Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33362d3336203d3e20323731343134.roa
File:                     323830343a376232383a323030303a3a2f33362d3336203d3e20323731343134.roa (raw, json)
Hash identifier:          Qr3jjLtgkahcnfdcmFPUef7D3D/T4qb9mXTM+Ti0tOQ=
Subject key identifier:   1B:14:D7:B2:66:60:36:50:09:6A:69:B5:D7:8F:8F:15:E9:63:98:55
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       6785B786D62275A9A5F023A81AA48F4DD753D029
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33362d3336203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:29:37 +0000
ROA not before:           Thu 23 Jul 2026 18:24:37 +0000
ROA not after:            Thu 22 Jul 2027 18:29:37 +0000
asID:                     271414
IP address blocks:        2804:7b28:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:85:b7:86:d6:22:75:a9:a5:f0:23:a8:1a:a4:8f:4d:d7:53:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:24:37 2026 GMT
            Not After : Jul 22 18:29:37 2027 GMT
        Subject: CN=1B14D7B266603650096A69B5D78F8F15E9639855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:0e:9b:64:2c:92:cd:81:6c:1c:c4:1d:1d:
                    3b:ef:f6:96:ab:64:8b:18:5e:ca:f7:ed:f6:62:8b:
                    bf:d2:8f:92:03:d6:8b:fe:07:7c:71:aa:46:1a:d7:
                    22:58:30:ab:18:de:d7:17:1d:ca:47:fc:31:04:e6:
                    b1:f0:75:77:63:61:9b:63:c0:5d:9b:7d:d3:61:63:
                    5f:c6:b9:11:8b:19:9e:a7:05:68:4f:ec:d6:af:90:
                    47:8e:46:59:8c:a8:c6:c3:cf:f4:07:eb:82:87:13:
                    de:31:d9:dd:83:28:73:5f:ef:8f:d7:3b:6f:da:54:
                    4a:e6:72:27:94:12:8c:ed:25:20:41:14:99:a6:83:
                    c2:bf:09:b6:ce:44:71:66:41:a1:8c:1b:d9:ad:6d:
                    42:81:70:e9:5b:1a:35:9d:ea:32:4e:c6:c9:a8:d3:
                    16:35:5a:f0:4d:07:2b:c4:10:32:db:c5:d0:7f:15:
                    ae:a6:5c:9d:00:32:87:71:f8:2a:d3:fa:28:c9:81:
                    3e:fa:bd:9f:49:b5:9f:a0:a8:47:b5:f4:f8:de:a8:
                    48:75:ee:00:06:0b:c1:1e:7b:c2:4f:32:2f:ef:d3:
                    e1:d3:8f:bb:b6:23:d7:c2:d1:48:04:cd:8f:88:e1:
                    8d:a3:a5:d6:96:1f:25:cc:5f:7e:37:6c:34:e3:66:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:D7:B2:66:60:36:50:09:6A:69:B5:D7:8F:8F:15:E9:63:98:55
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a323030303a3a2f33362d3336203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:c3:65:4a:e4:5f:63:b2:ce:e9:4d:04:cf:09:c8:ef:59:92:
         31:49:64:88:fe:ef:d0:09:ad:fb:f7:a4:18:b5:17:5c:bd:36:
         24:b7:df:b9:2d:69:1f:40:42:09:17:e4:09:d7:d6:3c:a8:da:
         53:29:19:9e:c8:3e:59:a7:1b:39:8a:a8:c4:0a:3a:e5:fc:c0:
         04:00:4e:c8:2d:ca:29:f8:87:00:74:70:6b:89:d3:34:75:91:
         00:56:dc:fd:c2:0c:ec:60:a8:29:0a:3f:52:03:37:70:7a:2a:
         3e:d6:f1:65:41:2f:14:ca:dd:d6:ac:4a:da:f0:54:7a:f9:81:
         15:27:28:bb:cf:d0:58:bc:75:74:94:0c:c0:d9:08:05:21:80:
         2a:2d:69:2c:35:fb:00:72:13:5f:f9:3d:67:7d:57:41:84:d1:
         08:e8:58:d8:60:73:1d:04:81:cd:76:d6:c0:a0:b5:e4:ac:65:
         4d:b5:af:23:b3:54:2c:a9:2c:83:41:b7:8a:6d:59:cb:0c:1d:
         4e:9a:3f:e6:1f:6d:49:d4:16:e5:ff:fc:00:c1:97:fa:b2:57:
         67:be:ae:2a:4f:13:2d:ea:7b:05:2a:8a:18:92:7a:5c:54:d8:
         25:f6:0a:63:c6:47:91:2c:8b:6b:e5:66:93:6e:0c:5b:e4:f6:
         e3:51:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:22 2026 by rpki-client