Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33342d3334203d3e20323731343134.roa
File:                     323830343a376232383a633030303a3a2f33342d3334203d3e20323731343134.roa (raw, json)
Hash identifier:          HJU0IDYP5FSjbCc27B9X3VNCwQuqrgpfSP88+WvVkD8=
Subject key identifier:   16:96:C0:04:18:03:9C:01:03:78:4D:E9:4B:E2:41:E7:F8:4A:BD:76
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       1A6414D2DE416BD5A219C16FC9A47CFB15E640DA
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33342d3334203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:22:08 +0000
ROA not before:           Thu 23 Jul 2026 18:17:08 +0000
ROA not after:            Thu 22 Jul 2027 18:22:08 +0000
asID:                     271414
IP address blocks:        2804:7b28:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:14:d2:de:41:6b:d5:a2:19:c1:6f:c9:a4:7c:fb:15:e6:40:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:17:08 2026 GMT
            Not After : Jul 22 18:22:08 2027 GMT
        Subject: CN=1696C00418039C0103784DE94BE241E7F84ABD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:b7:4c:b6:a1:db:07:12:b2:d1:c2:5c:79:
                    47:22:11:83:78:74:f0:b4:aa:38:57:27:0a:ed:84:
                    dd:e8:30:d5:6e:98:5f:db:75:00:1b:33:d7:9e:08:
                    49:cc:d5:ab:59:9f:83:86:5f:b9:26:62:cf:75:e9:
                    5f:6e:f9:10:5c:cd:6f:e3:23:9a:2c:4c:09:38:b9:
                    8c:18:82:81:d2:23:1c:d6:a5:25:0d:18:e1:f2:8a:
                    1d:21:9b:3d:d0:95:0a:22:21:37:eb:76:9c:8d:af:
                    18:aa:1b:63:5a:e9:a9:f9:a6:a9:42:6b:bc:32:3e:
                    51:f5:6a:71:61:3a:a5:54:da:00:be:2a:fb:a7:d6:
                    63:44:18:59:57:48:7c:37:6c:76:ac:68:da:6f:1c:
                    ae:e6:a1:42:f3:e4:db:78:27:e9:36:a4:56:22:a8:
                    82:46:05:bd:af:cc:3a:5f:e8:92:ab:3f:40:b4:61:
                    0d:0c:60:d5:e2:1b:2b:e5:dd:8e:9c:26:f4:00:fb:
                    7e:20:09:44:de:84:14:2d:82:99:3a:5f:28:40:15:
                    03:5d:00:cc:71:86:b9:0f:da:2d:99:39:bf:d0:e9:
                    5d:61:e0:e2:92:1b:59:97:58:ce:3f:a3:f6:e5:38:
                    d5:7a:56:77:65:e5:c3:d2:30:2e:b1:ee:d0:a9:02:
                    b0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:96:C0:04:18:03:9C:01:03:78:4D:E9:4B:E2:41:E7:F8:4A:BD:76
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33342d3334203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:0f:87:5e:ba:d8:d6:c7:f4:24:56:d7:c3:d7:63:ac:8d:
         4e:ab:ab:6d:53:c9:83:47:ce:d5:68:ef:0a:f4:49:28:83:30:
         0f:7d:43:af:dd:1f:52:f6:f2:83:a2:5b:f7:62:58:6f:40:cb:
         38:cd:eb:ca:8d:db:32:d9:59:50:a8:87:c7:af:92:9b:14:de:
         7b:3f:25:e2:88:8b:f1:dc:34:f4:9d:4f:82:85:ab:00:c0:7b:
         24:07:9d:9d:34:00:bd:be:54:5a:c2:42:10:37:8c:25:c3:df:
         19:16:aa:49:8f:a2:c3:20:99:88:3b:ba:5b:6f:87:c4:47:27:
         14:b8:64:ef:25:c2:e0:fa:1c:43:23:52:3a:bc:26:40:9a:82:
         cc:89:27:f6:88:ef:25:bd:ee:ef:55:09:27:82:46:cb:91:5b:
         e6:8d:1c:d3:8c:89:d0:2a:b4:2d:d6:37:b2:df:4a:6e:39:f1:
         6f:22:ae:8a:08:1b:3e:2b:b6:dd:41:fd:4d:9d:5f:84:8f:27:
         79:71:0b:36:bb:57:c5:e3:46:9e:62:98:10:42:6a:ed:9d:4d:
         09:43:3b:8e:f6:77:56:d3:04:c0:81:0a:96:17:8e:f7:74:64:
         44:e2:d0:96:3a:8b:a6:7f:45:39:9d:ce:a0:55:81:5b:47:60:
         05:9e:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:19 2026 by rpki-client