Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
File:                     323830343a6239343a3a2f33322d3332203d3e203532373936.roa (raw, json)
Hash identifier:          HiL/n33UpwJwnnvKpofn+cqi3/exE0mqA0nynSK+RpU=
Subject key identifier:   FC:BE:6B:17:CF:DE:29:80:A7:49:E4:3E:31:4F:8E:F2:D1:83:38:E9
Certificate issuer:       /CN=653D1900116E7E41CE869340B5477E400370D802
Certificate serial:       23E86E9EB2E6CB13882E2B57B002635A6D1D94F5
Authority key identifier: 65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa
Signing time:             Mon 06 Jul 2026 20:00:00 +0000
ROA not before:           Mon 06 Jul 2026 19:55:00 +0000
ROA not after:            Mon 05 Jul 2027 20:00:00 +0000
asID:                     52796
IP address blocks:        2804:b94::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl
                          rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e8:6e:9e:b2:e6:cb:13:88:2e:2b:57:b0:02:63:5a:6d:1d:94:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653D1900116E7E41CE869340B5477E400370D802
        Validity
            Not Before: Jul  6 19:55:00 2026 GMT
            Not After : Jul  5 20:00:00 2027 GMT
        Subject: CN=FCBE6B17CFDE2980A749E43E314F8EF2D18338E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:46:b7:4a:04:91:1c:22:96:6f:b8:30:55:
                    a6:fd:6b:43:80:b0:c9:74:b0:fe:48:24:eb:b6:d6:
                    89:9c:52:8b:93:cb:cf:29:df:d6:66:fe:97:78:8f:
                    f4:11:ac:90:72:b6:1f:1f:a1:15:fc:3c:61:40:83:
                    00:ca:4c:0a:a7:40:a3:5f:70:2e:e2:80:41:f9:ee:
                    92:2e:ac:10:77:52:b3:6e:b4:e0:ac:32:17:7b:ef:
                    42:1b:6a:a5:16:f9:c9:6b:3b:68:cb:ab:56:97:88:
                    81:35:fa:76:a0:94:20:6c:65:0e:f6:b5:6b:8b:51:
                    c6:be:7d:be:ef:63:9d:1e:ce:d8:5c:3b:7d:4a:54:
                    50:07:5c:80:b1:fc:7c:36:02:6d:0d:21:26:04:3d:
                    77:1f:41:13:87:d1:57:ca:bc:69:4d:0e:41:6d:5f:
                    6e:52:34:d3:6e:f6:13:9b:b2:1d:85:86:91:8f:c4:
                    8c:f1:48:cc:1d:71:d1:80:41:fe:b6:b0:da:07:96:
                    00:28:a1:b2:2a:0e:0c:ce:d7:04:49:8d:67:d0:68:
                    60:b4:16:4e:a5:2f:48:7c:bb:95:2f:9d:b9:63:4e:
                    be:c5:98:a5:79:12:4f:a8:d6:34:a4:c0:88:c5:61:
                    8e:7d:24:89:cb:88:62:82:04:22:f5:ff:9c:b0:f4:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:6B:17:CF:DE:29:80:A7:49:E4:3E:31:4F:8E:F2:D1:83:38:E9
            X509v3 Authority Key Identifier:
                keyid:65:3D:19:00:11:6E:7E:41:CE:86:93:40:B5:47:7E:40:03:70:D8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/653D1900116E7E41CE869340B5477E400370D802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653D1900116E7E41CE869340B5477E400370D802.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DrodLpddnZT8oQBJY2oiKwbCJ29ePUkyE9QwQNS5fnMg/0/323830343a6239343a3a2f33322d3332203d3e203532373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:cd:a2:99:83:df:29:11:82:21:19:d2:5a:b8:0a:e4:ea:69:
         32:99:6d:8c:94:56:81:00:b5:b6:7b:62:b8:1e:1f:fd:13:c5:
         97:58:2b:c5:9b:62:91:b9:39:de:05:21:c0:60:59:f5:18:de:
         02:77:1e:8c:31:4e:22:ce:ee:d1:9c:e3:0c:2d:9f:cb:e8:f4:
         1a:9f:a8:ab:2f:7e:ee:3f:b1:51:3c:50:b6:ec:08:da:fc:3b:
         9a:6b:5d:40:30:29:05:6e:4e:67:25:51:9d:87:83:2c:f2:c5:
         64:95:a3:7d:29:d7:68:42:6e:4e:f0:52:c1:e2:2a:58:13:63:
         e8:61:e8:45:14:55:5e:0a:97:97:58:b9:54:be:c4:34:2a:5b:
         47:80:2c:5e:91:1a:d3:e4:dc:a0:4d:d6:7d:a9:b4:6f:37:88:
         e2:c3:a4:62:01:fa:71:96:4b:ea:fd:96:1e:9c:ab:ee:1a:8a:
         9c:6c:2f:6e:c0:1b:92:89:c7:7e:e1:48:37:8b:8b:b5:66:e9:
         00:e6:b7:62:15:e1:04:87:b9:09:20:67:22:d4:cd:94:dd:1a:
         f2:2c:63:93:c0:d8:1c:2f:9d:42:d8:1b:65:f1:02:e0:f2:ff:
         0f:b9:93:42:db:70:e2:fd:09:8d:8d:3f:f0:fb:19:0b:d0:74:
         cf:2f:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:48:37 2026 by rpki-client