Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33362d3336203d3e20323731343134.roa
File:                     323830343a376232383a633030303a3a2f33362d3336203d3e20323731343134.roa (raw, json)
Hash identifier:          BsJe8Plqto0kUBq8nilWfhKDaa+SMlI4hFWbkCtGqKI=
Subject key identifier:   CE:7C:C8:D3:7F:23:C2:3E:1C:51:2F:C4:AA:6D:B0:92:56:2B:E8:A9
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       45862ED7867FD6023D1D495B5FABCE5B2947006C
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33362d3336203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:34:52 +0000
ROA not before:           Thu 23 Jul 2026 18:29:52 +0000
ROA not after:            Thu 22 Jul 2027 18:34:52 +0000
asID:                     271414
IP address blocks:        2804:7b28:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:86:2e:d7:86:7f:d6:02:3d:1d:49:5b:5f:ab:ce:5b:29:47:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:29:52 2026 GMT
            Not After : Jul 22 18:34:52 2027 GMT
        Subject: CN=CE7CC8D37F23C23E1C512FC4AA6DB092562BE8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b3:92:e6:e6:db:71:27:b2:fb:75:d3:6a:76:
                    ed:25:0c:f0:db:f1:cf:5b:a3:73:73:ab:b3:b3:1e:
                    06:a2:ee:39:5e:3f:d0:1d:ab:49:86:a1:be:41:c9:
                    31:d1:e6:f5:d2:48:59:fd:d7:24:d1:04:30:78:b7:
                    a8:45:b7:50:41:73:91:ee:36:43:94:1a:34:7f:90:
                    1e:65:1d:0f:d3:79:b2:78:bc:d2:fe:63:dd:81:c4:
                    0c:ae:74:ba:78:27:ee:d4:e2:67:d4:bf:fd:92:e9:
                    8d:12:02:25:98:ec:64:a2:7e:5d:bd:e4:75:ad:ba:
                    00:53:79:fe:82:dd:76:76:19:8d:3b:d5:b6:c7:e6:
                    52:ff:1a:a3:7d:f6:2f:df:ec:c2:b8:3c:39:5b:09:
                    c9:7a:31:29:17:41:7c:86:fe:d4:67:7b:54:69:2e:
                    a7:46:09:99:20:f4:e3:2c:d4:7f:e4:04:4c:00:bb:
                    a6:de:8a:7f:ae:48:ba:d3:d7:86:25:e7:24:08:2a:
                    6c:a4:17:91:b6:06:1c:4d:3b:ce:84:3d:c8:06:6e:
                    4c:14:03:6d:a2:35:1a:19:bd:d6:82:b3:e2:67:3f:
                    a2:55:52:85:d3:3c:52:c3:4f:b1:03:58:af:6f:1b:
                    36:ba:27:4b:ae:35:42:67:9a:b6:72:95:27:28:58:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7C:C8:D3:7F:23:C2:3E:1C:51:2F:C4:AA:6D:B0:92:56:2B:E8:A9
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/323830343a376232383a633030303a3a2f33362d3336203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b28:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:a0:9c:ab:ef:9d:83:33:5a:21:17:b5:ff:7a:0d:9b:c0:
         99:41:73:64:9e:01:f3:64:af:eb:65:5f:a4:b2:5b:b2:35:13:
         1c:48:dc:4a:9e:59:cf:51:0b:81:ea:2d:84:58:c7:da:56:c2:
         3d:b6:b9:fe:6c:aa:32:cd:fc:9b:dc:ae:ae:96:1c:8a:78:d7:
         05:56:20:e1:76:6e:99:86:1a:bc:e0:cd:34:dd:d4:d5:cb:54:
         76:cc:b1:d1:ba:8e:36:bf:89:c8:46:8a:69:df:04:01:6f:49:
         f4:15:e8:4b:36:52:af:15:db:68:4b:75:72:52:08:1c:ff:fa:
         27:92:2f:e9:47:1a:25:a3:ef:5a:fb:f2:fe:18:d3:b1:49:55:
         c6:23:5e:8d:21:28:e2:81:6f:fc:22:9e:9e:e2:22:d9:b5:ad:
         bc:1f:e8:6a:93:f0:cd:44:5e:3f:cb:bb:2f:80:a7:e9:6e:1e:
         4b:86:aa:bc:25:d3:ea:20:cd:b2:52:59:18:1f:ef:a7:97:96:
         06:72:40:b4:ae:57:5c:7d:82:e8:a8:a0:5d:a2:d7:91:59:e4:
         f2:7a:04:b0:4e:76:fb:79:35:02:5c:0f:98:82:41:0f:0b:49:
         db:fd:38:26:ee:da:d8:38:a4:d0:f9:0d:5c:b3:b1:57:f6:4d:
         bb:d3:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:21 2026 by rpki-client