Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330303a3a2f34382d3438203d3e20323633353436.roa
File:                     323830343a313362303a636330303a3a2f34382d3438203d3e20323633353436.roa (raw, json)
Hash identifier:          sN12tdQVXkMvq6L0wEyXOehC4cbwJv58QByX++oYyP4=
Subject key identifier:   72:C7:27:B1:CF:16:39:BD:6D:89:70:75:1E:60:08:9D:9D:49:6E:00
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       0ED928B6CAAAFBE2E60925D789A09F93E5C880BD
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330303a3a2f34382d3438203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:07:54 +0000
ROA not before:           Thu 11 Jun 2026 18:02:54 +0000
ROA not after:            Thu 10 Jun 2027 18:07:54 +0000
asID:                     263546
IP address blocks:        2804:13b0:cc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d9:28:b6:ca:aa:fb:e2:e6:09:25:d7:89:a0:9f:93:e5:c8:80:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:02:54 2026 GMT
            Not After : Jun 10 18:07:54 2027 GMT
        Subject: CN=72C727B1CF1639BD6D8970751E60089D9D496E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:83:07:7e:6f:c1:d5:f5:c4:93:5b:59:76:
                    e9:c3:3b:1d:40:25:46:14:c8:02:cd:2c:45:e9:9a:
                    d5:68:f9:f9:71:e7:cf:cc:33:94:e9:10:51:64:a8:
                    92:aa:c8:fe:dc:85:72:95:81:e6:72:1f:55:8f:18:
                    b6:de:57:2d:3b:07:2a:8a:8a:b4:97:00:60:3a:66:
                    25:b6:45:31:3f:39:88:c8:11:b9:a0:67:fb:8c:4a:
                    ca:aa:74:8d:c5:c5:12:95:a2:84:32:51:ef:70:58:
                    0a:51:72:13:2b:75:a9:dc:79:33:5b:34:16:ae:62:
                    8e:46:c8:23:35:72:ea:7f:e0:f4:15:70:19:be:0d:
                    d4:0f:e2:ef:ed:2a:9d:81:12:cb:18:a8:09:15:a3:
                    d6:0e:a9:c2:37:26:2a:f0:e0:47:ab:f0:40:fc:45:
                    34:2d:b3:38:ea:a6:2b:ac:43:c2:6a:ae:a8:73:2a:
                    f5:b3:6c:90:17:6b:28:3f:35:2d:ed:f6:a7:51:97:
                    40:1e:45:f2:19:ed:38:8d:63:81:8d:6f:66:cf:f1:
                    50:b9:34:91:03:d5:81:ef:cc:33:48:9b:cc:45:aa:
                    8f:8f:a8:67:46:d8:25:d6:ec:25:b3:5b:6f:a0:82:
                    60:19:1b:3f:27:c9:b1:7d:3e:4a:b1:23:8a:8a:3d:
                    58:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:27:B1:CF:16:39:BD:6D:89:70:75:1E:60:08:9D:9D:49:6E:00
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636330303a3a2f34382d3438203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:cc00::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:aa:b7:59:7c:7a:15:29:47:b1:28:34:6c:0a:ff:80:91:
         df:70:6b:bf:39:bd:66:c7:c2:a8:c7:aa:df:29:05:28:3a:c8:
         50:5a:0f:47:3d:ac:c5:35:a6:df:a8:f3:9c:c2:98:bb:0d:7b:
         bf:43:87:5f:01:52:41:1b:17:a4:c6:7a:71:ba:65:d9:36:1c:
         1a:be:99:27:ad:3a:38:64:19:b1:55:19:b7:9e:fa:9f:7b:df:
         14:80:11:56:22:a7:93:c9:06:78:80:cd:ec:87:d5:0a:7a:c1:
         17:ec:86:34:f9:0a:48:51:ff:71:8a:39:6b:1e:9b:ad:d9:04:
         f3:ab:1b:e5:f7:d0:b4:38:09:3d:30:08:7a:be:be:7d:dd:6a:
         5d:c4:a3:36:e1:15:d9:6e:31:17:01:d2:ac:f5:d3:ee:4b:9c:
         c1:ee:e6:1c:52:ca:27:72:3a:40:de:43:94:0f:6d:f6:ef:9b:
         40:fb:18:43:c1:37:71:ec:07:d1:33:d3:8b:07:81:04:38:00:
         66:ae:4d:f6:97:0a:03:82:0a:62:f3:96:fb:aa:e6:a5:ec:f6:
         3c:69:61:ee:e4:b6:76:1c:76:61:b9:48:a6:d0:0e:3a:e4:a6:
         ec:19:fd:26:c8:3d:50:c6:a7:81:c7:2d:2a:1e:3c:f6:e0:00:
         6a:ea:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:40 2026 by rpki-client