Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa
File:                     323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa (raw, json)
Hash identifier:          2NVXAxRHrhi7F2E2E10hnl89PQrHGvoGuv/5DE7/d9s=
Subject key identifier:   19:0A:6F:3B:4F:69:85:65:41:71:08:2E:F7:FE:0C:74:3C:B3:10:86
Certificate issuer:       /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial:       587C7DB22B0964CA5694048D1F0CC5CD2E63D68E
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa
Signing time:             Wed 24 Jun 2026 19:34:10 +0000
ROA not before:           Wed 24 Jun 2026 19:29:10 +0000
ROA not after:            Wed 23 Jun 2027 19:34:10 +0000
asID:                     265187
IP address blocks:        2804:2c00:340::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
                          rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7c:7d:b2:2b:09:64:ca:56:94:04:8d:1f:0c:c5:cd:2e:63:d6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
        Validity
            Not Before: Jun 24 19:29:10 2026 GMT
            Not After : Jun 23 19:34:10 2027 GMT
        Subject: CN=190A6F3B4F6985654171082EF7FE0C743CB31086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:d2:80:10:67:59:8a:83:1a:55:cb:dd:50:
                    e4:ea:3c:28:50:0c:ba:f8:27:26:8f:4c:6a:8c:5c:
                    d7:94:00:df:b6:51:9b:ef:ab:50:d1:72:da:f4:51:
                    37:6b:bf:f9:82:fd:56:5b:c3:53:47:52:a9:fb:8f:
                    a4:3d:d8:28:65:23:41:86:20:43:8c:1c:a9:26:5f:
                    35:1d:23:1d:ad:5f:18:f3:71:f6:5b:92:88:d1:3f:
                    d1:d6:70:8f:07:6c:6c:69:e3:62:f8:0c:2e:2c:c5:
                    43:b9:57:38:dc:42:0d:77:0a:8e:6a:88:aa:bb:50:
                    1f:2e:b0:f7:71:be:ba:5d:d8:8b:8b:29:bd:59:1c:
                    1d:90:95:8d:62:7f:57:87:d5:9f:cd:4b:05:63:50:
                    ec:ee:16:13:bc:27:e3:a2:1d:a2:7b:e0:41:37:2e:
                    74:f0:91:be:0f:2b:7f:b8:14:16:f9:ff:3a:59:3a:
                    1a:20:fe:2d:58:63:6c:8f:28:07:a5:a6:65:cc:7f:
                    b6:8e:b2:67:f8:41:f3:44:df:84:b1:45:b7:8d:93:
                    04:3e:ed:45:6c:bc:ad:e6:b9:40:98:d8:6f:33:b9:
                    cf:24:d9:70:1d:80:a0:cc:6e:3f:51:13:6f:6d:66:
                    0b:5d:76:2a:e0:fe:4f:46:4b:cf:b4:db:69:27:ba:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0A:6F:3B:4F:69:85:65:41:71:08:2E:F7:FE:0C:74:3C:B3:10:86
            X509v3 Authority Key Identifier:
                keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3334303a3a2f34322d3432203d3e20323635313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c00:340::/42

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:d9:2f:57:d9:17:4f:46:b4:90:c9:ca:e3:35:3e:d0:72:
         a5:f8:ec:34:eb:09:0f:76:11:20:ac:9c:19:9c:a2:a1:82:0c:
         81:55:3c:bf:e5:83:3f:64:fa:ab:5c:41:23:30:73:eb:0a:b6:
         2e:33:ce:23:34:dd:d7:50:e3:de:a8:b1:7a:0f:87:d2:7b:f4:
         f0:9c:6f:ad:52:5f:9e:6a:c7:d2:fe:6d:c2:92:70:06:8e:9f:
         1c:d8:50:b7:eb:c2:ff:df:65:fb:d9:af:5e:b6:ef:9a:47:9c:
         61:b6:af:cc:bc:28:85:aa:9b:e2:e2:c1:de:36:34:e2:bf:d4:
         51:50:1c:44:8f:76:f9:66:a1:15:b1:d2:01:d1:60:a1:8b:0c:
         ba:14:22:32:42:e1:4d:b6:07:ff:fa:92:7a:68:c1:71:2f:c4:
         6e:60:11:e6:94:58:6e:c4:7f:cf:d4:34:22:13:37:65:06:ce:
         c5:e9:c7:71:a0:aa:dd:27:47:43:76:de:83:c9:65:e4:e3:c9:
         6e:ad:24:1a:68:df:24:e8:8e:36:1e:de:20:a5:ab:a0:f9:fa:
         ce:78:83:5f:ec:9d:bb:4d:bf:5a:bb:ee:f7:2f:04:50:4f:29:
         c6:89:fb:3f:86:df:9e:18:ff:9d:38:ea:32:45:f6:e5:96:a4:
         1f:7f:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:50:26 2026 by rpki-client