Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636332303a3a2f34332d3433203d3e20323633353436.roa
File:                     323830343a313362303a636332303a3a2f34332d3433203d3e20323633353436.roa (raw, json)
Hash identifier:          1EWvb9/pSTfKcesix25SmHYA3QdVzy8gpz4eHUeRv/o=
Subject key identifier:   CF:7A:AB:E6:0E:6C:C3:FF:E7:2C:BC:CE:32:FE:D1:F7:54:A6:27:7C
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       3726683A40DA8A8E3B259F9A3AFEC614B74FD1E3
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636332303a3a2f34332d3433203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:05 +0000
ROA not before:           Thu 11 Jun 2026 18:03:05 +0000
ROA not after:            Thu 10 Jun 2027 18:08:05 +0000
asID:                     263546
IP address blocks:        2804:13b0:cc20::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:68:3a:40:da:8a:8e:3b:25:9f:9a:3a:fe:c6:14:b7:4f:d1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:05 2026 GMT
            Not After : Jun 10 18:08:05 2027 GMT
        Subject: CN=CF7AABE60E6CC3FFE72CBCCE32FED1F754A6277C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:8a:0f:8b:88:4d:1b:7a:3f:c0:1e:70:8d:
                    1d:4c:f4:a0:87:67:b4:af:af:96:23:b4:78:8d:22:
                    96:30:c8:4a:df:3c:c8:66:41:3b:b8:e9:37:6c:55:
                    b1:b7:37:e4:5e:ef:ac:aa:47:57:3a:12:ef:6f:f9:
                    74:06:9c:39:4d:75:ba:11:4e:ff:38:6b:13:9b:fb:
                    7e:5e:2c:6b:a1:37:66:a8:b2:bc:3d:bf:25:8f:bc:
                    f5:31:af:83:87:98:a1:93:f6:e7:9c:ee:45:fc:a9:
                    31:d9:ad:7e:bd:02:72:e0:ab:ff:3a:8b:1a:e5:ec:
                    db:0c:bd:6d:30:f4:f0:4a:84:89:16:54:0a:7b:1d:
                    ff:b3:7f:97:36:3b:11:d6:01:25:ca:08:34:a4:5a:
                    9c:5b:ab:9e:4a:49:ae:0e:92:d6:17:6a:37:a4:e5:
                    a3:de:2f:61:b6:3b:e3:ac:6d:ce:bd:8a:a8:da:be:
                    b8:05:d4:55:2a:f9:cb:a2:56:1c:3a:0c:69:07:a0:
                    0f:e4:8b:98:f0:8c:6c:54:0d:6f:d0:3a:d8:19:66:
                    ca:8e:a9:e8:57:d1:e3:58:4c:88:e1:0e:21:b4:db:
                    b4:84:86:05:62:d4:cb:e7:ca:5f:72:76:f2:6e:9f:
                    f6:a7:11:4e:c0:af:ab:fd:97:e2:a6:17:4e:72:61:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:AB:E6:0E:6C:C3:FF:E7:2C:BC:CE:32:FE:D1:F7:54:A6:27:7C
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/323830343a313362303a636332303a3a2f34332d3433203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13b0:cc20::/43

    Signature Algorithm: sha256WithRSAEncryption
         91:cc:5a:fd:29:eb:f4:74:7a:98:61:f3:4f:d9:3f:07:e4:e1:
         11:5f:0c:dd:ac:92:8c:0d:9a:20:41:c0:78:a1:35:ec:e6:0a:
         39:95:c2:c5:f7:af:de:7a:3f:c4:a6:e4:42:e9:40:a8:d7:03:
         42:07:5e:2c:86:a5:73:df:9b:f6:91:b3:74:3e:77:cd:df:d9:
         34:83:98:24:5a:bb:2b:3a:b6:1e:ab:cb:ec:7a:d0:c7:f1:77:
         50:aa:52:23:42:9c:5b:46:27:25:0a:1f:0e:8b:f7:96:38:9e:
         0a:6f:99:75:3a:a9:ba:13:a9:26:35:66:ad:90:45:9e:ac:b3:
         39:29:97:53:af:68:49:f5:6f:4c:7a:16:6e:22:ff:d3:33:d4:
         93:9b:34:0b:12:82:86:44:77:b3:fe:bd:b7:1c:e6:f8:f0:ed:
         08:81:0d:c7:ff:6a:ae:31:3e:8e:a0:3a:33:63:b2:9c:82:cc:
         72:6e:ba:e6:a6:0b:fa:3b:43:02:a0:f5:18:a7:be:99:b9:ae:
         f8:22:f8:e8:64:36:c1:90:0d:d2:c5:52:2a:10:b6:17:f2:5d:
         94:9f:1f:c1:b9:f4:10:b7:cd:6e:72:e5:bb:2c:d5:0d:84:75:
         e6:d6:f5:a5:c6:74:06:b5:97:4c:70:01:ae:09:8c:9c:81:af:
         da:b4:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:46 2026 by rpki-client