Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/323830343a393662343a386235303a3a2f34342d3434203d3e20323734333534.roa
File:                     323830343a393662343a386235303a3a2f34342d3434203d3e20323734333534.roa (raw, json)
Hash identifier:          Z6G9CpOpipCu2KVYxqweyYs07YCAXcz/ORZIxp5fZ1w=
Subject key identifier:   A9:15:83:7E:26:9C:60:6E:17:C7:1C:4E:BB:B0:9F:12:46:7F:6C:57
Certificate issuer:       /CN=9A510D435C8C6BA777F700295A5EA7E402373C3E
Certificate serial:       2AE72B6259C9306AB10DBBEAFB995815A87F8947
Authority key identifier: 9A:51:0D:43:5C:8C:6B:A7:77:F7:00:29:5A:5E:A7:E4:02:37:3C:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A510D435C8C6BA777F700295A5EA7E402373C3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/323830343a393662343a386235303a3a2f34342d3434203d3e20323734333534.roa
Signing time:             Wed 08 Jul 2026 15:02:45 +0000
ROA not before:           Wed 08 Jul 2026 14:57:45 +0000
ROA not after:            Wed 07 Jul 2027 15:02:45 +0000
asID:                     274354
IP address blocks:        2804:96b4:8b50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/9A510D435C8C6BA777F700295A5EA7E402373C3E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/9A510D435C8C6BA777F700295A5EA7E402373C3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A510D435C8C6BA777F700295A5EA7E402373C3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e7:2b:62:59:c9:30:6a:b1:0d:bb:ea:fb:99:58:15:a8:7f:89:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A510D435C8C6BA777F700295A5EA7E402373C3E
        Validity
            Not Before: Jul  8 14:57:45 2026 GMT
            Not After : Jul  7 15:02:45 2027 GMT
        Subject: CN=A915837E269C606E17C71C4EBBB09F12467F6C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:9d:95:1b:45:98:88:61:4f:c4:f5:b3:c1:
                    b7:45:58:91:b0:16:cf:de:19:c5:d8:8d:ea:5c:66:
                    c1:49:21:a4:6f:65:0e:49:c4:b6:bf:fb:89:cd:39:
                    57:71:18:ed:16:8b:85:32:2c:10:f9:89:e5:f8:18:
                    6f:c3:66:08:73:1c:fb:fc:60:5d:e3:0a:9c:67:97:
                    3b:12:86:28:ff:3d:8f:7a:2f:0a:2e:d8:58:79:ab:
                    95:2e:a3:39:56:71:4d:f8:3d:aa:c6:19:98:25:2e:
                    21:ac:27:20:0c:e2:e3:73:e0:5b:31:9c:d1:27:99:
                    d5:03:2f:b3:19:ba:83:1d:86:08:eb:28:b9:72:fa:
                    da:40:93:ca:ba:31:31:06:cd:f7:bf:42:ff:f2:5c:
                    b2:c1:c8:ef:fe:91:f2:38:74:1b:7c:48:86:e1:a3:
                    12:1c:b5:ad:79:73:cc:b0:1b:f1:63:40:67:31:78:
                    2c:22:35:cd:ec:c7:a8:92:3f:dc:49:9a:7e:31:49:
                    ed:62:4a:38:77:06:a0:0c:54:cf:0a:6b:04:69:57:
                    b8:8d:f6:b1:d3:ce:e1:34:0d:a7:89:7c:2e:e7:03:
                    ab:80:49:b1:fe:95:16:dd:33:b2:aa:dd:e4:5d:7c:
                    71:89:67:9e:8f:f7:6b:18:7d:20:f9:f6:78:98:11:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:83:7E:26:9C:60:6E:17:C7:1C:4E:BB:B0:9F:12:46:7F:6C:57
            X509v3 Authority Key Identifier:
                keyid:9A:51:0D:43:5C:8C:6B:A7:77:F7:00:29:5A:5E:A7:E4:02:37:3C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/9A510D435C8C6BA777F700295A5EA7E402373C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A510D435C8C6BA777F700295A5EA7E402373C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsZi8nYKtJwmeYgVANtFwcUKni3JCSJg5HdPV8VHws/0/323830343a393662343a386235303a3a2f34342d3434203d3e20323734333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96b4:8b50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:9c:d7:36:b7:83:2e:e5:20:7f:e9:92:66:84:82:b6:ef:db:
         ff:ed:ef:16:a4:34:57:6a:23:58:22:14:42:c2:26:d5:a5:bd:
         7a:e2:df:9a:90:4f:8a:8a:c9:5a:fa:56:23:27:ef:64:6d:6e:
         e6:3a:4b:d9:b5:af:f4:0e:08:cd:23:67:ff:e7:10:8e:cf:cc:
         4e:ca:6e:cf:c1:2b:37:5e:b3:53:ed:26:9b:e2:8e:3e:ec:2e:
         5a:4b:0c:3d:6c:46:6a:c0:79:3b:42:be:c7:b2:45:29:82:f6:
         ad:41:0e:db:e6:68:b2:b5:2b:46:b2:36:73:2e:cf:70:dc:89:
         11:2a:2b:96:2a:ea:eb:1e:7e:e7:10:8b:6a:41:a0:45:5b:e5:
         38:46:48:15:f1:12:da:da:9b:58:e9:9c:da:d6:73:f6:d0:42:
         c0:d9:93:13:f8:9d:ca:1f:9d:00:b2:dc:dd:9d:ac:c1:ae:db:
         81:e2:6b:56:61:53:3a:a4:cd:05:99:08:36:31:92:38:aa:53:
         8f:19:cb:0d:7c:01:42:60:9e:cc:45:f8:d9:09:b7:a4:db:42:
         df:50:6b:d6:b6:12:16:78:e9:28:20:33:59:8f:ab:a8:f0:0c:
         2a:60:08:97:1f:2c:b1:fe:98:98:9a:6a:67:bc:39:d9:d0:31:
         f8:cf:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:47 2026 by rpki-client