Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d313238203d3e203533303338.roa
File:                     323830343a3634383a3a2f33322d313238203d3e203533303338.roa (raw, json)
Hash identifier:          4ubFVccbIs0B2fmCXkl+T0MKKUPN2HpConl3QsE5erg=
Subject key identifier:   65:A0:F6:68:83:87:04:78:30:4D:24:D4:56:D5:9B:2F:31:1F:F3:49
Certificate issuer:       /CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
Certificate serial:       1CAFCF51A0800200CC4EE1FCE7DA0415B7C04ABD
Authority key identifier: D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d313238203d3e203533303338.roa
Signing time:             Tue 28 Jul 2026 20:01:39 +0000
ROA not before:           Tue 28 Jul 2026 19:56:39 +0000
ROA not after:            Tue 27 Jul 2027 20:01:39 +0000
asID:                     53038
IP address blocks:        2804:648::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:af:cf:51:a0:80:02:00:cc:4e:e1:fc:e7:da:04:15:b7:c0:4a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
        Validity
            Not Before: Jul 28 19:56:39 2026 GMT
            Not After : Jul 27 20:01:39 2027 GMT
        Subject: CN=65A0F66883870478304D24D456D59B2F311FF349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:e8:94:c2:dd:1e:d7:08:82:cc:b1:3a:72:
                    48:67:ce:75:03:4b:33:71:47:02:b1:3e:e9:a2:0a:
                    38:bd:71:75:e3:a3:cc:31:5c:41:48:a1:d4:14:4d:
                    24:5c:4b:1f:05:bb:30:41:b5:aa:70:89:a4:5c:ac:
                    66:09:de:0a:22:ee:9c:68:54:cc:ed:a6:a4:99:80:
                    2d:ea:92:8f:53:bc:2b:d8:2c:ad:91:d4:04:7c:ff:
                    21:dd:24:4e:a5:d8:58:c8:76:de:ed:98:31:7c:93:
                    d6:8e:be:ac:9e:4c:51:5f:95:c8:14:ae:d3:b6:91:
                    48:f6:fd:2a:43:12:23:c2:b3:0b:87:96:d7:6b:d6:
                    1d:27:e1:ab:25:e2:73:d9:cd:47:2a:51:a3:5b:6c:
                    19:55:e1:30:a9:42:68:fa:76:f8:68:f8:95:96:78:
                    5f:1d:2c:e8:14:c2:73:72:f9:3c:2e:75:72:b8:42:
                    a0:5a:a3:c1:0a:0d:86:10:74:15:7a:95:31:9f:23:
                    dd:5a:3d:f6:99:89:e0:86:2e:8f:0e:70:57:b0:72:
                    a6:55:76:a1:b0:e3:b9:21:34:24:f2:7a:d7:c8:68:
                    50:25:d1:f7:5f:5b:e3:42:6a:a7:df:bf:32:61:49:
                    2c:30:c4:d3:15:dc:66:1f:51:f2:52:a2:97:fd:27:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:F6:68:83:87:04:78:30:4D:24:D4:56:D5:9B:2F:31:1F:F3:49
            X509v3 Authority Key Identifier:
                keyid:D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d313238203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:648::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:23:b9:84:db:62:ae:79:b8:d5:98:73:ed:d2:e8:25:53:7e:
         e5:4b:9b:3f:01:54:ec:d9:f8:72:32:fa:5b:e0:f1:9b:f0:58:
         62:40:1f:bb:ab:1a:34:86:20:52:5f:d4:86:cd:dc:75:f7:60:
         87:80:61:99:04:a0:3c:a0:4f:57:24:2a:9e:b0:4a:12:e7:a7:
         4e:d5:cc:46:c7:be:fc:a2:b2:3f:30:c5:02:93:79:a6:cd:44:
         e9:64:e3:78:99:cb:f5:06:3b:5b:50:81:c7:50:3a:85:8f:71:
         d8:fa:33:7e:73:67:02:a3:d0:31:5c:e3:7c:75:aa:8c:fb:f2:
         8b:82:66:4b:8d:17:2d:23:7d:33:5f:09:aa:93:61:f8:d6:97:
         98:aa:4b:f4:a2:07:96:cf:22:7f:bb:88:58:c8:03:a6:a2:20:
         af:91:f1:fc:6a:4e:9c:f1:52:da:79:82:29:ad:72:2f:26:5d:
         e5:da:3a:c7:36:e0:7e:b2:8f:fa:b6:36:54:64:99:bf:88:50:
         f9:28:0a:95:37:6e:aa:9f:de:c3:8b:d5:ce:5e:b3:9d:f5:e5:
         d2:97:3f:9c:d3:d7:55:a6:04:87:8d:9d:b0:0c:54:c0:35:a1:
         d8:04:dd:47:d8:fe:57:f4:0e:39:ab:d8:02:06:ec:30:ea:2b:
         f8:e1:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:32 2026 by rpki-client