Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
File:                     323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (raw, json)
Hash identifier:          cBtrry0krG7b5QpziVYTrJ98P95UPWg4kULwRV55mXk=
Subject key identifier:   34:D3:71:D7:9A:64:C3:88:58:ED:ED:19:EB:96:FB:13:09:07:CD:16
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       5F95F3AFB340E2A47DA86FE9565981EACDA715CA
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
Signing time:             Thu 09 Jul 2026 16:28:03 +0000
ROA not before:           Thu 09 Jul 2026 16:23:03 +0000
ROA not after:            Thu 08 Jul 2027 16:28:03 +0000
asID:                     267073
IP address blocks:        2804:47b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:95:f3:af:b3:40:e2:a4:7d:a8:6f:e9:56:59:81:ea:cd:a7:15:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Jul  9 16:23:03 2026 GMT
            Not After : Jul  8 16:28:03 2027 GMT
        Subject: CN=34D371D79A64C38858EDED19EB96FB130907CD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:87:ee:3f:67:85:f3:21:d0:a4:19:e7:81:
                    2e:5a:ff:69:f3:72:ef:dc:1f:01:11:a2:d9:e0:94:
                    3b:a6:52:f8:c5:6c:21:e4:a5:ff:0f:12:4f:96:55:
                    7a:ca:a3:f9:00:6a:c1:0a:9f:5c:92:6b:a4:3b:52:
                    9c:a5:82:de:e0:46:ea:ae:31:f3:dd:31:61:5d:12:
                    40:c8:d4:6c:f2:36:f3:08:62:c1:d1:57:0d:0a:55:
                    ea:03:c1:e4:f5:51:7f:bb:35:cc:73:c6:4e:f3:2c:
                    86:08:fb:6c:90:d8:b7:7b:ba:c9:13:ba:48:3e:39:
                    b7:76:f1:92:dd:99:6f:a8:bc:8e:1b:17:4f:80:12:
                    9b:50:33:7e:c6:a1:0f:69:5f:06:58:7d:91:56:22:
                    31:04:a6:6f:f3:06:be:1b:e8:d4:94:77:41:1a:85:
                    85:da:b6:6b:b5:3a:8d:0e:67:8b:1d:82:2e:ae:c3:
                    a6:2a:69:50:d8:86:f4:5d:2c:9c:fd:87:91:a9:3f:
                    8a:dd:c4:4b:ea:a6:9b:70:87:26:9d:25:3c:07:18:
                    84:34:ae:7a:f7:c8:58:fe:ba:bc:07:b7:1c:94:6c:
                    ab:ca:f6:d5:80:0c:8e:c3:18:70:fc:22:dd:f7:6f:
                    2c:2c:71:5e:48:19:58:bc:5c:3f:61:04:9e:c2:57:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D3:71:D7:9A:64:C3:88:58:ED:ED:19:EB:96:FB:13:09:07:CD:16
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:b7:96:4f:ed:90:c0:3a:a7:1a:29:01:68:f1:37:1b:50:
         7d:ae:f6:93:6a:4c:f4:f7:37:5e:bb:d0:2c:19:c9:4e:cf:f5:
         4e:a3:1e:71:2f:36:e9:f3:03:21:e8:df:7c:64:22:c8:37:0a:
         65:6e:c7:a1:a9:9d:6b:d9:f6:b3:94:2f:85:b9:92:bf:e8:0f:
         90:60:1d:b1:dc:f5:bf:e3:dd:d5:57:43:75:6a:2d:3f:84:3d:
         3e:6b:3b:f8:10:cd:05:94:2a:1b:11:73:4d:4c:c4:87:a7:e8:
         31:d5:ae:2a:96:25:5e:90:af:60:86:5c:42:48:34:b3:06:04:
         3b:5b:8d:5f:42:83:34:cd:2c:0f:8c:a3:52:11:c7:43:b1:41:
         09:e7:ca:fc:f0:34:3a:c2:ab:86:74:19:ee:16:6c:a4:58:69:
         38:cb:9e:cd:cc:47:37:40:5f:15:ee:49:09:8b:b8:23:19:11:
         f9:be:30:40:c6:66:22:5f:21:54:0f:48:33:33:70:ae:bd:5e:
         89:d1:b4:9b:fb:cb:94:78:61:97:29:62:49:2d:55:87:00:86:
         0a:5d:b2:ec:d2:43:15:45:ca:fc:b2:2a:e4:3a:28:bc:6d:8d:
         d6:49:28:a5:a2:98:dd:c7:ef:63:f2:87:1e:13:82:6f:ee:95:
         f2:5c:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:32:23 2026 by rpki-client