Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa
File:                     323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa (raw, json)
Hash identifier:          7APfHOoIk6uWXgUbNACIdIafrPJWEaxqu9lS2ER4B8s=
Subject key identifier:   C9:BF:B0:A9:DE:85:B8:17:EA:F2:E5:05:39:A8:9B:67:0A:E5:F7:59
Certificate issuer:       /CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
Certificate serial:       02176DBD3C834E9B04CCBBDFB91995B45B76E1BC
Authority key identifier: 0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa
Signing time:             Thu 16 Jul 2026 11:50:19 +0000
ROA not before:           Thu 16 Jul 2026 11:45:19 +0000
ROA not after:            Thu 15 Jul 2027 11:50:19 +0000
asID:                     271018
IP address blocks:        2804:7504:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:6d:bd:3c:83:4e:9b:04:cc:bb:df:b9:19:95:b4:5b:76:e1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
        Validity
            Not Before: Jul 16 11:45:19 2026 GMT
            Not After : Jul 15 11:50:19 2027 GMT
        Subject: CN=C9BFB0A9DE85B817EAF2E50539A89B670AE5F759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:96:eb:88:bf:f9:51:a5:a3:b5:19:3d:d2:
                    26:df:ca:9e:39:b4:ed:34:e1:30:1c:17:8c:f4:fb:
                    50:87:86:33:de:4a:da:ba:95:3e:64:e9:ac:8e:c4:
                    12:23:4a:63:32:83:6d:12:bd:c8:41:bb:94:0b:d8:
                    15:25:36:aa:0b:90:49:c5:36:cf:3b:1e:ef:9f:25:
                    66:c5:cc:2a:16:0e:67:06:34:b9:f7:33:a4:53:08:
                    ac:2a:c8:e3:3c:ce:0b:0b:5f:74:cb:fb:26:46:aa:
                    cd:c8:82:0d:b4:1c:59:ce:d2:82:d1:76:3b:c9:0c:
                    c5:c0:90:77:c1:44:9d:d4:62:5d:c2:6b:ff:07:81:
                    db:70:8b:e5:72:a0:c6:6b:4c:31:cf:38:3d:94:27:
                    80:8f:28:d9:22:aa:4d:67:83:e2:7c:ab:d5:fb:d1:
                    de:30:6a:8b:e7:70:20:d7:33:c7:38:35:b7:9e:e9:
                    5c:b4:a7:36:f6:ca:f6:91:48:ed:5b:b0:4f:aa:d4:
                    48:be:b5:e2:f6:e6:65:9b:55:07:3b:6c:62:5c:53:
                    0f:59:41:55:f8:e2:c7:0f:e6:db:8e:3e:ab:0b:4a:
                    e6:ec:9f:83:42:49:33:c0:ec:19:07:e2:3d:b9:56:
                    e4:15:cd:77:61:7a:d9:eb:f7:1a:00:cc:3f:d2:1d:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:B0:A9:DE:85:B8:17:EA:F2:E5:05:39:A8:9B:67:0A:E5:F7:59
            X509v3 Authority Key Identifier:
                keyid:0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a383030303a3a2f33342d3334203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d8:a8:84:87:1f:d8:a2:41:fc:bf:68:4a:7f:3c:91:f6:e5:15:
         3c:7e:83:d5:70:ae:ad:ad:09:9d:ba:40:15:8b:20:0c:99:42:
         ab:37:c6:4f:b1:dd:8d:20:88:7c:7b:a4:9d:ef:e3:3f:57:16:
         5c:8f:ca:a4:a8:51:59:bc:09:8a:2e:2b:ad:23:f4:fe:bb:1b:
         16:56:01:e1:31:43:f2:51:cd:c6:8d:7a:63:94:6a:3d:19:52:
         03:04:16:8e:ff:ec:1d:3d:54:ab:bc:0a:75:70:90:f8:c5:e8:
         0d:55:8f:f2:de:53:bd:94:5a:51:f1:34:94:77:39:b5:a4:c4:
         df:b5:95:47:56:9e:dd:a7:6f:6d:64:ea:96:92:04:7b:33:1a:
         35:9a:5a:d1:35:e5:47:70:b6:45:60:72:28:ae:0d:1b:2c:74:
         b3:f5:8c:19:28:5e:f9:db:74:11:79:b5:af:7d:46:d4:07:58:
         d4:7f:99:c0:5d:c8:de:a1:09:7a:dd:dc:58:27:51:4e:ac:3c:
         98:7e:dd:c5:78:82:58:6c:37:85:a0:ee:4b:f6:78:b1:6a:6b:
         35:4f:eb:cb:c9:ee:eb:78:8f:fe:8a:5b:c5:f3:09:0a:c4:5c:
         a8:ee:a0:07:9b:7f:04:c6:64:d5:d7:5b:c6:93:02:f3:d7:4c:
         df:3d:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:22:21 2026 by rpki-client