Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa
File:                     323830343a316263343a3a2f33322d3438203d3e203631373438.roa (raw, json)
Hash identifier:          uDdZVmOV0TGcchWWAwqx9ftjr5FGqEnaREkneD3Fe74=
Subject key identifier:   60:85:F7:5D:A9:A0:23:17:2F:BD:AA:DA:81:C4:96:F3:E7:32:19:F8
Certificate issuer:       /CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
Certificate serial:       569293448D6932E0460B6384469DF30E72A13E27
Authority key identifier: A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa
Signing time:             Wed 15 Jul 2026 19:54:12 +0000
ROA not before:           Wed 15 Jul 2026 19:49:12 +0000
ROA not after:            Wed 14 Jul 2027 19:54:12 +0000
asID:                     61748
IP address blocks:        2804:1bc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:93:44:8d:69:32:e0:46:0b:63:84:46:9d:f3:0e:72:a1:3e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
        Validity
            Not Before: Jul 15 19:49:12 2026 GMT
            Not After : Jul 14 19:54:12 2027 GMT
        Subject: CN=6085F75DA9A023172FBDAADA81C496F3E73219F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:e4:f8:d6:22:ce:6b:5b:f3:f6:66:27:01:
                    38:16:8d:7d:fe:5a:7a:b5:3a:0c:b5:38:79:56:51:
                    6b:43:55:bf:fd:e2:27:d5:69:5c:21:d7:3e:6a:2e:
                    d4:73:41:da:bc:81:2d:88:1c:5c:12:7c:46:0c:b7:
                    98:f9:ff:f0:8f:e7:f6:ee:1c:19:9e:e0:5c:4f:c0:
                    71:97:47:a8:0c:e4:b0:81:b1:33:f8:42:0d:58:5e:
                    7e:2a:dd:c7:33:b1:3b:59:72:b3:ea:13:ba:01:83:
                    97:4c:85:51:87:66:4c:d2:7a:1f:94:48:48:e9:19:
                    eb:36:ff:e1:74:22:4b:53:43:f0:cc:a6:5f:c1:ac:
                    ac:b8:ff:91:0b:8f:34:31:6f:8c:93:da:05:06:4f:
                    83:c5:d7:43:ea:8f:83:da:f9:00:08:be:ff:a3:f4:
                    ab:44:78:53:9c:ef:1e:ec:31:f9:ec:13:9a:98:3a:
                    2d:63:ad:84:b5:3e:a7:ca:45:28:84:9d:65:e2:cc:
                    13:0f:de:6d:ab:2e:57:d3:9a:b1:b4:6d:04:db:7e:
                    5c:d5:12:e2:1b:5b:28:25:5e:58:fb:4c:d2:07:f4:
                    d6:a2:7f:fc:8e:07:d0:d9:80:b6:3d:ca:3f:9a:d1:
                    ea:33:23:61:38:8d:f7:c2:f6:b0:7a:82:83:4c:3a:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:F7:5D:A9:A0:23:17:2F:BD:AA:DA:81:C4:96:F3:E7:32:19:F8
            X509v3 Authority Key Identifier:
                keyid:A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33322d3438203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:ba:7c:ff:9b:ba:f9:a2:66:b3:03:e6:9b:4f:9f:01:d0:
         e5:1d:84:5c:ca:ac:d8:4e:8e:c8:98:f9:84:77:ab:48:38:4e:
         0d:11:19:af:4c:b5:93:62:25:ff:62:22:d1:aa:65:35:35:8f:
         3d:7f:bb:b2:8e:fa:fa:a6:96:ac:48:d5:ba:5e:b6:f6:69:9d:
         05:b6:2e:da:50:11:62:9f:c7:71:68:05:d7:cb:26:25:65:04:
         95:c2:72:59:49:22:1a:58:03:f9:21:59:8f:74:43:9f:67:3c:
         1c:a4:44:fe:60:46:69:58:93:9a:fa:fb:3a:9b:d4:f9:9b:6b:
         00:56:0a:e5:4e:02:cb:2e:ef:9d:a1:7c:bb:8f:51:df:8d:2e:
         0a:41:61:4b:b7:2c:1c:73:91:3c:7f:7d:98:56:bb:20:2a:28:
         01:9c:22:bc:c8:6e:15:c4:71:09:fc:ef:0c:a3:89:f8:d6:6e:
         90:17:89:e3:7e:fe:ac:59:2a:92:63:89:92:ef:fe:0a:96:30:
         9a:5a:29:16:bd:67:70:6e:fe:3b:81:d3:1e:31:d2:7b:f2:f5:
         8d:41:2b:09:47:6d:22:73:7f:b6:05:a5:70:9f:38:88:28:9f:
         98:cb:b2:89:71:82:38:a0:22:2b:a9:67:7f:92:82:b6:14:90:
         a9:1e:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:02 2026 by rpki-client