Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663030303a3a2f33362d3336203d3e20323633333439.roa
File:                     323830343a313463343a663030303a3a2f33362d3336203d3e20323633333439.roa (raw, json)
Hash identifier:          xq+9//l0OYzG1T0BqQopLoL9nx/7gM9/55J+t4qXh9s=
Subject key identifier:   4E:9F:A7:A8:AB:D6:5F:C3:BC:CD:C4:33:9B:8E:35:D0:01:FB:9F:E1
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       68EB9C7080C000CA5C70367EF1F5DFDD4281E0C6
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663030303a3a2f33362d3336203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:12:08 +0000
ROA not before:           Tue 14 Jul 2026 19:07:08 +0000
ROA not after:            Tue 13 Jul 2027 19:12:08 +0000
asID:                     263349
IP address blocks:        2804:14c4:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:eb:9c:70:80:c0:00:ca:5c:70:36:7e:f1:f5:df:dd:42:81:e0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:07:08 2026 GMT
            Not After : Jul 13 19:12:08 2027 GMT
        Subject: CN=4E9FA7A8ABD65FC3BCCDC4339B8E35D001FB9FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:42:a1:6c:29:77:d7:68:0b:b7:7a:c6:5a:
                    62:bd:39:99:d3:dd:64:58:74:8c:06:fe:01:c9:34:
                    03:2a:ca:25:fb:3c:1d:8a:1e:31:8d:af:73:3d:4e:
                    66:4b:ba:ec:4f:6f:16:83:52:8c:44:69:35:4e:c7:
                    fa:51:ff:a8:f6:b7:22:61:bf:f7:55:72:84:24:f2:
                    7a:24:5e:c1:bd:01:fb:c3:08:c6:4d:ba:bc:33:b4:
                    88:e1:25:58:13:ec:ff:27:27:f3:e0:13:2f:9f:e2:
                    ae:7c:42:79:94:56:1a:34:9e:5f:64:ff:8e:49:ad:
                    70:91:04:ab:24:0c:e9:dc:17:27:be:5a:ef:c6:bb:
                    79:e1:b7:ec:e6:43:fa:46:8f:7e:1a:89:ef:08:de:
                    fc:0f:4e:38:b8:f7:ff:24:50:92:10:3f:df:1f:4d:
                    3b:f8:e7:9b:22:7e:df:c5:20:dc:ab:21:67:35:01:
                    45:e0:bd:c6:14:af:e4:7a:a7:be:6b:f5:4c:fe:98:
                    eb:07:89:66:e9:dc:0b:73:eb:1d:fa:89:17:94:32:
                    58:7f:b4:4a:d6:72:98:70:f7:83:1b:8a:af:2e:b5:
                    53:84:18:03:9d:48:40:c0:17:0c:da:2b:88:a0:f6:
                    50:79:17:c7:7e:d2:8e:c8:d0:12:91:e0:9f:aa:0e:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9F:A7:A8:AB:D6:5F:C3:BC:CD:C4:33:9B:8E:35:D0:01:FB:9F:E1
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663030303a3a2f33362d3336203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:46:e8:ea:17:c5:0c:49:3c:82:a8:0f:ae:31:84:60:b9:76:
         c0:9c:0a:56:c0:2d:a6:26:e2:c6:cf:5c:bd:a6:6a:ee:11:3c:
         f4:97:58:fb:e8:e5:ec:bf:89:c9:96:9d:c9:10:e9:c4:2d:f0:
         15:fb:99:e8:da:66:0c:e9:da:5e:02:1a:a2:4c:83:5b:25:f7:
         08:75:9c:3e:38:70:3a:a8:77:6e:7b:95:59:26:6b:94:af:df:
         76:b5:ce:f5:0c:21:27:ca:ab:ae:df:2d:b9:37:d0:9e:0d:ab:
         98:62:9f:0b:62:1d:9b:24:c3:f6:ef:35:c4:4e:29:cb:ff:bf:
         22:27:2c:cc:79:ee:d2:a3:26:00:c5:f3:ee:93:7f:4a:5d:0a:
         81:ed:b8:a1:1b:85:1a:94:6b:31:e2:9f:cb:07:46:e6:7e:76:
         a2:66:26:57:e0:fd:ec:4c:2a:c3:7c:4c:9e:40:0c:9a:39:04:
         0c:ed:2d:66:b9:5c:93:99:60:a6:ba:2f:27:bd:63:dd:97:2b:
         d1:aa:5f:67:dd:cc:3f:71:ee:08:eb:39:2c:75:a3:af:14:aa:
         4e:2c:26:67:e5:4b:ba:80:47:a7:5e:d6:4a:43:6e:fe:1b:b6:
         07:e1:5f:0d:27:76:82:af:a1:74:71:49:53:3a:02:17:95:de:
         20:29:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:20 2026 by rpki-client