Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a313030303a3a2f33362d3336203d3e20323731343134.roa
File:                     323830343a376232383a313030303a3a2f33362d3336203d3e20323731343134.roa (raw, json)
Hash identifier:          rgAwh/NsBzcV5mv0zw08RvrZAS4xMJjuTioKF410vAg=
Subject key identifier:   EF:C0:B1:20:E2:9C:BA:F2:AB:33:47:EB:C3:F8:6E:54:6B:2D:66:24
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       6BFCB7AE52257ABBB6C07504AA2E1BA73FCCA79E
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a313030303a3a2f33362d3336203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:17:30 +0000
ROA not before:           Thu 23 Jul 2026 18:12:30 +0000
ROA not after:            Thu 22 Jul 2027 18:17:30 +0000
asID:                     271414
IP address blocks:        2804:7b28:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fc:b7:ae:52:25:7a:bb:b6:c0:75:04:aa:2e:1b:a7:3f:cc:a7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:12:30 2026 GMT
            Not After : Jul 22 18:17:30 2027 GMT
        Subject: CN=EFC0B120E29CBAF2AB3347EBC3F86E546B2D6624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:82:05:fb:e5:a1:5e:59:87:b7:b6:de:e6:
                    fc:f4:4d:73:17:76:85:64:3c:d8:fa:9a:9e:2c:ec:
                    eb:06:3d:c8:75:09:56:b5:e6:75:01:ce:5f:54:ca:
                    fc:00:5a:32:34:d9:4d:61:8c:e1:4c:bb:10:7c:26:
                    b3:4b:8b:85:00:44:72:82:c8:ff:77:23:3d:10:7f:
                    b7:80:c7:51:f1:4f:44:d0:b5:8c:60:c3:fb:b8:d1:
                    35:87:1d:db:58:ff:b3:fa:4a:0b:3f:12:57:ce:e7:
                    b1:a1:70:0b:88:9a:b9:80:93:48:90:9f:e1:f7:2d:
                    5f:42:b5:bf:b5:d1:86:79:20:ef:ed:b9:a0:35:bb:
                    65:5f:11:f9:a5:7d:43:36:43:78:e2:46:fd:74:56:
                    9c:80:8e:15:11:1d:5f:43:8f:e4:0c:5c:82:9b:c0:
                    9e:74:a7:7d:cb:c7:c2:46:9f:3d:33:6a:66:e5:45:
                    88:4e:f5:af:5f:80:11:12:e0:5b:69:b1:e0:10:e5:
                    68:cd:b7:e2:e6:5e:dd:ab:b9:e4:52:7d:fe:31:d3:
                    49:34:6d:25:3b:fa:52:b6:4a:2f:06:be:59:68:1d:
                    40:14:5c:a5:f3:c5:4a:6f:bf:c3:c6:6c:3b:f5:5c:
                    bc:62:4e:26:e3:6d:ba:3f:de:16:6f:2e:76:35:71:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:B1:20:E2:9C:BA:F2:AB:33:47:EB:C3:F8:6E:54:6B:2D:66:24
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a313030303a3a2f33362d3336203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:94:0a:d9:ee:77:2c:b6:4a:66:e7:2b:5a:89:ab:3f:6d:
         43:c7:45:b6:a8:f9:54:a0:b3:41:ee:50:f9:3e:24:c3:06:f0:
         d1:38:6c:a6:6d:cc:23:36:92:7e:42:08:06:68:87:21:30:e3:
         91:e3:a8:ea:1d:93:ae:ef:0b:dc:58:40:9a:96:c2:52:25:24:
         d6:44:40:b3:db:7a:58:25:4c:f1:c6:f1:66:63:cb:65:5d:45:
         92:e2:e5:14:9c:cf:b3:2e:b2:3b:c2:9d:08:16:5d:66:1c:a5:
         f5:ee:b7:7b:4c:b4:60:7e:53:11:fd:52:ab:61:01:73:80:6a:
         22:27:a7:70:aa:a5:91:86:fe:d7:58:db:1f:74:62:f0:2c:9f:
         98:ed:b5:aa:7c:eb:e0:21:c0:43:a0:14:4a:c6:9c:6c:1c:9d:
         2c:02:a9:2c:a5:fa:54:44:92:bd:15:12:e1:6a:dd:cf:f4:bf:
         6a:45:9b:c3:1b:cb:1f:b7:76:52:d2:c4:16:0a:cc:74:c1:db:
         85:49:19:f7:29:42:3a:67:27:be:4a:72:e9:75:9a:8b:ad:75:
         39:1e:3f:f4:b4:40:63:ab:35:1a:7e:71:49:6a:d7:bc:9e:d4:
         50:14:41:47:13:06:bd:9f:d3:1f:7c:39:63:2a:1e:5a:e0:0e:
         a4:64:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:19 2026 by rpki-client