Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a383030303a3a2f33352d3335203d3e20323635333438.roa
File:                     323830343a326537633a383030303a3a2f33352d3335203d3e20323635333438.roa (raw, json)
Hash identifier:          eqLP0LtTYgXz/YSUTybRr4eDlWEkTJpPfUoA7pjGkN4=
Subject key identifier:   FB:E8:0D:AE:74:F7:59:D5:43:7E:74:D2:7C:09:9E:FE:57:87:C2:EE
Certificate issuer:       /CN=D43CE255EB79889CB9BA96FB45F508419539B2EC
Certificate serial:       780341F52D26CCC11DFA8810D4617B81D98AEFD5
Authority key identifier: D4:3C:E2:55:EB:79:88:9C:B9:BA:96:FB:45:F5:08:41:95:39:B2:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a383030303a3a2f33352d3335203d3e20323635333438.roa
Signing time:             Mon 20 Jul 2026 20:16:24 +0000
ROA not before:           Mon 20 Jul 2026 20:11:24 +0000
ROA not after:            Mon 19 Jul 2027 20:16:24 +0000
asID:                     265348
IP address blocks:        2804:2e7c:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.crl
                          rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:03:41:f5:2d:26:cc:c1:1d:fa:88:10:d4:61:7b:81:d9:8a:ef:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43CE255EB79889CB9BA96FB45F508419539B2EC
        Validity
            Not Before: Jul 20 20:11:24 2026 GMT
            Not After : Jul 19 20:16:24 2027 GMT
        Subject: CN=FBE80DAE74F759D5437E74D27C099EFE5787C2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:54:54:f0:7d:9b:f7:25:06:49:4a:da:9a:
                    d4:1e:56:cd:97:97:b9:58:7a:4e:ba:f3:05:49:75:
                    87:49:d0:05:bd:2c:32:9c:40:3d:e9:26:5c:d9:dc:
                    6c:c1:6b:e9:cb:5f:3a:51:99:f5:d1:62:b1:7d:2d:
                    3d:22:86:d9:54:c5:f0:f6:39:46:e0:f9:c5:5a:19:
                    45:0a:a5:79:d5:4b:f7:ec:66:05:98:ee:df:6b:89:
                    f8:0a:34:7f:30:ce:e9:82:37:0e:6e:0e:31:bd:9e:
                    5f:c6:05:16:8d:bb:bb:d6:d0:0a:ca:ce:5a:6b:c7:
                    12:e4:96:1f:41:30:44:77:54:37:db:91:6f:1d:5b:
                    0e:8e:67:11:22:21:ee:58:1b:7d:2f:38:80:ed:5d:
                    00:c4:99:f7:88:0e:3c:ca:81:a1:35:5e:b1:d2:a3:
                    ae:f5:98:62:d6:61:91:02:f9:5d:5e:4f:f4:69:4e:
                    c7:11:35:17:55:5b:df:41:c0:a8:86:c0:fe:f2:01:
                    49:99:5c:93:0a:69:de:3b:40:ab:97:09:05:ec:79:
                    1a:92:9f:dc:54:79:10:53:1c:ba:24:42:b3:30:27:
                    a5:ff:a9:bc:d9:b0:72:61:d3:98:79:d9:73:3a:83:
                    fc:2e:a2:9e:2e:fa:2c:74:fc:b3:b5:2f:fc:88:56:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E8:0D:AE:74:F7:59:D5:43:7E:74:D2:7C:09:9E:FE:57:87:C2:EE
            X509v3 Authority Key Identifier:
                keyid:D4:3C:E2:55:EB:79:88:9C:B9:BA:96:FB:45:F5:08:41:95:39:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/D43CE255EB79889CB9BA96FB45F508419539B2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D43CE255EB79889CB9BA96FB45F508419539B2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FphzTGC6KZ6gDNmmjCq7s2YimKUdYoebiVwqh1bScVnP/0/323830343a326537633a383030303a3a2f33352d3335203d3e20323635333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e7c:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:46:26:7e:8d:b9:87:71:60:e1:58:a9:28:54:a4:06:c4:
         ad:60:df:22:29:41:db:01:c3:d4:ac:51:7a:a0:84:52:87:bf:
         dc:1a:b2:f4:b5:f9:d4:a2:61:32:ee:b8:6b:cb:22:8a:70:e8:
         05:44:1f:a3:43:b5:d8:40:83:f5:3a:89:9e:dc:b4:cd:01:dc:
         7c:32:8f:e9:53:4f:77:56:74:25:c7:30:46:1b:8c:ee:ef:a7:
         80:f7:1c:ca:f1:7d:2e:46:90:05:79:56:7f:2c:5b:cf:79:48:
         90:04:c3:49:b5:98:47:a3:dd:1f:3c:e8:e9:b8:ad:9a:27:45:
         1c:7b:0f:6d:3c:a5:65:d5:be:4a:15:e2:0a:16:de:c8:0d:b8:
         11:43:c7:54:d4:21:23:86:a6:6e:b1:78:b2:2b:96:45:f8:57:
         c0:4c:e2:41:ab:4c:01:d1:41:3a:0c:53:5e:63:ed:72:e1:e4:
         7a:90:0d:50:15:89:ab:d3:ee:e4:31:da:8e:05:e0:0c:d1:03:
         0b:db:1c:11:a4:5e:14:55:e1:09:54:56:a4:93:60:60:0c:71:
         9e:05:f3:7a:15:d4:ed:44:68:83:98:14:cc:59:84:34:c8:be:
         56:53:1a:7a:32:64:0c:02:1c:20:c0:65:eb:06:8c:6f:ec:31:
         61:8c:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:02:39 2026 by rpki-client