Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d313238203d3e20323730323535.roa
File:                     323830343a363933343a3a2f33322d313238203d3e20323730323535.roa (raw, json)
Hash identifier:          bQxBzWQtqzpBWweO33FIc7lqkar/UxWFq7AjunfEpWA=
Subject key identifier:   A9:40:3A:A5:22:C8:A1:83:8E:DD:F9:8D:97:C0:E4:32:67:71:61:DA
Certificate issuer:       /CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
Certificate serial:       5652D2C1107253C4D518D66F94CB15118E97BF7E
Authority key identifier: FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d313238203d3e20323730323535.roa
Signing time:             Tue 14 Jul 2026 13:18:24 +0000
ROA not before:           Tue 14 Jul 2026 13:13:24 +0000
ROA not after:            Tue 13 Jul 2027 13:18:24 +0000
asID:                     270255
IP address blocks:        2804:6934::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl
                          rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:52:d2:c1:10:72:53:c4:d5:18:d6:6f:94:cb:15:11:8e:97:bf:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB2788BCFA95BF2224E49278CDA51747D625BC3F
        Validity
            Not Before: Jul 14 13:13:24 2026 GMT
            Not After : Jul 13 13:18:24 2027 GMT
        Subject: CN=A9403AA522C8A1838EDDF98D97C0E432677161DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:7a:d2:d2:a4:73:37:f3:88:92:7a:4e:78:
                    01:ae:ba:85:52:40:95:40:32:bc:66:75:8e:c8:4a:
                    61:77:e4:72:22:28:e6:b1:40:d2:56:fc:d5:a4:e5:
                    fe:46:69:e3:7f:79:b8:2c:d4:1b:ad:9e:78:6c:0b:
                    60:00:0b:66:a9:d9:fb:66:97:50:19:71:d1:60:24:
                    f3:23:55:c5:78:cb:41:f5:f6:e9:93:16:4a:0f:d4:
                    72:2e:db:3d:e4:f7:8b:b7:56:fc:63:6b:70:21:9f:
                    b8:1b:1f:31:90:57:67:41:e7:fa:e7:fb:28:48:66:
                    8b:e6:53:3c:16:00:5d:22:d9:19:7e:73:67:5a:0f:
                    1e:b7:14:ed:12:45:1f:50:7c:65:24:0f:5f:5a:70:
                    e8:ff:0e:88:ec:a5:71:e7:ea:88:e8:4c:37:09:aa:
                    a8:3d:3b:96:56:c7:f1:cd:da:52:c8:13:61:c0:d5:
                    c9:05:ff:df:90:cf:1f:c4:ad:48:36:27:77:66:74:
                    6c:c2:4a:70:fb:ed:5b:35:42:05:3a:be:ea:69:ea:
                    45:8e:1f:76:0f:99:d6:61:71:97:7e:61:bd:ce:5b:
                    a9:03:83:7c:cf:89:60:30:9a:bb:1b:21:f7:dc:c8:
                    e5:2d:af:46:60:12:8b:73:dd:84:6a:1a:ce:a7:ad:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:40:3A:A5:22:C8:A1:83:8E:DD:F9:8D:97:C0:E4:32:67:71:61:DA
            X509v3 Authority Key Identifier:
                keyid:FB:27:88:BC:FA:95:BF:22:24:E4:92:78:CD:A5:17:47:D6:25:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/FB2788BCFA95BF2224E49278CDA51747D625BC3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB2788BCFA95BF2224E49278CDA51747D625BC3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DECPgwacdQM2yDQfsYNUsGuGWAzBBXxCPfjdWNRQ7Qs3/0/323830343a363933343a3a2f33322d313238203d3e20323730323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6934::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:4f:7f:f5:c7:bb:06:bc:bf:14:f2:dd:7b:cd:6e:09:3d:
         08:8d:47:da:51:22:69:88:5f:93:5b:c4:76:a7:f6:5a:f8:3e:
         e8:5f:45:69:37:6a:6f:7d:25:e0:ea:3a:12:d0:79:a7:5d:a1:
         9a:3d:c6:3a:4d:6c:49:ab:13:9f:d7:b4:6e:6e:db:0c:93:88:
         42:c1:de:0b:6f:ce:c6:53:e6:47:46:55:07:bb:db:f5:85:cb:
         df:69:52:1c:b8:0e:3c:66:07:60:e8:5a:0f:4b:0f:0e:21:71:
         28:9b:af:fe:9c:46:f7:72:6e:8e:c8:1b:4d:3d:8b:dd:be:3d:
         26:6f:b8:40:a5:34:39:1f:b5:e7:ad:2e:9d:4e:b1:ae:29:2f:
         6d:ad:92:5f:9a:24:23:58:ac:a5:c9:1c:1a:2e:92:3c:f4:af:
         bb:43:4c:70:e7:cf:16:1c:ab:2a:27:8e:f9:6f:42:9e:ca:4a:
         99:fd:6c:90:48:5f:25:e4:07:76:18:68:32:63:7c:02:33:01:
         1b:fe:2e:fa:4a:5a:cd:4d:b9:07:e2:c3:d4:42:8e:27:d2:98:
         c8:b1:e0:b4:56:be:2c:8a:65:12:a0:72:f4:f2:e1:80:d7:fa:
         b6:c4:fb:8a:84:1d:e5:9c:d7:6b:e1:a3:2d:2d:5c:c0:df:fb:
         1d:4f:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:22:17 2026 by rpki-client