2026 GMT
            Not After : Jun 24 14:42:04 2027 GMT
        Subject: CN=0D02F5EFBB4C13D09018B52302A2A2FE3C4AEA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:62:a6:91:23:ee:30:d0:0e:86:dd:9a:85:fa:
                    ac:0c:15:ca:6d:0e:83:d0:9f:bb:e0:da:48:9a:05:
                    3d:ab:42:68:68:20:d1:bb:e0:29:1c:8b:f2:31:a0:
                    1c:52:ad:96:2a:ec:94:32:c8:23:d0:96:9f:86:39:
                    95:12:a8:be:e2:61:5a:34:b8:63:23:70:73:ea:cb:
                    fe:59:39:ac:38:f4:08:ce:a7:bf:d7:48:50:cb:dd:
                    de:ba:93:48:2c:51:fc:ef:bc:a2:e2:ac:4e:79:69:
                    af:8d:49:59:19:2d:24:ee:11:e9:61:60:ab:ed:e9:
                    bd:03:61:70:da:ad:a2:34:eb:4b:5a:a8:97:8f:1c:
                    1e:2c:1b:39:e6:e6:a4:27:d9:d1:be:f1:e5:40:e7:
                    50:6f:5c:62:8a:ab:bb:a8:c3:78:af:a0:bb:63:9e:
                    be:dc:65:02:c6:23:1f:bf:05:c2:0a:7a:4a:26:b8:
                    04:89:cf:42:e9:c5:c1:f8:91:04:0e:fa:ea:2b:0f:
                    55:fd:a2:fe:6d:58:b1:bf:6b:61:e1:8e:c2:98:ce:
                    73:00:92:78:74:b8:60:50:df:95:83:b0:9b:c4:91:
                    2b:ff:a5:95:40:41:11:d5:42:43:ac:8b:36:b1:93:
                    60:e6:b4:48:05:c1:cd:74:11:5f:c8:fb:46:63:8c:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:F5:EF:BB:4C:13:D0:90:18:B5:23:02:A2:A2:FE:3C:4A:EA:02
            X509v3 Authority Key Identifier:
                keyid:BE:D7:B3:BC:A3:F9:19:55:C6:BC:27:7E:6A:5B:F0:9E:2D:C7:EC:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BED7B3BCA3F91955C6BC277E6A5BF09E2DC7EC4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/323830343a333061383a3a2f33322d3332203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:95:fd:d5:f0:0a:ee:4a:8f:2d:b0:0e:f9:d5:fc:14:3b:0c:
         c9:3e:dd:5b:ff:18:e1:0a:ff:c6:cf:52:10:28:e5:e2:2e:41:
         76:28:20:ec:62:fa:b8:4f:9c:41:36:dd:df:e0:af:24:7d:27:
         2b:64:4f:bf:66:56:64:71:50:98:21:b8:af:b8:21:c9:48:f4:
         e0:14:df:83:56:c3:f7:2d:42:41:61:3e:5c:e6:cc:63:98:ef:
         6f:6c:18:bc:75:35:5e:be:58:25:90:f5:e9:48:8f:7f:25:f1:
         06:88:0d:cb:15:df:7b:ab:08:b3:3f:6d:cf:d5:f0:0f:1d:5a:
         a3:3b:4b:99:a7:c5:37:bb:aa:8c:a1:35:0b:11:5d:ab:30:27:
         fb:8c:e3:7b:f4:10:65:9a:2e:fb:c0:ef:0f:0f:4e:4e:31:0e:
         f4:d5:a2:35:7c:62:02:8d:ff:86:c7:c0:af:04:1f:ca:7e:31:
         cd:47:ff:5d:89:c2:cf:07:b2:ce:66:f9:26:69:83:37:49:96:
         a8:84:74:41:0f:d8:11:ab:59:00:ca:58:5e:c6:c2:04:7e:b8:
         8b:0a:41:be:66:90:6d:46:6a:7b:8d:e6:a3:12:58:df:2e:9d:
         c0:6a:b0:8a:4a:df:59:dc:9b:35:12:e6:e5:f9:da:69:02:13:
         e4:31:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:54 2026 by rpki-client