Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa
File:                     323830343a3636343a3a2f33322d3438203d3e20323632353832.roa (raw, json)
Hash identifier:          x81zrokFm/7wi7/ak1tya5Xr5PNuvz6jPrlVfbrc/TI=
Subject key identifier:   24:FB:7E:90:20:BC:EA:42:AE:5E:BA:04:15:83:74:6D:7C:F9:19:A0
Certificate issuer:       /CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
Certificate serial:       6C3AFA384CDCA94FA08B3C25B0AABE08E45B2C4A
Authority key identifier: 10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa
Signing time:             Fri 03 Jul 2026 12:04:45 +0000
ROA not before:           Fri 03 Jul 2026 11:59:45 +0000
ROA not after:            Fri 02 Jul 2027 12:04:45 +0000
asID:                     262582
IP address blocks:        2804:664::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl
                          rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3a:fa:38:4c:dc:a9:4f:a0:8b:3c:25:b0:aa:be:08:e4:5b:2c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F89465878BF8E210D035F4B8267A8BF1E2F68B
        Validity
            Not Before: Jul  3 11:59:45 2026 GMT
            Not After : Jul  2 12:04:45 2027 GMT
        Subject: CN=24FB7E9020BCEA42AE5EBA041583746D7CF919A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:e8:18:c3:4d:61:f6:f5:bf:8f:c2:18:04:
                    5f:bd:a2:46:d3:45:f3:1b:90:c4:09:a1:91:8c:61:
                    de:85:37:f4:9a:3d:66:4c:59:88:40:7c:dc:50:c9:
                    1c:aa:a3:a2:e4:79:f9:2e:18:33:b8:d9:a6:54:f5:
                    36:d0:8c:33:bf:a5:a2:95:61:41:05:99:4f:e3:30:
                    c4:03:ef:ff:a4:d7:05:ee:62:d7:69:41:84:97:65:
                    48:f4:b2:ef:e2:3c:9a:e1:d5:85:b4:57:bc:d2:7e:
                    ed:cc:9f:c1:b2:30:e0:79:6a:b0:a4:ea:59:a5:b2:
                    93:9a:81:48:17:6c:77:62:ae:77:b7:a6:d6:dc:a8:
                    36:d8:58:3b:08:49:ee:4f:1e:ed:50:05:f8:a5:7b:
                    04:af:f9:2a:f2:3c:3b:b2:d6:e1:ca:ed:16:fd:e6:
                    83:6e:10:bf:f1:e9:1d:3c:ad:e2:3f:6f:24:99:4f:
                    77:48:bf:16:5f:05:52:9a:dc:5e:63:18:38:d9:29:
                    71:13:54:37:3a:2e:41:89:5b:6d:1c:8a:0d:8f:2f:
                    22:04:77:95:73:0c:2a:8f:0d:f7:7e:b8:f9:d6:da:
                    de:b0:a9:a4:63:19:25:2a:c7:12:ae:c2:29:f9:89:
                    b2:75:8d:aa:23:31:16:aa:d7:a0:33:eb:a9:67:6a:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:7E:90:20:BC:EA:42:AE:5E:BA:04:15:83:74:6D:7C:F9:19:A0
            X509v3 Authority Key Identifier:
                keyid:10:F8:94:65:87:8B:F8:E2:10:D0:35:F4:B8:26:7A:8B:F1:E2:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/10F89465878BF8E210D035F4B8267A8BF1E2F68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10F89465878BF8E210D035F4B8267A8BF1E2F68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/323830343a3636343a3a2f33322d3438203d3e20323632353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:664::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:10:db:29:63:6c:3a:f8:b2:fa:6a:c1:b4:38:a1:ca:c7:4f:
         24:b4:69:57:90:4c:4a:9f:5c:3f:3e:25:49:4d:4f:65:37:b1:
         de:42:f8:52:99:62:5b:28:9d:1d:46:86:86:7d:cc:9e:19:ea:
         80:30:1b:6d:10:8e:1b:e1:3a:58:d3:a2:df:5a:37:9d:18:db:
         e4:4e:d2:fc:ac:87:82:27:fe:bb:25:29:a9:33:1a:7e:ed:2f:
         52:df:54:ef:2c:c4:35:f2:9d:2a:9a:df:1b:1a:10:7a:61:38:
         2d:ea:4b:e9:77:f7:2b:be:81:fd:1d:7c:70:29:c1:9d:28:ec:
         32:8d:b1:3c:e4:50:46:f3:80:68:a1:a9:44:d3:de:cb:8b:ad:
         11:f5:ba:d7:51:32:74:f9:f4:8a:94:e9:31:54:c8:4d:00:a1:
         78:9a:15:9b:69:6a:ac:4d:e6:03:35:be:bd:8f:fd:54:90:3d:
         04:d8:42:08:ea:f9:3a:3b:6b:29:01:9a:99:f3:a1:a0:e4:d3:
         ed:08:e6:90:b0:2a:1d:1b:48:e9:8c:72:e5:50:aa:b9:51:6d:
         cf:33:d4:98:62:e1:88:10:db:38:77:88:da:70:65:3b:70:fe:
         23:d5:e6:67:48:71:09:bd:09:94:42:aa:66:b8:53:88:92:9d:
         ee:60:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:39:01 2026 by rpki-client