Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a3a2f33322d3332203d3e20323635393037.roa
File:                     323830343a336662303a3a2f33322d3332203d3e20323635393037.roa (raw, json)
Hash identifier:          JcoQZS7HQkY2zB1/fjt02K5R3Dbxp8m5bXpIRMWS9Qo=
Subject key identifier:   BF:59:1C:0A:10:A8:D1:7C:0F:51:45:D4:82:EF:3A:AD:6B:A5:F8:59
Certificate issuer:       /CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
Certificate serial:       2860E165B739E5DD496A2104722046C13FF073E2
Authority key identifier: EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a3a2f33322d3332203d3e20323635393037.roa
Signing time:             Mon 27 Jul 2026 13:24:08 +0000
ROA not before:           Mon 27 Jul 2026 13:19:08 +0000
ROA not after:            Mon 26 Jul 2027 13:24:08 +0000
asID:                     265907
IP address blocks:        2804:3fb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl
                          rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 01:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:60:e1:65:b7:39:e5:dd:49:6a:21:04:72:20:46:c1:3f:f0:73:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
        Validity
            Not Before: Jul 27 13:19:08 2026 GMT
            Not After : Jul 26 13:24:08 2027 GMT
        Subject: CN=BF591C0A10A8D17C0F5145D482EF3AAD6BA5F859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:b9:02:8c:39:4b:85:56:a6:7c:00:16:a3:
                    ec:6a:3c:5f:7c:73:bb:b9:06:7b:b4:3a:6e:0c:8f:
                    10:47:da:24:2f:22:c7:85:2f:98:cb:e8:ef:2d:00:
                    06:25:70:18:8d:df:ea:a9:c4:46:35:a3:69:ac:52:
                    fb:de:59:56:76:d3:47:41:f4:46:74:44:c1:b8:5e:
                    01:3f:f0:f7:a8:3c:d1:12:2d:ad:3f:4c:2d:8c:14:
                    02:1f:01:99:00:31:ac:88:b9:46:e1:79:c3:3c:bd:
                    2e:48:9b:49:ed:7e:d2:a7:ef:e4:7d:f8:18:f8:9a:
                    dc:52:eb:f2:ac:56:ad:de:64:b2:da:8f:be:90:28:
                    24:72:8b:59:c2:54:3a:a2:a5:ce:57:35:04:eb:a6:
                    8d:6e:b8:26:dd:95:69:22:c3:d9:9d:9d:9b:cd:e2:
                    16:c7:44:f3:e7:f8:2d:3c:7e:e3:7b:6b:f8:06:2d:
                    f2:07:d8:42:90:5d:05:04:bb:ea:c8:14:84:3e:0c:
                    19:7f:eb:d9:4b:14:29:48:b5:fe:01:bc:52:21:9b:
                    0e:54:7b:07:6d:58:cc:1b:a8:ec:c2:ff:96:ad:c4:
                    74:1a:8f:f7:e3:60:a5:8f:48:02:4b:59:9d:ca:2c:
                    27:86:ee:d6:4a:9a:09:da:9f:eb:5c:f1:88:c9:5f:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:59:1C:0A:10:A8:D1:7C:0F:51:45:D4:82:EF:3A:AD:6B:A5:F8:59
            X509v3 Authority Key Identifier:
                keyid:EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/323830343a336662303a3a2f33322d3332203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:8b:0f:41:cc:0d:df:93:ba:47:af:96:e5:cd:28:99:d8:af:
         53:85:4d:b1:97:44:6d:9a:40:e6:57:2a:83:a1:56:cd:d9:6d:
         34:12:71:ec:8a:89:cf:92:23:dc:bd:c5:49:27:4e:1d:62:eb:
         56:11:4c:ad:b1:6c:56:1b:ab:08:64:b5:81:7a:bb:f5:9b:99:
         85:5b:d4:59:af:07:44:37:0c:74:6e:77:53:ce:68:56:d4:44:
         95:06:e9:fa:34:61:a3:4b:e6:14:4d:ba:b3:a8:08:44:1a:2f:
         86:1e:7d:9e:eb:18:e9:f1:23:82:50:04:88:b7:fa:cd:7a:e1:
         f7:0f:b3:c9:84:e3:98:73:76:7e:78:2e:ce:e7:90:9d:42:1f:
         d3:b6:99:99:0f:8d:68:66:47:8b:d1:f1:0f:56:91:ac:ea:7e:
         22:36:27:33:94:c6:ee:3b:67:43:f3:0c:a3:ba:6d:30:79:f9:
         f3:52:dd:b0:c0:39:5a:7e:42:4f:ee:26:a0:b2:b2:47:78:82:
         2a:82:7f:55:85:88:8c:5f:34:11:5d:94:f9:e8:fc:05:4b:e6:
         3e:df:d9:ad:c8:5b:5e:11:48:4a:d6:ea:8c:66:89:1d:00:ef:
         a7:2d:ac:36:ba:fe:41:69:f8:a4:1e:91:36:77:c5:28:9d:79:
         b7:e7:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:03:25 2026 by rpki-client