Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa
File:                     323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa (raw, json)
Hash identifier:          Ko0ozliQ+ZVpA+OZltmjHs1MAMMNeZDHZfhT4llVT5Y=
Subject key identifier:   8B:1D:05:B3:95:DF:04:A2:07:A7:B3:48:ED:15:61:78:1D:BE:1A:CD
Certificate issuer:       /CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
Certificate serial:       46955EF0758F7E33439003B9DD5F60C83CD68743
Authority key identifier: 0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa
Signing time:             Thu 16 Jul 2026 11:50:19 +0000
ROA not before:           Thu 16 Jul 2026 11:45:19 +0000
ROA not after:            Thu 15 Jul 2027 11:50:19 +0000
asID:                     271018
IP address blocks:        2804:7504:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:95:5e:f0:75:8f:7e:33:43:90:03:b9:dd:5f:60:c8:3c:d6:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FE69FC7DC93FF658E2579D8E571015F60D2AE0B
        Validity
            Not Before: Jul 16 11:45:19 2026 GMT
            Not After : Jul 15 11:50:19 2027 GMT
        Subject: CN=8B1D05B395DF04A207A7B348ED1561781DBE1ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:84:08:10:0e:08:12:cb:53:55:b0:ef:bd:
                    3d:71:0a:c3:fa:55:4c:4b:c9:4e:12:eb:2e:d3:ad:
                    36:69:71:ec:15:87:11:75:3c:4c:d3:c4:8e:12:e8:
                    d7:7b:a1:4f:c5:93:d4:2e:68:40:2f:21:9d:74:3b:
                    af:41:68:5f:5c:1c:da:ab:9d:1c:82:72:bb:41:fe:
                    50:fe:6f:dd:7d:4d:68:0a:32:6a:7f:b0:56:1b:1c:
                    05:12:34:5d:96:a2:de:93:99:65:43:5e:ba:3c:b6:
                    bd:54:15:de:2b:bf:37:d2:87:ec:e9:2f:d6:34:d7:
                    79:1b:5b:87:fe:56:90:ec:4b:f9:8f:0f:92:00:70:
                    6f:c1:f0:15:03:d7:23:56:e7:dc:f2:2e:77:d4:fa:
                    93:6c:59:3a:6d:a6:e5:bf:ab:00:a2:73:83:de:7b:
                    ea:70:6a:71:c5:7a:77:5a:97:aa:bc:5a:61:af:be:
                    f8:df:52:84:13:36:69:c1:77:02:2a:85:0d:1c:3e:
                    1e:12:0c:94:ac:f5:de:5c:dc:6d:c3:8b:fb:72:e9:
                    8f:4c:5e:a6:1d:bd:9a:d0:65:27:6e:75:06:1a:8b:
                    84:34:0a:d1:1a:21:ef:b8:d6:5a:14:eb:40:2e:57:
                    43:8c:8f:11:e8:b9:c6:74:fb:84:c8:33:8f:f1:e8:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:05:B3:95:DF:04:A2:07:A7:B3:48:ED:15:61:78:1D:BE:1A:CD
            X509v3 Authority Key Identifier:
                keyid:0F:E6:9F:C7:DC:93:FF:65:8E:25:79:D8:E5:71:01:5F:60:D2:AE:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FE69FC7DC93FF658E2579D8E571015F60D2AE0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/0/323830343a373530343a613030303a3a2f34302d3430203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7504:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:29:22:62:ad:89:95:be:ae:83:87:dc:59:b7:93:86:2c:e9:
         ed:51:c3:23:b3:c4:3c:20:bd:63:ac:93:89:1c:62:e8:3e:0f:
         c3:b6:8e:8b:26:af:b4:10:1d:23:f8:b9:fd:ed:90:f9:3a:cc:
         fd:9c:38:8e:ac:a2:69:3a:d9:4e:dc:86:88:46:45:27:22:1a:
         b2:15:5b:99:d5:18:47:ad:3b:a3:a5:35:33:df:93:19:c5:15:
         73:41:e5:4c:58:44:20:2f:ce:48:dc:16:90:17:1c:27:57:fc:
         9e:85:76:65:3d:08:db:a3:15:78:6c:30:7e:a9:dd:c5:16:7d:
         31:74:a7:58:7d:48:02:a1:84:b9:3b:60:0b:74:cb:75:98:d3:
         15:96:78:ae:a9:5f:1d:3b:dd:d7:c7:e4:07:2f:53:e8:e5:53:
         16:9e:21:ca:81:5d:3d:81:64:ab:16:1e:9e:cb:43:3a:84:99:
         18:23:ee:cc:c2:7a:6f:ad:fc:8a:54:64:8f:66:34:70:d3:bd:
         d8:33:63:58:53:0a:03:d7:cc:4b:79:1f:b8:3e:57:4d:87:52:
         ed:d7:06:5e:a4:82:fa:af:c9:f7:ef:30:67:d5:1e:55:5c:07:
         ca:5f:f7:3f:5b:0f:62:09:2c:72:13:25:0b:d5:89:6c:13:13:
         2a:43:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:41 2026 by rpki-client