Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a643030303a3a2f34382d3438203d3e20323633333439.roa
File:                     323830343a313463343a643030303a3a2f34382d3438203d3e20323633333439.roa (raw, json)
Hash identifier:          UPjSYbHbS5hkjc45kwVEQ68aomXsOeBKe3dQTnBPxy8=
Subject key identifier:   AF:41:46:5C:5F:CF:27:51:6A:A7:89:86:F0:56:3A:09:79:6C:2B:8D
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       374D6C68BA501407FEA54B5E30FB4756DDFAAACE
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a643030303a3a2f34382d3438203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:11:51 +0000
ROA not before:           Tue 14 Jul 2026 19:06:51 +0000
ROA not after:            Tue 13 Jul 2027 19:11:51 +0000
asID:                     263349
IP address blocks:        2804:14c4:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4d:6c:68:ba:50:14:07:fe:a5:4b:5e:30:fb:47:56:dd:fa:aa:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:06:51 2026 GMT
            Not After : Jul 13 19:11:51 2027 GMT
        Subject: CN=AF41465C5FCF27516AA78986F0563A09796C2B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:06:69:12:fe:8e:8b:98:8b:80:d7:8c:99:
                    38:cf:95:0b:c7:bb:1d:91:b4:5f:06:26:c2:e7:3b:
                    a3:c4:32:5e:70:c3:47:85:5f:d0:b0:13:6a:bb:3a:
                    36:09:18:e8:3e:c9:7f:4d:12:00:d7:39:34:ea:99:
                    42:1d:2a:e4:11:7d:61:a4:2e:97:8b:d7:85:6b:74:
                    08:2b:c5:e9:19:e0:e1:7b:a4:79:ff:9a:db:7a:35:
                    66:05:cb:f1:cd:91:1d:60:7a:eb:55:d0:78:b4:c5:
                    3b:f4:0b:d8:ef:2b:0d:12:a3:7a:eb:b7:6a:a6:39:
                    bb:a4:5b:bc:1d:b9:d6:5a:17:06:d8:f1:0c:cc:7c:
                    ca:25:37:e3:5b:22:e5:83:4d:77:8f:19:c8:b8:cc:
                    ac:c8:b2:5d:f7:52:b3:5d:75:b7:3c:ac:b6:21:2d:
                    9a:60:b5:99:61:e6:ef:f8:b9:e1:53:21:bb:1a:25:
                    57:63:0d:00:02:37:91:98:4a:16:0b:70:b7:9f:c5:
                    50:53:c3:68:47:9f:87:4a:81:9c:07:7c:6e:4a:d1:
                    b7:7d:cd:bc:b4:19:3c:dd:2f:23:a5:26:73:d2:90:
                    56:42:7b:94:55:d4:54:d0:37:4d:68:0c:71:80:41:
                    18:84:0f:2f:94:1c:78:3c:19:45:13:0f:f0:61:d1:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:46:5C:5F:CF:27:51:6A:A7:89:86:F0:56:3A:09:79:6C:2B:8D
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a643030303a3a2f34382d3438203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:2f:dd:23:2c:a0:2b:37:b7:6b:89:cf:23:1a:e2:cb:21:
         38:fe:44:4f:f9:53:4a:13:43:62:ee:5d:0f:ea:7c:6a:1e:5c:
         1e:9d:9a:19:83:ad:33:6a:61:a9:aa:ed:3f:b9:54:4f:26:d3:
         76:1e:b2:8c:83:25:aa:80:ae:0d:8e:8e:ad:00:38:48:35:10:
         62:2b:06:09:e9:ba:78:4d:6f:04:ca:1a:a9:ff:60:56:09:cc:
         50:5e:72:0f:2b:d6:61:0d:c8:5d:2c:15:f6:3d:bb:56:2d:5f:
         ff:2e:38:b6:00:0c:5e:0c:e1:75:de:d8:bf:c8:64:74:c1:cc:
         2c:d4:b7:4f:76:d3:e0:e5:16:e6:31:23:d2:7d:a1:39:65:d4:
         06:e9:a5:6e:34:d1:be:ca:ba:42:16:f2:3e:81:ea:f8:c8:b1:
         29:0a:e4:0d:0e:8b:d4:e6:94:a0:be:aa:64:b9:72:a9:53:d5:
         c8:13:5c:b7:6d:eb:e2:04:b5:80:01:a9:10:eb:4f:dd:b6:13:
         e2:0d:d3:f7:3a:ce:05:54:6f:43:b9:fb:47:fe:06:97:a0:88:
         ba:4b:bb:7e:82:de:25:ed:86:7b:81:f4:59:de:2a:33:15:a1:
         32:3f:28:c2:e3:c3:07:ae:f3:d9:0d:a6:b4:2c:f8:e0:4c:8f:
         74:1e:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:13 2026 by rpki-client