Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
File:                     323830343a343837633a3a2f33322d3332203d3e20323637313234.roa (raw, json)
Hash identifier:          2OmMnVq+/qUGOc73+eLZpT50aMc1eLNrW6qcn2hiU8k=
Subject key identifier:   1D:65:6E:E3:CD:32:90:60:58:0E:59:DC:D4:6A:0D:4F:A0:AF:A7:C6
Certificate issuer:       /CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3
Certificate serial:       19553D874C3E1FAC34C84394DE05FD06CE4FC3D1
Authority key identifier: D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa
Signing time:             Wed 22 Jul 2026 20:58:48 +0000
ROA not before:           Wed 22 Jul 2026 20:53:48 +0000
ROA not after:            Wed 21 Jul 2027 20:58:48 +0000
asID:                     267124
IP address blocks:        2804:487c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl
                          rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:55:3d:87:4c:3e:1f:ac:34:c8:43:94:de:05:fd:06:ce:4f:c3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3
        Validity
            Not Before: Jul 22 20:53:48 2026 GMT
            Not After : Jul 21 20:58:48 2027 GMT
        Subject: CN=1D656EE3CD329060580E59DCD46A0D4FA0AFA7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:19:ec:77:89:9a:fc:cd:78:ee:1b:38:06:
                    82:89:86:ed:cd:08:b5:aa:d6:c2:24:91:dc:f1:ad:
                    0a:1a:c6:27:5e:a1:73:1a:50:48:54:c4:68:a2:a3:
                    f3:cb:26:ba:c3:89:30:49:60:d8:c4:17:b2:50:4e:
                    96:39:96:21:c9:2d:45:e7:64:3e:0f:fd:f0:b6:73:
                    c5:2c:22:e4:70:dd:e5:1d:c0:b4:f1:4f:f3:4b:32:
                    ce:03:43:e8:69:4e:43:56:4d:6e:d6:58:58:79:b0:
                    64:0c:68:f0:04:46:2b:55:e9:5a:6f:6a:21:2d:dc:
                    8f:f2:b6:1f:2a:43:a3:42:84:46:d7:16:ad:34:60:
                    8f:be:a8:9a:7d:8f:7c:11:dd:84:9d:4b:10:02:89:
                    80:80:80:68:61:24:1b:0e:c0:18:2e:a4:fb:7e:eb:
                    27:e4:60:54:99:b6:75:32:91:cc:bb:ff:70:7a:e2:
                    82:f3:dd:b6:2b:32:5a:a5:6d:12:78:da:cb:f7:6a:
                    3e:86:bb:f5:19:1f:53:75:3d:c1:49:ec:70:6a:b0:
                    6d:02:0e:c4:62:45:9b:45:5a:b9:ca:eb:a4:e5:c4:
                    fc:3b:eb:26:46:39:9d:bb:6c:e7:7c:f3:0e:96:86:
                    4a:68:1a:44:0a:ee:73:ac:a2:b7:8a:f9:11:d0:5f:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:6E:E3:CD:32:90:60:58:0E:59:DC:D4:6A:0D:4F:A0:AF:A7:C6
            X509v3 Authority Key Identifier:
                keyid:D4:25:7E:3B:A9:A8:0D:AF:B6:9A:D9:BF:16:0A:0F:15:D6:19:93:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4257E3BA9A80DAFB69AD9BF160A0F15D61993B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/323830343a343837633a3a2f33322d3332203d3e20323637313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:487c::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:4d:5b:a3:ff:09:c9:20:4d:65:b6:1c:2b:ad:b3:b7:b8:3d:
         4a:b8:a7:f4:67:94:0f:dc:fa:a5:8d:0f:92:6a:10:08:d2:d5:
         c4:18:c9:5a:1f:ba:6c:bf:de:45:a6:aa:74:e0:cf:8d:c9:a3:
         55:b0:81:7e:76:73:bc:1b:04:3c:c0:77:7a:55:e1:61:49:04:
         36:b4:80:73:de:5d:74:f2:1e:04:95:6e:ab:d3:fe:56:14:63:
         dd:b3:dc:98:bb:2c:46:03:77:6d:48:6b:b4:41:1d:3a:bd:5d:
         85:db:85:62:8e:86:32:2f:38:9f:33:49:fa:81:a9:13:54:19:
         b8:71:1e:f6:43:1e:38:3e:e5:6c:94:6b:bd:28:67:76:a5:80:
         ac:1b:a7:a4:da:ed:7a:03:e3:7f:89:9a:a2:e0:8d:b9:8b:af:
         80:42:be:e5:ca:68:fe:72:30:ca:eb:23:90:39:bf:f3:d5:43:
         28:b6:cd:1f:6c:6b:fe:ff:ae:d3:e1:c1:49:a2:7e:5d:23:5d:
         fb:bb:04:42:44:ff:06:f3:9b:f2:e0:63:4d:9e:91:e3:9f:2f:
         4b:55:25:4d:77:af:2e:ca:2e:64:a1:06:7d:e1:b9:10:40:94:
         e0:8e:74:74:17:6d:38:16:bb:34:6d:8a:2e:f4:5d:19:c2:f4:
         dd:0a:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:19:52 2026 by rpki-client