Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          oxgyRJtTp+q65fBhuJxOlqJYagieZ7U9vbtXaGfzjQM=
Subject key identifier:   F9:DE:0A:41:4E:54:E2:42:DE:90:AC:42:9A:60:90:F8:72:4A:0C:2D
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       575C7F134B3CF11AA913039EEB8849DC30F9E94E
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Mon 29 Jun 2026 21:22:38 +0000
ROA not before:           Mon 29 Jun 2026 21:17:38 +0000
ROA not after:            Mon 28 Jun 2027 21:22:38 +0000
asID:                     271358
IP address blocks:        2804:7a40:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:7f:13:4b:3c:f1:1a:a9:13:03:9e:eb:88:49:dc:30:f9:e9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jun 29 21:17:38 2026 GMT
            Not After : Jun 28 21:22:38 2027 GMT
        Subject: CN=F9DE0A414E54E242DE90AC429A6090F8724A0C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:6e:55:f4:1b:0b:e6:36:d4:90:7f:bf:2a:
                    e2:c3:91:be:c6:b5:00:fb:a0:45:c1:d6:b2:de:c3:
                    2e:17:a4:ba:f4:4d:ea:cb:59:67:63:1b:08:de:5c:
                    c3:e9:87:5f:d6:4a:f2:6f:ca:55:0a:34:f2:b9:87:
                    87:db:c0:78:5d:10:42:08:24:a3:46:71:8e:c4:64:
                    86:a4:01:d4:ab:32:0a:c3:c4:ef:d9:b2:8e:99:8b:
                    6e:9b:df:b0:d8:b1:41:e4:15:78:47:09:77:2e:7d:
                    a4:31:7f:fd:4c:83:a8:12:72:78:26:b8:8c:0e:d2:
                    67:79:cd:5b:85:5e:86:d6:83:37:e9:52:f6:dc:59:
                    39:ee:8c:64:10:91:6e:88:1f:82:79:e8:b6:30:88:
                    b7:09:07:3c:49:78:0a:db:87:ce:32:a9:81:41:e5:
                    d5:48:5b:fc:c6:7f:63:a3:23:63:a5:42:4b:a6:3c:
                    cc:16:d9:8e:1a:c0:ae:5e:b7:5d:5e:7e:ec:d2:4c:
                    b4:89:43:d5:37:ef:e0:a1:b8:60:39:a5:9d:4e:2d:
                    7c:fd:d3:29:29:a4:0a:77:e9:1d:94:f5:e4:8c:6e:
                    7c:81:4e:51:0d:03:82:e1:27:26:60:40:d9:ab:60:
                    40:ca:d8:61:69:48:4c:74:bb:e6:33:98:30:ed:25:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:0A:41:4E:54:E2:42:DE:90:AC:42:9A:60:90:F8:72:4A:0C:2D
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:3e:ee:12:4b:ba:7f:8a:ea:81:49:6b:f6:5b:ba:c4:2b:fc:
         8f:1c:dd:2e:6a:ef:e7:c3:8e:68:5c:d1:f7:e3:ba:c4:3b:f4:
         d2:de:7e:5e:8b:07:ce:cb:10:2f:47:5b:fe:64:3d:b9:d9:49:
         19:9c:ce:50:25:d3:78:67:a8:67:13:e7:92:40:f0:1b:da:97:
         c0:42:8e:e1:ab:96:cd:50:21:3d:cc:ad:a7:b5:41:47:0c:1d:
         39:5b:21:39:4a:8d:4b:7f:1c:22:be:ac:96:b2:c0:fa:c3:43:
         c5:d9:42:d4:f9:40:4a:06:63:b9:c1:60:b2:13:a7:f4:92:74:
         6e:79:88:19:24:cb:9b:05:07:f5:3a:f4:6d:24:67:1a:a4:1a:
         b7:39:eb:50:be:ea:98:90:00:73:6b:dc:4e:7a:13:a5:09:09:
         b8:3b:dd:12:fe:0f:c3:b9:ee:49:64:c5:2c:96:5a:8a:49:89:
         eb:a4:29:9d:fa:d3:16:cc:3c:16:d9:2f:48:32:0c:68:6f:ab:
         bb:8c:b7:55:a8:8f:34:bd:5e:ae:51:6d:b9:c1:dd:5a:cc:a7:
         bd:c6:80:3c:4b:40:68:4b:1f:ed:55:24:73:3d:4a:7a:c1:76:
         b8:db:0f:42:ed:3d:98:83:80:7d:4b:93:05:83:4a:ae:44:08:
         ae:de:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:44:25 2026 by rpki-client