Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
File:                     323830343a373033303a3a2f33332d3333203d3e20323730373131.roa (raw, json)
Hash identifier:          5rlo3WAu2cYX3exrkXCt26jDk6Qjdi9tSKBPaYxLnW8=
Subject key identifier:   BE:88:CE:C1:28:04:39:5A:71:D2:90:0C:EC:71:C3:5B:CC:46:E3:E7
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       41DC9C4ED4C214C14C0B1280706C1C1BA3B185CB
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa
Signing time:             Thu 02 Jul 2026 15:40:22 +0000
ROA not before:           Thu 02 Jul 2026 15:35:22 +0000
ROA not after:            Thu 01 Jul 2027 15:40:22 +0000
asID:                     270711
IP address blocks:        2804:7030::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:9c:4e:d4:c2:14:c1:4c:0b:12:80:70:6c:1c:1b:a3:b1:85:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul  2 15:35:22 2026 GMT
            Not After : Jul  1 15:40:22 2027 GMT
        Subject: CN=BE88CEC12804395A71D2900CEC71C35BCC46E3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:f8:de:40:99:3e:85:b5:9f:c4:11:9f:2b:
                    f8:e9:17:ee:02:1c:26:b9:dd:eb:48:c0:2a:f1:3d:
                    e0:fb:12:6b:79:57:e4:33:c7:c6:e8:81:27:01:19:
                    a7:ff:cc:1c:9b:16:e8:d0:99:71:ae:64:bf:dd:ed:
                    83:bb:e9:d9:22:3d:77:7b:6e:ee:60:a6:e2:56:68:
                    03:0f:2c:d1:f7:28:8a:e2:b4:cf:30:51:e1:92:c4:
                    31:ec:21:db:14:42:d3:ae:38:48:16:34:5b:01:5b:
                    f3:fc:49:50:e3:e1:ca:d2:cc:a3:84:b2:c1:6a:af:
                    7d:6d:0c:0f:08:9e:0f:a8:39:be:f9:f1:3a:d4:55:
                    65:14:4e:ad:a5:ac:ae:42:b2:97:7b:f4:a2:75:d6:
                    60:ee:d6:a8:90:e0:67:d0:e3:bf:c9:6a:c0:be:61:
                    9d:ec:43:f7:70:42:3a:c0:07:cc:8c:d8:33:3b:75:
                    75:03:4e:96:66:24:f2:84:dc:73:5f:4d:a0:18:dd:
                    78:21:14:bf:31:80:d0:91:28:ea:f0:92:bf:3e:40:
                    6d:1e:14:05:6f:7c:d4:69:61:29:01:ae:c3:b9:bf:
                    70:3f:39:f8:af:09:69:8d:18:94:ee:b6:24:c6:00:
                    1b:f9:7e:ee:7a:38:bf:cb:c6:3c:ca:1b:7e:0d:05:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:CE:C1:28:04:39:5A:71:D2:90:0C:EC:71:C3:5B:CC:46:E3:E7
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a3a2f33332d3333203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030::/33

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:7c:d4:50:1f:8d:30:37:39:e9:45:0b:83:6c:92:61:5f:
         88:bc:74:e5:88:c7:f8:90:c7:39:ad:0c:46:04:99:88:07:6d:
         55:29:2d:d7:19:54:fb:6f:37:60:bb:fd:3a:26:ed:72:fc:55:
         42:6a:f7:57:3e:93:aa:5f:0b:47:c3:64:af:50:5f:d3:f8:db:
         c7:d4:07:1e:ef:d7:8a:8d:83:a4:67:3c:95:2c:d1:e6:fe:f3:
         50:16:dc:f2:50:c4:4c:db:df:44:16:ae:ee:7c:19:65:66:ed:
         e7:32:02:51:7c:7c:06:70:a3:6a:e9:30:a7:32:21:2e:e0:77:
         33:1c:f3:15:98:5a:5d:e6:c9:43:b1:2c:b1:ea:91:ab:9a:42:
         71:79:45:ab:06:ab:eb:97:e6:f1:ec:bd:9a:7e:fb:8f:f4:c1:
         5f:0f:dc:43:df:50:c4:af:5d:87:b3:40:35:8e:0c:16:5a:cb:
         a1:85:8e:73:17:17:84:bc:9c:0b:c8:5d:5b:47:98:da:0e:92:
         73:7d:44:65:d4:d1:ae:b3:29:b6:73:a9:d4:bf:2b:18:eb:0d:
         86:07:20:a9:67:12:56:bb:11:58:a7:56:69:ed:1d:5a:6f:24:
         1a:03:83:6e:4e:19:19:27:8d:ab:06:c2:1f:66:b9:b6:16:f7:
         3c:df:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:56:17 2026 by rpki-client