Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a3a2f33322d3438203d3e20323633363132.roa
File:                     323830343a6666633a3a2f33322d3438203d3e20323633363132.roa (raw, json)
Hash identifier:          /vazxhs35Lkow8n7Fp6Z0fjo+afZJh8ax9wTJDyCrR4=
Subject key identifier:   D2:22:13:5A:75:25:91:D3:71:45:3C:3E:68:ED:FC:76:6E:8B:22:94
Certificate issuer:       /CN=D6271D09DE85368B946562BB6E3D94BBBA8A9ED7
Certificate serial:       750F93C7A23DF9723AEA2DB5458B93A8CAC55AE9
Authority key identifier: D6:27:1D:09:DE:85:36:8B:94:65:62:BB:6E:3D:94:BB:BA:8A:9E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a3a2f33322d3438203d3e20323633363132.roa
Signing time:             Sun 12 Jul 2026 17:48:26 +0000
ROA not before:           Sun 12 Jul 2026 17:43:26 +0000
ROA not after:            Sun 11 Jul 2027 17:48:26 +0000
asID:                     263612
IP address blocks:        2804:ffc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 02:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:93:c7:a2:3d:f9:72:3a:ea:2d:b5:45:8b:93:a8:ca:c5:5a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6271D09DE85368B946562BB6E3D94BBBA8A9ED7
        Validity
            Not Before: Jul 12 17:43:26 2026 GMT
            Not After : Jul 11 17:48:26 2027 GMT
        Subject: CN=D222135A752591D371453C3E68EDFC766E8B2294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:ae:2c:3e:24:f6:34:04:34:06:fa:61:c6:
                    37:8c:de:b6:7d:b1:41:c3:42:2f:be:06:d1:99:26:
                    bd:46:95:9f:ba:6c:d9:9f:8d:c1:d6:1e:3a:d6:51:
                    52:ae:26:b9:7d:00:f1:3f:5a:a3:7c:60:04:d7:4e:
                    3b:79:f0:30:fd:8f:04:8a:ab:06:9b:09:94:07:e8:
                    f5:f3:2b:57:fd:79:f6:b2:d4:fb:bb:2f:0f:52:71:
                    2b:ee:3c:6a:c0:84:b6:29:72:94:c6:42:8b:ce:62:
                    fa:0d:a0:5d:62:d4:ad:cf:b8:80:43:34:7e:dc:b8:
                    72:a7:f9:88:34:f9:85:15:c4:4a:e7:99:0d:ba:f9:
                    1f:62:f9:7c:83:b0:70:73:04:1e:a0:89:1e:7d:92:
                    79:e8:2b:e0:1d:80:a2:95:d6:c2:27:2f:8f:03:af:
                    17:04:ce:35:0c:fb:59:04:0a:d2:ef:7f:37:b0:fa:
                    e6:62:05:5b:ed:7f:b4:0e:90:bd:0e:33:66:fc:00:
                    54:d0:9e:c2:99:b3:7a:35:f8:4e:db:f1:c3:84:dc:
                    30:0f:63:29:39:e6:6a:5c:f0:22:d6:78:ac:38:17:
                    b7:3d:e2:a6:9d:c4:69:be:d9:8d:7b:99:0b:1e:8a:
                    d7:78:0b:de:3c:86:05:c2:0c:91:f6:ca:68:98:31:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:13:5A:75:25:91:D3:71:45:3C:3E:68:ED:FC:76:6E:8B:22:94
            X509v3 Authority Key Identifier:
                keyid:D6:27:1D:09:DE:85:36:8B:94:65:62:BB:6E:3D:94:BB:BA:8A:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a3a2f33322d3438203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:eb:23:26:0b:de:47:21:c1:ac:24:4d:8f:ad:08:78:f9:
         cc:8d:45:ab:b8:33:c9:f2:44:9f:ce:62:2f:24:75:af:50:d6:
         56:ca:22:2c:9c:8c:54:bc:61:67:e6:f2:66:22:20:45:4d:69:
         2f:a8:a3:6c:a3:59:4a:c6:be:bd:78:31:7f:b7:e6:9a:f1:a9:
         3b:5f:53:89:30:0f:db:a8:c1:5c:1f:c0:63:5b:ff:cd:74:4c:
         e7:26:9c:d0:ce:77:5f:f4:dd:6b:25:5e:61:fe:06:fd:c2:16:
         a7:b4:9b:e6:38:91:23:ad:c0:65:0b:e5:ae:d4:df:71:0d:41:
         ff:33:f0:0b:84:53:cb:70:22:78:87:eb:7d:37:55:70:3c:13:
         8b:77:e8:02:28:8e:e2:62:6c:9e:65:33:ee:89:93:38:d4:66:
         90:af:4f:da:9c:33:fa:25:44:95:5f:a0:f6:11:4e:c4:59:7a:
         7d:3b:d1:66:31:93:9e:8d:80:00:62:42:24:ee:e4:88:68:9b:
         82:95:8c:29:67:1a:7d:b3:58:a8:b3:c8:00:af:4a:54:83:55:
         8b:09:d5:2e:be:ad:32:77:a5:71:65:7c:29:65:be:3f:d6:d9:
         d5:af:19:f0:d0:cb:2e:8b:0f:53:d8:21:15:bc:fd:4e:4a:a6:
         89:27:c7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:41 2026 by rpki-client