Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          NHDXvMXqHDD1Q6bl3DhF4gmo9/LvukuNia+J8J4Hqzc=
Subject key identifier:   5E:F8:E7:7F:3D:3A:A0:78:F2:B9:D0:8E:C7:0C:56:23:5D:6C:5B:E0
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       45AD8725C106EA3668F4A8C89F2D265A14AF622F
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Wed 24 Jun 2026 19:34:03 +0000
ROA not before:           Wed 24 Jun 2026 19:29:03 +0000
ROA not after:            Wed 23 Jun 2027 19:34:03 +0000
asID:                     265187
IP address blocks:        2804:2c00:200::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ad:87:25:c1:06:ea:36:68:f4:a8:c8:9f:2d:26:5a:14:af:62:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jun 24 19:29:03 2026 GMT
            Not After : Jun 23 19:34:03 2027 GMT
        Subject: CN=5EF8E77F3D3AA078F2B9D08EC70C56235D6C5BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:5a:f7:37:2d:39:2f:8b:65:91:2b:ef:75:
                    0c:46:6e:37:7c:8d:b8:2d:e5:a5:b2:36:e1:10:c1:
                    42:58:1c:3e:a4:af:98:f8:e2:fa:d4:1d:fc:16:67:
                    5c:f2:22:29:6b:ac:a1:89:f8:f8:49:2f:09:3b:52:
                    92:e2:81:4b:49:0d:4c:18:13:e1:6b:4b:e5:6e:e1:
                    1a:e5:c7:40:2f:3a:e0:b1:7c:fa:39:b0:46:54:bd:
                    ec:5a:64:f6:f2:b3:30:f0:2c:16:41:2a:94:ae:e4:
                    55:80:c9:69:0d:4d:68:97:0c:7b:e0:a2:8d:b8:73:
                    44:d8:7e:c9:f6:18:3e:21:12:75:42:56:54:34:17:
                    ca:05:6f:eb:9b:0b:f8:cc:76:6c:fb:b1:b6:2a:fd:
                    e4:4d:c4:d5:af:80:b8:cb:f6:59:4c:26:5c:03:b4:
                    53:5f:0a:87:80:ee:b4:04:02:5b:96:7f:4c:fb:e7:
                    c4:fb:99:f1:ea:01:35:f2:53:b4:65:2e:3a:12:14:
                    e8:94:1f:a0:04:c8:38:83:22:1f:3d:ee:66:79:e0:
                    9f:01:c0:da:f7:cb:0f:3d:29:ed:5b:6a:f7:14:20:
                    ff:b3:1f:81:79:4b:45:4f:cc:1f:cb:ad:b4:d2:95:
                    a1:8b:b2:a4:b7:57:a7:e0:07:d2:2b:fb:ed:e5:d6:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:E7:7F:3D:3A:A0:78:F2:B9:D0:8E:C7:0C:56:23:5D:6C:5B:E0
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3230303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:200::/42

    Signature Algorithm: sha256WithRSAEncryption
         70:8f:b1:c0:3b:a0:d0:d5:22:15:75:b2:08:d4:bf:cc:af:95:
         e1:09:35:9b:65:9a:42:b3:84:7e:df:98:28:a6:ce:d7:ee:0a:
         70:f7:31:36:27:28:a1:53:12:5e:f6:4a:33:af:70:7e:69:83:
         bb:d6:63:c9:e3:68:4c:0d:9d:1d:05:ff:30:50:85:93:93:f3:
         59:43:f1:91:03:0c:a4:80:49:2d:b0:6e:9b:05:13:ea:aa:96:
         97:c0:c8:a1:d5:6d:4a:b0:a5:b1:90:1b:28:36:f3:dc:5c:c0:
         8c:05:b5:33:26:75:96:91:f1:f6:e9:a0:82:c4:40:8f:cd:32:
         a3:e9:d1:ef:d2:ed:69:7f:0b:ef:4d:14:9f:b9:1f:a9:54:56:
         2d:3e:de:d2:f1:97:ef:ac:49:1d:4e:ca:45:d4:57:b4:53:38:
         88:2d:3c:61:bc:57:c4:d8:42:74:34:25:55:51:65:1f:88:1b:
         78:b3:67:56:f2:ed:1a:7c:41:2a:3a:0f:ad:32:41:27:9b:86:
         81:84:7b:69:27:a6:f2:cc:f8:1e:bb:3a:0d:48:9c:46:01:ca:
         95:9b:6f:0b:3b:e0:b5:0e:7d:49:99:98:99:07:eb:3c:62:f6:
         2b:70:d9:59:d6:77:1c:14:7d:38:12:e5:ab:df:b6:11:42:d2:
         d8:67:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:01 2026 by rpki-client