Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
File:                     323830343a376539303a3a2f33322d3332203d3e20323731363332.roa (raw, json)
Hash identifier:          4VGbyKKcZ8VOB7ps8MbtvUB/hlMpuGJ88Vm5eUslnjY=
Subject key identifier:   4E:2F:DB:71:CC:CC:04:D4:2E:9F:85:AC:80:BA:54:40:15:84:BD:4B
Certificate issuer:       /CN=76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85
Certificate serial:       400A713AF75CE7D8CF6AF5702D6380C06E3698EB
Authority key identifier: 76:D5:1A:03:D1:CA:97:76:BB:66:B9:DB:80:A8:E7:A3:B8:80:DC:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa
Signing time:             Thu 09 Jul 2026 22:31:31 +0000
ROA not before:           Thu 09 Jul 2026 22:26:31 +0000
ROA not after:            Thu 08 Jul 2027 22:31:31 +0000
asID:                     271632
IP address blocks:        2804:7e90::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.crl
                          rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:71:3a:f7:5c:e7:d8:cf:6a:f5:70:2d:63:80:c0:6e:36:98:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85
        Validity
            Not Before: Jul  9 22:26:31 2026 GMT
            Not After : Jul  8 22:31:31 2027 GMT
        Subject: CN=4E2FDB71CCCC04D42E9F85AC80BA54401584BD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:93:ed:00:49:a0:a4:26:17:9f:06:79:52:
                    b8:7c:7d:99:be:20:28:d9:d4:ae:d9:a9:0e:b4:02:
                    ce:70:8a:0f:45:4d:b2:f5:08:d2:8a:0a:6a:8b:68:
                    d1:3f:22:68:90:51:19:eb:f2:7a:1c:2f:16:0c:25:
                    21:f8:3a:bb:a0:c4:61:73:ed:1f:93:ed:78:fd:b6:
                    aa:f7:2d:df:35:d6:25:c1:e4:3c:cf:66:e7:01:36:
                    a3:75:2c:37:e4:b2:05:01:fb:ba:64:a8:b1:b2:3c:
                    37:fd:ad:be:ba:7d:70:a0:5c:bd:da:9c:e5:b4:f5:
                    23:4b:0a:c0:26:96:91:35:76:7d:eb:44:2e:5b:ac:
                    7e:c1:d5:49:28:c5:6f:07:88:7c:e1:ab:2d:13:ef:
                    30:80:01:e0:ce:55:b8:6d:00:77:69:ea:c7:c2:44:
                    5d:98:15:7b:04:14:e2:ea:8c:62:70:59:b3:63:8f:
                    28:f8:0c:1a:9a:8c:94:1f:89:fe:b3:ba:bf:ea:97:
                    62:7c:ea:8c:82:99:80:7d:48:c1:a9:9a:ce:2e:c3:
                    d0:0e:93:67:b7:43:b3:2d:d8:3d:e3:c9:07:dc:75:
                    16:59:b8:29:8d:53:6b:ab:60:98:06:6d:5b:7a:26:
                    10:ad:32:7b:d9:3a:1c:47:ec:17:aa:4a:57:63:3f:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:DB:71:CC:CC:04:D4:2E:9F:85:AC:80:BA:54:40:15:84:BD:4B
            X509v3 Authority Key Identifier:
                keyid:76:D5:1A:03:D1:CA:97:76:BB:66:B9:DB:80:A8:E7:A3:B8:80:DC:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76D51A03D1CA9776BB66B9DB80A8E7A3B880DC85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhvN7gU7mbren61pUESR2LwShvREa6e552MnQAaj2WX8/0/323830343a376539303a3a2f33322d3332203d3e20323731363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:e7:3d:2a:93:cd:9f:4e:fb:d3:43:f0:a9:9e:68:4f:94:
         01:48:01:5c:e4:60:34:a7:42:e5:f1:22:dc:2b:ce:55:6f:fb:
         47:c9:14:0d:19:3d:b3:cf:5e:60:6c:0d:83:a6:fa:f7:3b:c2:
         bb:0f:a5:a6:26:aa:77:6e:f9:05:af:d1:6a:5a:48:c9:ee:29:
         d0:12:fa:7b:ea:c8:8e:49:ef:bf:e1:bb:ef:d2:00:88:31:fa:
         43:10:cc:a7:13:87:f0:b0:64:a3:78:0f:06:fa:71:29:b7:0c:
         93:9f:7e:ea:70:3c:65:ce:4d:24:40:2d:26:49:03:83:06:30:
         94:d1:35:8e:b3:78:c5:79:6d:cc:62:ed:86:36:90:3f:4b:2c:
         56:e8:cd:9b:39:3b:71:ba:1b:b3:bd:5e:1a:64:6c:c1:36:5d:
         49:81:9a:bb:89:38:5d:62:dd:8a:f4:d9:18:30:91:84:4d:40:
         b5:e3:dd:bd:55:d8:5a:31:1e:af:bc:26:a0:26:dd:71:8c:d9:
         b8:0e:1a:24:24:bf:9a:ec:1b:2b:be:fd:dc:89:db:99:35:00:
         da:ef:7f:f8:31:52:fb:32:49:e1:c2:38:d2:a0:a0:91:e2:43:
         30:0e:23:bf:30:7a:b0:ee:a1:58:dd:83:f4:56:6b:2b:42:41:
         8c:9f:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:12 2026 by rpki-client