Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa
File:                     323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa (raw, json)
Hash identifier:          VbxoyoCxyzI8jObXY/1EBiukWnet+IXBBYjCwVwYQ3M=
Subject key identifier:   A2:AC:0E:1C:97:C7:50:05:60:6D:B6:BC:04:3F:DC:B3:89:F6:AF:34
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       4F78A2BC0A44A614E592943D4E12979F6EFBC4A9
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:12:18 +0000
ROA not before:           Tue 14 Jul 2026 19:07:18 +0000
ROA not after:            Tue 13 Jul 2027 19:12:18 +0000
asID:                     263349
IP address blocks:        2804:14c4:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:78:a2:bc:0a:44:a6:14:e5:92:94:3d:4e:12:97:9f:6e:fb:c4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:07:18 2026 GMT
            Not After : Jul 13 19:12:18 2027 GMT
        Subject: CN=A2AC0E1C97C75005606DB6BC043FDCB389F6AF34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a0:77:85:5d:1b:9c:c8:6c:1e:29:c2:b5:e1:
                    04:2a:13:fa:66:d4:d2:42:ab:5e:8e:2f:fd:b1:56:
                    4b:10:cd:cf:c3:d4:6a:70:b8:68:49:4b:9b:d1:d1:
                    62:c1:7b:95:0a:c6:73:16:0d:6a:9a:ce:ca:ca:ea:
                    48:98:0c:64:20:42:e5:59:0f:07:07:16:7e:78:b8:
                    26:92:75:a2:27:74:e4:c4:54:7c:32:68:62:9f:6d:
                    48:f9:55:db:3f:08:48:a4:8a:76:8d:36:95:c5:17:
                    67:8e:17:31:4c:fa:e2:94:b3:a2:cc:ec:dd:d9:75:
                    54:76:0f:b3:e3:bb:05:3e:2f:ad:f0:bc:00:b8:bb:
                    5d:2e:f1:e6:e1:cc:2b:82:20:d5:8b:21:dd:8e:64:
                    71:b0:68:79:99:25:1d:c5:ef:5f:46:f1:0e:4b:b3:
                    40:c1:83:c6:63:10:c9:30:67:af:a9:ee:d0:0b:09:
                    b6:b7:c1:7a:46:c6:d6:e7:d0:25:ae:47:79:62:33:
                    d1:2d:14:35:2c:71:f4:be:1b:5e:2e:99:34:7d:36:
                    5e:23:d5:e2:ae:8c:88:82:00:ff:4c:c5:54:50:23:
                    a1:94:08:23:fd:60:f8:84:be:19:c1:e7:6b:32:2c:
                    24:e9:45:02:26:18:91:e7:2e:9d:bf:d1:4d:09:ff:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AC:0E:1C:97:C7:50:05:60:6D:B6:BC:04:3F:DC:B3:89:F6:AF:34
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/323830343a313463343a663230303a3a2f34302d3430203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c4:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:34:27:e1:6d:71:3c:97:02:f7:9e:21:2a:65:96:99:f2:
         a5:41:bd:56:2f:3a:30:aa:66:a0:e3:d8:1d:fa:c1:ea:5a:5e:
         e9:88:21:a8:71:90:97:9a:be:77:77:69:85:16:0f:66:d9:7a:
         05:ea:a6:db:44:c4:b6:e1:5e:f2:76:64:c7:1a:d6:2b:ae:59:
         e2:13:e7:31:f2:3f:a7:de:64:2c:df:74:ad:15:bc:27:94:56:
         a0:ac:1e:dc:1f:a4:e3:4b:ea:3d:a1:94:d1:2d:2d:f4:ac:29:
         bf:d4:2e:77:10:89:e3:43:ff:af:d5:04:5d:c0:54:64:0a:32:
         03:69:38:d4:0d:9a:3e:81:6c:b7:34:e2:00:99:4a:2e:52:0d:
         88:46:27:07:68:1d:49:96:c5:7b:b9:78:9e:a3:f1:20:19:ba:
         35:7c:10:1f:f4:bf:a6:db:9a:9a:c6:f7:3c:09:ff:ce:94:a9:
         4b:29:a3:76:ea:e2:c7:45:11:f3:c1:7b:22:76:04:ef:10:08:
         70:24:ec:57:d0:4a:94:8e:2a:de:d9:19:0d:f8:00:40:b1:09:
         9a:eb:a9:18:38:ea:4b:80:79:a4:92:df:96:6e:01:75:d4:74:
         34:2c:dd:9e:c3:f9:3e:16:74:d9:fd:ca:b5:23:2d:fc:5d:1c:
         7c:90:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:21 2026 by rpki-client