Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d313238203d3e20323632393532.roa
File:                     323830343a6536343a3a2f33322d313238203d3e20323632393532.roa (raw, json)
Hash identifier:          i+hxlkdiLN83UZ/0BFcqK8wNN9dgAQEwHiP4/pIJYlM=
Subject key identifier:   B3:48:F9:AA:CD:1B:79:48:8E:4A:AB:AF:84:E2:8D:0D:9D:E0:D9:D1
Certificate issuer:       /CN=4F91864780E3C640327E24B527D2248C0C5CAD25
Certificate serial:       6FA9B90A6F33F2295419C662BCB023F9D8BEFFD7
Authority key identifier: 4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d313238203d3e20323632393532.roa
Signing time:             Tue 14 Jul 2026 13:18:22 +0000
ROA not before:           Tue 14 Jul 2026 13:13:22 +0000
ROA not after:            Tue 13 Jul 2027 13:18:22 +0000
asID:                     262952
IP address blocks:        2804:e64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl
                          rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:b9:0a:6f:33:f2:29:54:19:c6:62:bc:b0:23:f9:d8:be:ff:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F91864780E3C640327E24B527D2248C0C5CAD25
        Validity
            Not Before: Jul 14 13:13:22 2026 GMT
            Not After : Jul 13 13:18:22 2027 GMT
        Subject: CN=B348F9AACD1B79488E4AABAF84E28D0D9DE0D9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:e1:69:a1:33:79:41:06:3c:80:a8:13:5e:
                    a8:02:02:05:fd:5a:9b:ae:b2:38:a9:e9:e5:e7:70:
                    b4:9a:ef:78:f0:d3:5a:fc:e7:dc:30:de:d2:82:b4:
                    59:db:4b:0a:a7:15:4a:0b:0b:cf:12:11:87:e8:a2:
                    e1:e8:a3:a9:35:01:cc:0f:8c:4a:6a:19:af:1e:a3:
                    7a:30:bb:6c:9b:22:a3:ea:d9:4a:fe:1e:6c:58:63:
                    8c:58:4c:06:fd:92:9b:5b:a0:0a:4b:fc:df:f0:3a:
                    88:3b:5b:51:d4:08:0e:43:c9:9a:45:79:64:0f:75:
                    0f:b3:62:7b:a4:a3:13:1e:21:84:3d:ad:13:82:ac:
                    7c:d9:cd:75:2b:38:89:76:52:8b:ee:aa:97:c0:cb:
                    46:4a:55:68:44:f6:d1:eb:2a:76:d0:28:91:25:6a:
                    85:76:b3:e2:ff:cc:57:e9:47:4f:3c:e9:67:93:ee:
                    44:97:51:f2:44:54:b2:2e:53:3a:25:5d:92:ee:bf:
                    7c:fa:e9:cb:62:07:65:3b:19:26:df:77:e6:85:ef:
                    94:f9:90:ef:ae:66:55:d0:17:c4:66:36:ff:e5:17:
                    18:70:22:c9:83:46:8b:9a:97:6f:5e:50:ae:8c:05:
                    a4:11:8c:b2:7e:97:0c:c5:4e:4d:27:ea:5f:ae:99:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:48:F9:AA:CD:1B:79:48:8E:4A:AB:AF:84:E2:8D:0D:9D:E0:D9:D1
            X509v3 Authority Key Identifier:
                keyid:4F:91:86:47:80:E3:C6:40:32:7E:24:B5:27:D2:24:8C:0C:5C:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/4F91864780E3C640327E24B527D2248C0C5CAD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F91864780E3C640327E24B527D2248C0C5CAD25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/323830343a6536343a3a2f33322d313238203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:97:92:0e:42:ab:85:3e:d3:43:e8:07:54:56:e5:77:4e:
         38:8b:98:c3:48:62:8a:bf:28:6c:07:f5:5d:b3:6a:8f:d8:ce:
         c7:62:38:34:2d:f4:1a:9b:80:a1:d5:aa:d5:e6:56:47:ef:2c:
         32:06:4f:58:e2:ce:17:c8:5f:cb:cf:7a:ec:7c:ea:0f:43:e0:
         bb:86:ed:8d:3b:4c:02:fe:15:6a:f5:e0:ee:87:ef:75:34:c6:
         d7:e2:b8:05:d3:38:29:b0:bf:04:bc:43:0f:87:af:02:0f:45:
         b5:71:9e:69:23:c5:c2:ee:25:85:d8:38:cb:a3:2e:7b:cf:8f:
         ab:2d:7c:a6:48:5b:2e:42:88:2b:f6:aa:16:b5:f3:b9:dd:f1:
         f2:45:54:a2:dc:27:b9:d2:e2:ed:73:8a:9e:61:53:2a:49:f2:
         91:97:ca:9f:b7:c3:00:17:fe:bc:2d:d7:41:a6:ab:b5:71:23:
         b1:fb:13:2d:0c:7b:03:de:cb:f1:8e:84:d9:da:7e:b3:61:9d:
         e0:68:3b:f7:cb:57:72:0b:80:85:75:73:de:bd:4c:f2:45:46:
         c3:70:c3:36:eb:c6:90:90:fd:6a:2a:28:a2:e6:28:1b:88:f6:
         14:1d:2c:f2:80:61:5f:51:7a:29:c4:ab:f4:e9:59:8f:ca:ae:
         3c:c5:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:30:52 2026 by rpki-client