Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa
File:                     323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa (raw, json)
Hash identifier:          4d0ZdzCnrcSd9vNuI0/EfuFC+Iefjc0Sc50RfjcL0DQ=
Subject key identifier:   46:46:8B:92:62:EE:44:E6:46:B5:57:D7:68:F1:CB:0A:04:C9:AA:E1
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       72766A1F92F2A607A2815ED58905841670DFE2D6
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa
Signing time:             Thu 02 Jul 2026 11:27:17 +0000
ROA not before:           Thu 02 Jul 2026 11:22:17 +0000
ROA not after:            Thu 01 Jul 2027 11:27:17 +0000
asID:                     61719
IP address blocks:        2804:1b50:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:76:6a:1f:92:f2:a6:07:a2:81:5e:d5:89:05:84:16:70:df:e2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Jul  2 11:22:17 2026 GMT
            Not After : Jul  1 11:27:17 2027 GMT
        Subject: CN=46468B9262EE44E646B557D768F1CB0A04C9AAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:35:0e:1a:17:d8:cb:3d:2f:06:bc:16:17:
                    b9:25:a6:d2:ba:4b:31:43:42:90:a5:45:13:5a:9d:
                    97:f1:d6:44:5a:b3:d7:80:a1:44:2e:0c:86:b9:6f:
                    9c:7a:1f:c5:37:95:5e:3e:af:5a:91:81:03:fb:09:
                    04:cd:a9:9e:9d:5d:e3:29:a7:1b:6e:f5:59:49:ee:
                    c9:a1:0c:2b:26:73:e4:e2:64:c9:49:67:f7:a7:64:
                    c1:ac:29:01:6f:60:31:b2:49:df:9c:8f:47:9e:37:
                    fd:8f:c2:c1:90:76:d8:a5:68:4b:96:98:a8:d8:a0:
                    3d:5d:f2:e7:8d:90:e4:a3:a3:8d:6e:61:99:ce:27:
                    f2:02:2b:82:4b:e6:82:64:7f:68:f4:a9:4c:d0:60:
                    7f:cf:4e:a5:b8:f2:03:65:b6:6b:b2:82:4c:b0:26:
                    8c:a9:66:1c:27:e5:b0:9c:a5:13:53:54:83:0c:da:
                    80:46:5e:73:2a:0d:bb:fc:ea:b9:cc:87:04:1f:d5:
                    29:29:94:2b:5a:12:fa:da:be:ef:02:10:5a:3f:f1:
                    83:44:6e:71:4f:cc:a7:42:e1:d1:11:86:18:49:aa:
                    72:59:9e:05:5f:a5:fa:f3:65:48:80:62:d4:be:f7:
                    12:b7:92:30:92:42:1d:43:34:9b:1c:8b:19:aa:93:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:8B:92:62:EE:44:E6:46:B5:57:D7:68:F1:CB:0A:04:C9:AA:E1
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a633030303a3a2f33342d3334203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:67:da:9b:e7:2c:5d:db:cb:91:d2:35:59:a1:02:0c:0a:b9:
         4a:53:3f:1d:45:51:6d:d8:d4:92:86:17:54:f5:f6:b0:be:f6:
         f3:4e:b4:6b:d7:49:3b:b6:51:2e:55:28:2f:2a:15:6b:41:b2:
         ce:c1:72:6c:2f:32:77:db:33:b2:8a:87:13:42:b1:9e:18:ed:
         8d:c8:4c:3a:71:f6:2e:e6:c2:cc:59:e1:bd:fc:60:2c:f7:0c:
         26:6c:bf:36:8b:93:53:7f:76:e5:87:1e:47:28:e6:26:ad:d9:
         2c:d2:77:cc:4c:e2:f9:74:dc:be:da:44:46:ab:fb:76:d8:59:
         10:10:12:97:0c:53:33:be:8c:97:99:a8:d1:bb:16:79:4c:37:
         88:2f:be:25:b4:46:1f:4e:d2:f0:50:14:90:c1:04:42:4e:c4:
         0d:da:58:83:f9:60:ff:04:03:c4:d2:b8:8a:5a:ac:d5:01:d6:
         94:a0:29:3e:be:88:5a:d6:e2:98:1e:46:8a:03:5d:47:92:a3:
         24:03:ea:25:8b:6e:c1:80:b0:59:0a:84:7f:de:0f:f8:ea:87:
         e0:4a:ba:8b:39:d9:74:01:be:98:14:8f:6e:ea:8e:95:9e:85:
         e9:f7:7a:fe:2f:a9:32:6e:f5:66:0c:d6:ab:b6:8c:21:9f:ff:
         d7:d3:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:11:10 2026 by rpki-client