Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/323830343a313361633a3a2f33322d3438203d3e20323633353435.roa
File:                     323830343a313361633a3a2f33322d3438203d3e20323633353435.roa (raw, json)
Hash identifier:          Lqq4nkTVBDa10H17mUzDFpIZoCb2qH6GSYnORFlJxwI=
Subject key identifier:   94:34:83:DC:48:03:CA:47:9F:0E:A8:36:4A:41:31:71:F9:00:8C:FC
Certificate issuer:       /CN=4925A6A5F6F025CCF9ABCF435D23A798F5EA564C
Certificate serial:       631F3A62E97CADDB49914BE1A506CEC1056993D0
Authority key identifier: 49:25:A6:A5:F6:F0:25:CC:F9:AB:CF:43:5D:23:A7:98:F5:EA:56:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/323830343a313361633a3a2f33322d3438203d3e20323633353435.roa
Signing time:             Tue 14 Jul 2026 20:30:15 +0000
ROA not before:           Tue 14 Jul 2026 20:25:15 +0000
ROA not after:            Tue 13 Jul 2027 20:30:15 +0000
asID:                     263545
IP address blocks:        2804:13ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.crl
                          rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1f:3a:62:e9:7c:ad:db:49:91:4b:e1:a5:06:ce:c1:05:69:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4925A6A5F6F025CCF9ABCF435D23A798F5EA564C
        Validity
            Not Before: Jul 14 20:25:15 2026 GMT
            Not After : Jul 13 20:30:15 2027 GMT
        Subject: CN=943483DC4803CA479F0EA8364A413171F9008CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:ca:f3:f5:a4:63:b7:28:40:fb:a2:59:f9:
                    f4:66:97:b7:e3:ea:00:cf:44:f2:7a:7f:b1:4b:de:
                    ae:15:0d:63:ed:6b:e6:17:54:0f:49:0d:ce:87:84:
                    58:60:4b:b0:cc:8d:cf:5d:21:54:0b:4e:6e:29:37:
                    9d:f5:9a:08:ec:28:2d:0b:02:2e:37:31:42:12:54:
                    1e:ea:32:b9:1a:5f:8a:1a:d5:68:a0:87:b5:01:9d:
                    dd:1d:4c:d4:66:87:75:f1:84:e0:da:f0:be:ae:73:
                    8c:b9:05:74:70:1d:be:64:67:a3:2d:b7:aa:53:27:
                    de:1b:03:7a:aa:c7:b3:10:92:6b:43:7e:bc:bd:d7:
                    ae:6c:b1:f9:b1:57:0a:ee:8f:78:d6:d3:b1:77:38:
                    e4:01:85:92:4f:9e:8e:ae:c3:4e:53:56:f0:00:d4:
                    2f:76:59:d5:21:9a:2c:d4:14:82:29:df:fd:1f:7a:
                    5c:44:92:06:60:6c:01:22:10:f1:83:f2:a0:70:b1:
                    75:e5:f7:53:06:16:78:d2:7e:0f:31:62:6b:cf:2d:
                    36:3d:e9:b4:f6:54:6b:98:93:33:b1:fa:09:3b:10:
                    8d:ab:0b:d2:7c:79:8e:4d:7e:e4:db:a3:8e:fa:4a:
                    a9:02:aa:3b:7b:44:30:21:f0:46:84:87:07:ff:97:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:34:83:DC:48:03:CA:47:9F:0E:A8:36:4A:41:31:71:F9:00:8C:FC
            X509v3 Authority Key Identifier:
                keyid:49:25:A6:A5:F6:F0:25:CC:F9:AB:CF:43:5D:23:A7:98:F5:EA:56:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4925A6A5F6F025CCF9ABCF435D23A798F5EA564C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6CFxpXb4tPjYrGBAXDRqYrxAoscoZLf8ih9mUxGFWct/0/323830343a313361633a3a2f33322d3438203d3e20323633353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:e8:ea:8d:0b:c4:1f:62:19:be:a1:2e:a0:57:f7:9a:03:
         22:47:88:ed:6e:33:80:a9:38:3e:fe:3c:92:08:5c:1a:70:90:
         db:98:de:71:6d:09:5b:34:f2:bd:fe:0b:f5:00:73:9e:90:27:
         ee:a0:f7:13:63:8c:53:73:6d:ef:0f:80:fa:43:81:a1:0c:ac:
         1b:0c:74:2a:8a:1f:c9:cb:2d:5c:97:2e:2a:ad:5e:9c:ab:2f:
         23:0e:fb:57:00:67:7d:65:6e:5f:6a:1a:10:dd:e2:78:cd:0e:
         e4:17:c6:c8:6e:38:92:bc:9f:57:80:2e:08:93:a6:3c:a8:ae:
         21:36:bc:0c:67:b0:96:22:dc:e7:6a:35:3a:60:8e:0b:33:31:
         d7:8b:bd:9f:ed:33:5e:5d:49:a8:52:d2:13:9d:ac:93:c3:c2:
         fe:d9:b7:b4:76:b2:cd:5b:cc:6f:46:39:fd:16:d5:5a:04:b6:
         ab:0a:6f:5d:a6:6b:97:78:0e:2a:44:76:60:66:c5:15:e9:7a:
         4a:09:31:64:ea:7b:f6:e8:6b:7f:37:ce:fa:45:dd:31:9f:41:
         7b:6a:29:2a:1d:1e:bf:57:11:42:b8:28:c1:4d:d8:63:69:51:
         e0:ca:c9:de:0a:2f:7d:86:3c:2d:be:0a:67:76:95:f4:d5:76:
         a4:26:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:35 2026 by rpki-client