Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
File:                     323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (raw, json)
Hash identifier:          EKzYz7f0bYtsm0hhJP3l60PxORCr2svuTBsQc9dXMdg=
Subject key identifier:   1E:62:D7:82:51:AF:8D:6B:70:D7:27:55:D5:7B:19:FC:45:1D:60:8C
Certificate issuer:       /CN=63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC
Certificate serial:       56826A3E765A5FC18F50C217C10CAD3CA854224D
Authority key identifier: 63:F8:94:C1:51:D6:71:0E:E7:E7:AA:9C:C7:9E:E2:F0:EF:A2:AB:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
Signing time:             Thu 28 May 2026 20:01:40 +0000
ROA not before:           Thu 28 May 2026 19:56:40 +0000
ROA not after:            Thu 27 May 2027 20:01:40 +0000
asID:                     271180
IP address blocks:        2804:7778:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:82:6a:3e:76:5a:5f:c1:8f:50:c2:17:c1:0c:ad:3c:a8:54:22:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC
        Validity
            Not Before: May 28 19:56:40 2026 GMT
            Not After : May 27 20:01:40 2027 GMT
        Subject: CN=1E62D78251AF8D6B70D72755D57B19FC451D608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:91:82:6e:62:2d:c1:cf:04:5d:80:97:a6:
                    0c:d6:87:28:fc:18:bb:6e:1c:d0:d0:dc:96:f6:43:
                    00:93:3a:cb:c7:49:50:99:14:d3:e5:4c:62:76:9d:
                    7a:bc:d2:d3:17:e0:5c:90:19:f7:43:b4:93:88:20:
                    c7:99:d3:ad:3d:47:ca:1c:7e:48:05:da:44:eb:78:
                    99:04:ad:77:ed:00:20:f8:e8:f9:c4:8d:f9:89:50:
                    ee:a2:61:18:fa:c0:d6:51:d1:7d:f5:00:ae:d6:f4:
                    53:52:bd:03:b0:cc:82:8d:e2:bf:f7:18:22:d8:f0:
                    0c:c0:3b:47:fb:9c:34:53:3f:cb:2e:3c:35:3e:5c:
                    cb:c7:de:9f:09:dd:26:f3:34:13:3a:b4:a3:62:59:
                    dd:24:d8:93:54:44:e3:14:79:13:29:95:3d:10:ca:
                    10:dd:04:13:a9:43:cf:aa:73:b7:51:b1:55:43:7e:
                    02:17:6d:ce:5a:38:7f:48:6e:80:16:23:8e:78:72:
                    ba:ee:b7:86:f0:e9:40:ea:ff:01:8d:80:1a:1f:d9:
                    75:76:0b:11:32:40:2d:bb:97:a4:04:b3:22:28:37:
                    58:10:60:8a:ea:c1:30:03:7d:45:e2:09:7f:32:98:
                    2c:39:22:7f:44:b6:0f:e3:b0:2a:9c:40:af:e4:e4:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:62:D7:82:51:AF:8D:6B:70:D7:27:55:D5:7B:19:FC:45:1D:60:8C
            X509v3 Authority Key Identifier:
                keyid:63:F8:94:C1:51:D6:71:0E:E7:E7:AA:9C:C7:9E:E2:F0:EF:A2:AB:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63F894C151D6710EE7E7AA9CC79EE2F0EFA2ABAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:70:80:0f:42:1b:d1:34:f8:fd:69:e6:8e:46:23:f6:7f:
         f2:58:df:c9:9f:38:50:32:a9:21:e1:f2:12:59:86:7f:42:1a:
         2c:f4:ec:82:33:de:a5:b5:a5:c7:d3:fc:f9:33:b3:2d:bc:bb:
         6f:ec:6b:16:10:94:63:a2:a2:ce:db:18:04:88:e6:3b:30:aa:
         85:ec:44:06:f3:5d:f2:b9:6a:60:4a:84:c7:b9:b3:3d:f1:ad:
         29:ba:31:69:e6:6b:70:e4:4b:6f:fb:17:c6:0e:93:ab:80:e7:
         10:8b:db:ad:1e:92:0b:3a:57:76:ea:28:2e:c0:7d:79:0d:1c:
         8c:58:48:fa:03:af:39:58:45:84:96:db:e3:58:6f:c4:71:56:
         0e:e3:a0:43:0a:57:fe:f4:b5:f9:8c:b2:3d:cb:31:fc:3a:41:
         cb:4f:4f:3d:77:12:71:53:5b:23:3a:fe:ea:9a:39:6c:bb:c1:
         97:ed:57:d4:05:9f:a4:12:c2:66:9c:d8:71:95:76:45:93:1f:
         a0:fc:98:9c:e8:51:7a:f4:b8:73:9b:00:5f:fd:e2:f5:b0:63:
         1a:81:94:f0:c2:07:15:61:4e:35:76:f1:b2:64:10:6d:9b:80:
         aa:a8:61:66:9a:a0:db:a9:34:02:85:62:c8:ce:ca:da:b5:c4:
         a3:96:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:20:15 2026 by rpki-client