Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3332203d3e20323734343936.roa
File:                     323830343a393531303a3a2f33322d3332203d3e20323734343936.roa (raw, json)
Hash identifier:          1HrlP/IV7DUvEx23CDr/ZSR8OEXY7rOIZmo17QKOHgo=
Subject key identifier:   FF:84:B5:FB:B7:E7:3C:F7:26:26:6D:D8:2C:19:07:42:56:1A:4D:8E
Certificate issuer:       /CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
Certificate serial:       1B2C8FC9FF0BC61A3809075B6B7AA37590DC3235
Authority key identifier: 90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3332203d3e20323734343936.roa
Signing time:             Tue 30 Jun 2026 18:24:50 +0000
ROA not before:           Tue 30 Jun 2026 18:19:50 +0000
ROA not after:            Tue 29 Jun 2027 18:24:50 +0000
asID:                     274496
IP address blocks:        2804:9510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl
                          rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2c:8f:c9:ff:0b:c6:1a:38:09:07:5b:6b:7a:a3:75:90:dc:32:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909C3BC7730E7442AD1CECA961D8613A425EBA1F
        Validity
            Not Before: Jun 30 18:19:50 2026 GMT
            Not After : Jun 29 18:24:50 2027 GMT
        Subject: CN=FF84B5FBB7E73CF726266DD82C190742561A4D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4c:06:86:f3:91:84:d2:32:07:68:7d:0c:b1:
                    f8:6b:97:8f:60:89:bd:09:40:97:eb:21:02:65:9f:
                    b8:c3:d4:71:8b:1e:82:3d:0d:cb:65:4d:cd:cc:1c:
                    b6:f3:84:93:b6:8b:61:e8:45:07:80:03:4c:b2:bf:
                    b2:61:88:82:84:03:c0:80:f9:52:4e:ef:92:2d:ed:
                    93:4c:6e:28:d2:5d:3e:32:07:6d:96:60:51:1d:44:
                    c1:2a:9a:8e:d8:eb:16:8f:d8:28:51:da:c2:7a:2b:
                    6f:d3:bc:74:8e:90:da:75:be:c0:77:2c:8c:92:2d:
                    9e:6a:bc:eb:52:38:80:c9:9c:ff:e0:29:dd:56:72:
                    ad:19:22:4c:92:94:10:a3:50:aa:06:6c:81:f9:7f:
                    d1:a3:0e:c1:eb:7a:2c:6b:0e:66:28:e0:1d:3e:a5:
                    1b:2a:ab:42:e0:85:13:d5:37:8e:cb:94:e6:81:5a:
                    31:6a:af:34:83:ea:12:65:1f:17:4f:42:37:2e:79:
                    f8:55:36:b8:cc:00:78:5d:85:dc:90:de:7e:7a:11:
                    0f:06:fa:c4:20:05:e5:42:35:05:fe:ce:07:6f:34:
                    64:a6:e8:48:d1:de:48:27:c6:6d:69:db:02:c8:ab:
                    35:86:e6:c2:e1:2d:fa:c3:bd:15:1e:ef:0a:db:ab:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:B5:FB:B7:E7:3C:F7:26:26:6D:D8:2C:19:07:42:56:1A:4D:8E
            X509v3 Authority Key Identifier:
                keyid:90:9C:3B:C7:73:0E:74:42:AD:1C:EC:A9:61:D8:61:3A:42:5E:BA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/909C3BC7730E7442AD1CECA961D8613A425EBA1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909C3BC7730E7442AD1CECA961D8613A425EBA1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUKmo2KA5E7FMZ1jGfXHoARHS8K1FnRBiQQ4j9PJtuzy/0/323830343a393531303a3a2f33322d3332203d3e20323734343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9510::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:77:32:1d:4d:92:c4:12:6d:bb:7f:73:e6:5e:17:b3:a3:0a:
         73:66:57:e8:fc:a1:9e:63:56:d6:b3:88:ee:21:2c:94:92:86:
         4c:78:d1:3f:13:f9:7f:f5:dd:38:0c:08:31:e6:7d:7f:e5:1b:
         2b:53:b4:9b:43:11:e2:9a:fa:01:ec:b7:b4:f5:44:e6:fd:fe:
         1a:52:24:68:fe:b6:ba:39:e9:0f:ba:88:39:9e:48:8f:29:25:
         1a:5e:7a:e3:e2:0c:61:05:4e:77:03:6d:7f:e8:9e:b3:0e:42:
         16:4f:7e:a4:10:67:8e:c0:78:d2:71:2d:bf:81:8c:42:15:8c:
         ee:0f:cc:0a:07:49:c1:b1:d2:92:27:df:67:16:03:66:6a:de:
         42:99:b4:06:da:d4:18:a8:33:7c:51:13:80:fc:bc:ad:4b:33:
         28:92:e4:32:88:ed:cf:f6:b6:19:32:e0:49:00:09:96:8f:82:
         52:39:54:fa:10:d6:11:b1:57:b6:1d:44:30:ab:c6:88:3e:70:
         49:ac:2c:bb:e1:b2:e0:ab:44:61:60:4c:62:85:21:42:cc:4b:
         ee:fa:90:b6:f1:ad:e0:22:0b:9f:b6:f1:38:98:1e:5b:56:33:
         c8:24:69:eb:80:7c:61:df:b1:50:89:31:d0:9a:2d:c9:f9:59:
         a4:b3:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:41 2026 by rpki-client