Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a346334303a3a2f34342d3434203d3e20323633353436.roa
File:                     323830343a313362303a346334303a3a2f34342d3434203d3e20323633353436.roa (raw, json)
Hash identifier:          oVokx9/zNyC/M9j8yRWy3rZKsToPOzq1/oce4unLXcM=
Subject key identifier:   25:08:B0:B1:2B:7F:35:DA:98:BC:F4:CF:26:56:FF:B6:74:1B:46:0E
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       171A4083406F5C58184DB3D86E30532D2B0250AC
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a346334303a3a2f34342d3434203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:05 +0000
ROA not before:           Thu 11 Jun 2026 18:03:05 +0000
ROA not after:            Thu 10 Jun 2027 18:08:05 +0000
asID:                     263546
IP address blocks:        2804:13b0:4c40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1a:40:83:40:6f:5c:58:18:4d:b3:d8:6e:30:53:2d:2b:02:50:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:05 2026 GMT
            Not After : Jun 10 18:08:05 2027 GMT
        Subject: CN=2508B0B12B7F35DA98BCF4CF2656FFB6741B460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:9f:3b:2d:4e:42:0e:a1:78:c9:cf:48:0c:
                    d0:c9:21:70:d2:39:0e:e2:47:a3:f8:92:10:12:12:
                    a7:49:94:7a:83:a6:c3:aa:95:13:97:eb:2c:ae:50:
                    46:1e:b5:81:6d:5b:de:fd:db:0f:bd:86:a9:da:08:
                    0e:39:2b:89:e9:14:97:fd:7f:94:a1:a2:4c:5b:a6:
                    ce:fd:41:eb:8d:cc:b9:86:f1:ec:b8:42:7f:a5:6f:
                    a0:f1:9a:91:e4:b3:55:26:39:ea:67:36:fb:a3:4f:
                    0b:68:41:f8:8b:bd:e0:2c:22:cd:26:36:80:ed:f9:
                    2d:95:82:a6:5f:d6:2a:30:02:0a:4f:33:6e:e5:de:
                    45:98:98:1d:ec:ef:6f:23:47:3e:23:da:8d:41:1f:
                    33:91:e5:59:4c:86:44:71:d8:6a:41:f0:0e:72:e8:
                    cf:7e:d0:77:af:d7:38:47:f6:b7:2c:63:42:06:e9:
                    36:1a:4b:cb:74:a1:f5:59:81:1b:ce:fd:f0:88:92:
                    51:10:0b:d6:21:04:87:c9:c9:49:de:42:ab:f9:37:
                    16:39:40:f6:e4:65:2c:7c:89:29:4f:af:d9:a3:8f:
                    eb:07:34:9d:8e:b7:d3:84:b4:bb:ce:40:02:6b:43:
                    8c:b3:fb:2a:90:b7:05:b5:45:ad:28:24:90:85:97:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:08:B0:B1:2B:7F:35:DA:98:BC:F4:CF:26:56:FF:B6:74:1B:46:0E
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a346334303a3a2f34342d3434203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:4c40::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:62:75:ba:41:1a:a8:ba:6c:e6:a7:2a:8b:38:4d:d2:3e:
         13:0a:16:75:01:d7:15:f8:0a:f0:f2:82:2f:9c:5b:df:a0:ee:
         6b:f8:1f:f1:9b:2a:05:02:70:9a:c6:ca:d6:d9:77:41:6d:1f:
         62:f5:f6:c1:9d:60:75:9d:88:f7:cf:24:ee:42:e3:8b:9e:ec:
         ad:b6:d9:ac:1e:f2:ca:63:07:c1:a5:23:fe:49:6d:17:f0:b1:
         85:71:0d:de:30:00:5b:90:56:0b:62:89:b6:1e:9c:02:a3:46:
         ac:52:ae:6f:12:78:0d:ec:de:f9:6a:aa:f3:cc:85:9f:b0:99:
         b2:2c:76:77:13:3b:af:21:6e:a5:20:d6:ad:36:9d:0d:b0:56:
         d1:18:23:09:3a:b6:1f:a4:b2:e7:2a:52:7a:bd:20:53:67:ae:
         a7:7b:c3:99:e7:26:89:3e:99:18:5d:97:ea:8f:5e:16:b5:cc:
         3c:1b:2a:be:55:e3:af:95:d1:8a:58:06:3a:2d:46:33:08:d4:
         2e:ef:5b:9c:de:12:d9:58:76:7d:17:86:fb:a8:22:7a:7a:a2:
         57:fc:85:1c:ac:9e:b4:34:33:0b:c2:bf:be:b5:e5:0d:ad:cb:
         f5:1e:d6:4c:9b:36:bc:ad:fe:6d:09:3b:35:5b:1b:80:35:8b:
         cb:e2:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:39 2026 by rpki-client