Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
File:                     323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (raw, json)
Hash identifier:          t6zlJEATl+Y2/fnLl+LEKqzDjf/F9RfynAU/632sQOc=
Subject key identifier:   C6:2B:F7:CF:1B:01:E9:19:ED:26:D4:22:FC:6F:51:6B:BB:BD:B1:38
Certificate issuer:       /CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
Certificate serial:       40F5A27E978C6353B416BC7CA62BFF80666C0497
Authority key identifier: 2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa
Signing time:             Fri 10 Jul 2026 14:39:52 +0000
ROA not before:           Fri 10 Jul 2026 14:34:52 +0000
ROA not after:            Fri 09 Jul 2027 14:39:52 +0000
asID:                     263256
IP address blocks:        2804:17e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:a2:7e:97:8c:63:53:b4:16:bc:7c:a6:2b:ff:80:66:6c:04:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42
        Validity
            Not Before: Jul 10 14:34:52 2026 GMT
            Not After : Jul  9 14:39:52 2027 GMT
        Subject: CN=C62BF7CF1B01E919ED26D422FC6F516BBBBDB138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:7b:78:92:1a:b9:18:ce:fc:62:01:78:1a:
                    2c:82:5d:c2:80:2a:09:49:76:cc:d5:ac:e3:9f:70:
                    0b:24:94:8f:9d:ef:3c:09:fa:6b:37:d6:cd:36:75:
                    74:20:e6:cc:fa:95:83:f0:36:9d:84:f8:e1:2c:17:
                    f2:be:91:2a:f3:96:c4:5a:35:3b:0c:82:19:ea:d8:
                    c7:1c:7f:11:a2:1e:f1:72:65:e6:d7:ed:4c:6c:04:
                    71:d2:c5:f7:20:7e:73:33:7e:3e:35:fd:11:ae:bb:
                    33:64:88:14:63:8b:a6:38:28:fe:9f:2d:90:90:d0:
                    85:0e:70:25:d3:71:60:9e:27:b3:85:60:0b:38:06:
                    34:86:ea:b8:f5:35:38:2d:de:97:9b:2d:a1:08:30:
                    3c:67:38:8b:6a:05:7f:6c:60:db:d4:ac:5b:a7:76:
                    20:4e:2e:b1:a3:bf:bb:93:39:11:ab:2f:0f:69:80:
                    91:9d:3e:d6:f8:20:b7:e3:64:67:be:8e:ef:2d:56:
                    b6:f5:ac:e9:b9:7a:bb:21:b6:9e:0b:aa:a9:d2:2e:
                    9a:37:9f:73:e9:0f:52:98:c1:e6:40:6b:12:1a:99:
                    a8:57:5f:29:de:d9:32:a1:82:a7:b0:e7:07:1b:44:
                    3e:85:86:b7:e1:66:6c:06:45:b3:b7:8d:37:dd:fd:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:F7:CF:1B:01:E9:19:ED:26:D4:22:FC:6F:51:6B:BB:BD:B1:38
            X509v3 Authority Key Identifier:
                keyid:2A:56:80:38:CC:EE:BF:B8:EF:04:CB:47:D3:98:31:AC:6B:1F:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A568038CCEEBFB8EF04CB47D39831AC6B1F4E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33322d313238203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:ec:05:d3:cd:5f:80:1b:f4:e4:d4:64:d7:fa:ec:37:f5:
         35:3d:e4:a8:a0:b3:e7:15:2a:85:13:2d:93:75:b1:b8:94:ce:
         4d:13:8b:f1:34:c0:eb:69:dc:65:0f:35:bc:71:52:b1:1f:d4:
         e9:e0:cf:4a:18:3c:a2:6c:27:bb:73:ed:dc:0a:c5:6b:de:42:
         a8:64:aa:97:f2:25:49:de:9c:52:64:68:72:1a:29:b8:2e:26:
         f4:6a:cf:a0:37:bf:92:24:27:67:73:db:7a:be:59:99:e1:e3:
         5d:1d:b6:4e:f5:14:a4:9c:a3:84:fc:44:d1:dc:06:7d:55:c5:
         ee:db:8d:30:fa:4a:b7:58:3f:3f:6d:5b:19:56:2c:b1:39:b9:
         55:fe:99:94:00:59:92:bf:4b:29:16:cb:2e:63:58:cf:77:a2:
         30:a9:7e:1f:a4:52:8a:52:5d:83:de:6f:03:05:86:e3:8f:0b:
         fc:81:75:6f:28:15:96:a9:f1:b4:72:1e:39:c9:34:2d:36:e2:
         99:1f:8b:e0:ed:f5:b8:8c:0c:51:1e:f4:22:0c:9d:8b:10:aa:
         3c:51:36:05:ba:4b:9a:1c:0d:2a:83:69:3f:97:3d:be:12:14:
         6c:1b:37:73:f3:99:1f:89:a9:19:88:cd:ed:84:8d:bd:c6:25:
         5d:2a:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:36:49 2026 by rpki-client