Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
File:                     323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa (raw, json)
Hash identifier:          5hPVekKGK7KvSvBoI01MT5aKKMHe4h/AzTht0/gzHC8=
Subject key identifier:   D5:0C:B7:53:31:17:E8:1F:58:4D:5B:69:57:7E:AD:6C:F4:FF:C4:F5
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       0A29C6612DDD87B62DC4EC5E2AE0319823A8A92E
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
Signing time:             Thu 16 Jul 2026 12:59:42 +0000
ROA not before:           Thu 16 Jul 2026 12:54:42 +0000
ROA not after:            Thu 15 Jul 2027 12:59:42 +0000
asID:                     267325
IP address blocks:        2804:4bb4:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:29:c6:61:2d:dd:87:b6:2d:c4:ec:5e:2a:e0:31:98:23:a8:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Jul 16 12:54:42 2026 GMT
            Not After : Jul 15 12:59:42 2027 GMT
        Subject: CN=D50CB7533117E81F584D5B69577EAD6CF4FFC4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:55:4b:03:5c:51:cc:64:5e:94:0f:9e:ac:f7:
                    3c:a4:f2:bf:ce:da:90:c9:3b:36:c8:ae:bd:5d:45:
                    5d:13:cb:74:74:93:1b:ff:cd:a5:85:40:15:c8:45:
                    a0:32:a4:05:17:b9:25:32:6e:b6:dc:66:67:ca:69:
                    f5:fb:36:67:fb:e1:07:9d:22:22:ff:a5:6c:8d:76:
                    ac:46:72:9c:80:5c:dd:f5:0c:a2:3c:c2:51:71:e8:
                    95:e4:b7:33:e2:79:d8:3c:d1:c7:d7:b8:2e:de:c9:
                    00:8b:7e:57:46:b8:53:14:44:0e:23:d3:9a:c2:50:
                    18:f0:09:08:60:a6:1e:ba:dc:90:64:f8:35:68:11:
                    33:1a:31:d4:31:0d:71:de:61:fd:96:48:1c:e0:2b:
                    d3:1b:4e:de:9f:3b:df:81:31:13:18:51:52:d1:b9:
                    f4:e3:27:38:2c:2d:6a:ba:c3:db:ef:b5:da:ec:16:
                    a2:9d:4f:cd:a6:a0:8f:06:dc:00:3c:b3:9c:78:b7:
                    32:d4:29:42:36:a7:c8:0b:61:8a:80:58:15:68:a8:
                    bc:cb:0d:c0:07:3f:16:3a:9d:30:6c:fc:40:6c:0f:
                    b3:fd:36:8f:bd:06:f2:ca:60:4a:37:62:fe:61:1b:
                    e2:12:47:0a:91:fd:4f:ce:70:ae:ef:6c:1a:d4:ca:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:B7:53:31:17:E8:1F:58:4D:5B:69:57:7E:AD:6C:F4:FF:C4:F5
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ee:e0:23:16:c7:a0:29:4c:91:63:cf:c9:57:fa:be:e8:95:55:
         82:0b:8f:05:a3:3c:56:f2:0e:1d:c3:14:1e:87:7f:3f:ca:8e:
         93:cc:bd:52:a7:83:0d:86:5e:f7:2c:f7:89:6c:d7:66:d5:9d:
         3c:af:e8:3c:94:a1:f2:ce:fd:de:26:d8:6d:2d:18:a9:87:10:
         3d:f5:6b:40:b7:f3:63:58:bc:8d:c7:a9:a6:56:9b:14:94:cd:
         22:44:ec:23:69:3e:56:a5:a0:ab:76:bc:de:18:19:00:a7:0c:
         f9:3e:cf:d9:d1:99:23:d2:ee:d5:6d:74:b8:2a:69:59:d2:04:
         a6:13:5d:df:bf:84:56:42:f2:68:38:eb:25:d7:50:52:8c:6c:
         c9:1a:dc:55:2a:e0:dd:10:55:9b:2b:dd:bb:6c:89:34:b9:ae:
         89:5b:38:56:48:b8:0b:6b:f3:0f:23:be:cd:59:7e:17:51:dd:
         95:3c:e8:48:eb:43:fd:ea:8d:9a:f7:20:04:af:0f:d6:8f:c4:
         f7:0b:1b:68:af:93:03:4b:ca:72:21:f1:44:d1:31:1d:92:0e:
         dd:28:31:44:b6:a4:63:60:63:9c:7e:d7:72:e2:06:48:df:f6:
         f9:02:74:2a:26:fb:70:ae:04:e1:bb:8e:1d:c6:2e:40:c9:ac:
         79:31:aa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:38 2026 by rpki-client