Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a343030303a3a2f33342d3334203d3e20323731343134.roa
File:                     323830343a376232383a343030303a3a2f33342d3334203d3e20323731343134.roa (raw, json)
Hash identifier:          iNNHvPDEJvI5nEsdwt/d5J7ds7h/OckdtC9E0aavq54=
Subject key identifier:   66:00:41:03:79:4A:2D:96:35:74:05:AE:D6:D1:9E:C4:22:EF:5C:0C
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       4959EBA056C5FA0E6B4DD80E2C61D863BE74B1B4
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a343030303a3a2f33342d3334203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:21:45 +0000
ROA not before:           Thu 23 Jul 2026 18:16:45 +0000
ROA not after:            Thu 22 Jul 2027 18:21:45 +0000
asID:                     271414
IP address blocks:        2804:7b28:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:eb:a0:56:c5:fa:0e:6b:4d:d8:0e:2c:61:d8:63:be:74:b1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:16:45 2026 GMT
            Not After : Jul 22 18:21:45 2027 GMT
        Subject: CN=66004103794A2D96357405AED6D19EC422EF5C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:ff:25:52:fe:fe:12:94:2d:a4:95:a1:72:
                    2f:8c:89:93:c3:9a:2d:92:bd:d0:65:2f:5c:f6:3b:
                    ef:0b:d4:c9:6c:8b:dd:e3:87:96:5b:b4:1c:aa:96:
                    9e:32:d8:c4:e7:4b:a7:eb:78:3e:ab:b4:63:aa:2d:
                    03:d5:03:d3:09:bf:9f:80:7f:0f:b0:3c:81:b3:ab:
                    5c:20:26:7a:e5:1d:0b:64:c8:1c:0b:aa:ec:0b:04:
                    27:aa:93:f7:6c:27:0d:ac:ac:1d:bb:23:2f:93:31:
                    fa:7e:ca:67:72:9d:e5:6c:1b:16:b3:bf:a1:20:ce:
                    ef:31:5b:28:fe:74:ed:07:9b:20:b4:de:38:09:25:
                    64:2a:1e:56:fb:dd:ea:8e:49:8f:74:73:fd:6d:23:
                    eb:d1:dc:63:fd:05:44:15:5c:8f:2d:bc:59:9c:3d:
                    58:7e:b2:c8:42:b8:6d:7c:59:2d:9f:81:4e:12:d2:
                    41:3a:8c:04:98:71:eb:58:6b:68:95:7a:46:c6:df:
                    f3:23:2c:62:c0:c3:b1:b2:bf:e2:04:31:03:c0:06:
                    e9:d2:87:5f:2d:69:c6:17:56:cc:70:9e:11:cc:58:
                    5c:bd:71:46:85:a6:87:72:85:99:56:76:27:54:59:
                    01:63:29:b4:ad:02:f1:00:77:a3:de:fb:47:df:5b:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:41:03:79:4A:2D:96:35:74:05:AE:D6:D1:9E:C4:22:EF:5C:0C
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a343030303a3a2f33342d3334203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b0:69:86:49:1e:6d:2b:13:71:da:e7:ca:cb:ea:9b:de:6c:44:
         5e:9b:e2:17:f1:0e:3b:b1:30:e7:20:46:ea:87:11:ce:02:49:
         e0:65:0d:1b:e8:c2:ad:06:23:61:da:83:3a:dc:13:ad:d6:6f:
         16:f8:ca:56:98:aa:f6:d8:6a:00:fc:f3:47:0f:b3:02:4e:56:
         d2:ac:14:89:87:6c:22:75:a5:27:46:64:6d:ff:3f:6b:34:23:
         30:c7:98:8a:0a:86:04:5a:37:5b:94:71:13:fa:75:4a:59:c1:
         60:75:ef:3e:84:01:0f:a8:2d:ac:93:07:7b:60:ac:12:4c:af:
         e4:b9:c3:93:43:11:7e:16:9e:59:51:6a:e9:d5:3e:b1:5a:4a:
         50:06:06:a9:7a:ab:73:e9:d1:0b:3b:cf:ab:74:48:56:e4:4f:
         22:2c:cd:c4:7b:0e:8b:ae:97:11:b5:bc:0d:b1:71:ab:87:97:
         1b:60:d9:f9:a9:63:4e:41:00:59:37:1f:db:83:cd:33:34:b6:
         b6:45:f8:32:72:d0:93:16:59:50:bf:8b:5b:44:1f:f0:00:d8:
         89:ea:45:bf:bb:19:de:cb:31:87:45:ac:66:b7:92:8e:4b:56:
         37:ff:30:0a:79:62:20:78:68:fd:82:24:2e:84:cd:c0:2c:3e:
         ee:0c:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:20 2026 by rpki-client