Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3332203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3332203d3e20323731313032.roa (raw, json)
Hash identifier:          8UB7YiB1jGKXofaU0QDMqGol1elF6Wxp96ThVnis51I=
Subject key identifier:   D2:18:41:73:68:87:28:30:9D:31:1D:35:66:7D:28:03:2B:10:5D:03
Certificate issuer:       /CN=FB912D881E96AFBCA81349F5CF3E9D289995A954
Certificate serial:       32058C56B9BE3937635A9C2193819E03D4B90B7F
Authority key identifier: FB:91:2D:88:1E:96:AF:BC:A8:13:49:F5:CF:3E:9D:28:99:95:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3332203d3e20323731313032.roa
Signing time:             Sat 25 Jul 2026 19:01:38 +0000
ROA not before:           Sat 25 Jul 2026 18:56:38 +0000
ROA not after:            Sat 24 Jul 2027 19:01:38 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.crl
                          rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 03:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:05:8c:56:b9:be:39:37:63:5a:9c:21:93:81:9e:03:d4:b9:0b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB912D881E96AFBCA81349F5CF3E9D289995A954
        Validity
            Not Before: Jul 25 18:56:38 2026 GMT
            Not After : Jul 24 19:01:38 2027 GMT
        Subject: CN=D2184173688728309D311D35667D28032B105D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:b8:e8:6e:60:cd:6f:d3:a3:35:fe:f2:fa:
                    9a:17:5c:fa:4a:cc:72:f3:b6:9f:33:9e:fc:0b:1b:
                    00:73:fc:69:b1:6c:34:92:59:31:78:75:c9:10:db:
                    05:11:38:af:bb:6f:e0:04:bc:23:8c:11:a1:16:33:
                    89:b3:e6:70:b2:fd:d8:88:f1:39:39:aa:6a:b2:e2:
                    5c:79:74:f2:58:39:26:18:81:21:1c:52:5d:43:fd:
                    04:82:b0:3e:c4:a2:68:78:f9:c1:78:34:db:c5:8c:
                    f3:80:c8:ac:81:d7:6b:9c:61:0c:5c:89:3a:36:8c:
                    12:3a:fe:79:09:86:1c:e6:62:49:55:3e:5c:40:44:
                    d7:9a:2a:47:53:0a:12:2c:5b:0d:2d:c0:05:ab:87:
                    52:11:ef:8f:aa:04:d8:10:37:a4:8b:e5:61:cc:63:
                    1f:2b:cc:f0:1d:c9:be:74:04:2a:92:54:7b:d2:13:
                    df:5d:09:5c:9b:66:37:b8:38:8e:f0:aa:18:a6:79:
                    4e:45:a5:2a:05:4d:c0:60:66:66:b7:11:cd:cc:16:
                    28:8b:5d:66:0b:c4:48:e5:78:84:b8:e6:3d:68:f0:
                    4e:a3:86:0b:bd:c8:d0:88:bd:f0:de:70:7c:8a:08:
                    e6:30:1a:84:a3:d7:d0:d6:bd:9f:a1:fc:9f:0e:9d:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:41:73:68:87:28:30:9D:31:1D:35:66:7D:28:03:2B:10:5D:03
            X509v3 Authority Key Identifier:
                keyid:FB:91:2D:88:1E:96:AF:BC:A8:13:49:F5:CF:3E:9D:28:99:95:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/FB912D881E96AFBCA81349F5CF3E9D289995A954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB912D881E96AFBCA81349F5CF3E9D289995A954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3332203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:81:42:be:3d:57:e4:a1:ba:ea:d3:3a:4f:1e:82:41:7c:
         16:80:4c:36:6a:50:e5:08:e0:c5:4d:a5:bf:36:6b:7b:a0:1e:
         20:71:f5:74:43:2d:11:35:26:22:8a:f4:2d:84:e9:1b:60:1e:
         cc:b8:29:09:91:12:cd:38:8d:78:00:29:69:9e:56:bf:bc:a7:
         97:1c:7c:08:e6:a7:74:2d:56:bd:89:ee:9e:8f:62:ce:13:2e:
         74:9b:8a:8e:5d:93:4b:75:50:2e:b6:d0:86:82:a8:ef:58:a8:
         4c:cd:32:90:d1:f7:fb:1e:dc:e5:80:f2:9f:5e:20:37:65:d8:
         6f:3c:af:40:cd:d8:b2:6c:62:99:e3:f4:1d:33:02:2c:f8:c5:
         28:b3:ba:37:43:10:d5:74:c7:82:16:7f:63:53:2d:32:b2:b6:
         87:b6:44:ad:c8:c7:42:ba:02:96:f0:2f:7d:bc:94:cb:fb:a5:
         f0:bc:f3:6c:fd:fe:4e:1e:d6:28:e1:a4:d1:30:7f:2a:b6:5e:
         49:07:78:8a:86:0a:71:f1:ee:0e:e0:01:ae:2d:7e:5f:79:bb:
         0b:a0:85:08:4c:44:5a:e9:ee:c4:99:a8:ce:8c:c8:73:ea:a6:
         21:35:ab:12:33:b7:13:72:2b:e4:78:97:48:9e:4d:e4:11:57:
         bc:da:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:45:40 2026 by rpki-client