Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d3335203d3e20323733353137.roa
File:                     323830343a386664633a3a2f33322d3335203d3e20323733353137.roa (raw, json)
Hash identifier:          bUoIELTLRhWNQGUNHt6u6SumQ/FofOlMLRebzVGAFcQ=
Subject key identifier:   7B:22:14:40:1D:55:91:A3:F3:AA:7B:2D:02:ED:13:F3:F3:79:C9:2F
Certificate issuer:       /CN=E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D
Certificate serial:       0F063E33CF9CF743B0AF987348C0CDD497EAB457
Authority key identifier: E7:B9:E4:1C:50:9D:DF:DE:9E:11:B9:A9:93:8D:39:BE:97:F5:66:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d3335203d3e20323733353137.roa
Signing time:             Wed 10 Jun 2026 19:45:04 +0000
ROA not before:           Wed 10 Jun 2026 19:40:04 +0000
ROA not after:            Wed 09 Jun 2027 19:45:04 +0000
asID:                     273517
IP address blocks:        2804:8fdc::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.crl
                          rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:3e:33:cf:9c:f7:43:b0:af:98:73:48:c0:cd:d4:97:ea:b4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D
        Validity
            Not Before: Jun 10 19:40:04 2026 GMT
            Not After : Jun  9 19:45:04 2027 GMT
        Subject: CN=7B2214401D5591A3F3AA7B2D02ED13F3F379C92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:da:16:09:da:4a:38:31:2f:d0:4d:ee:d9:
                    29:d3:42:21:ed:d4:67:48:e9:32:f6:c6:88:b1:e5:
                    55:b4:5a:e5:79:d3:42:1c:7c:51:19:3e:85:6c:2b:
                    aa:e5:52:ab:61:f0:aa:a4:17:f5:ae:fb:7b:b3:b1:
                    fb:b4:71:98:69:51:a9:24:87:7a:04:f8:d0:c8:3f:
                    73:f8:7a:96:43:75:ff:dd:f9:d3:b9:8c:0c:d4:e4:
                    3e:d8:f7:ff:28:62:21:dd:ae:e8:f1:f6:1e:91:19:
                    30:2f:ba:48:fb:7f:d1:c1:2a:f9:69:7b:6f:a0:73:
                    4a:e2:44:ea:60:72:9f:28:32:0d:bf:0a:a6:43:53:
                    d7:f0:9d:f9:50:b2:14:86:c9:59:e0:78:79:e5:64:
                    99:b5:fb:ad:99:7f:6c:60:d2:69:dd:40:a4:2d:57:
                    63:44:9c:dd:80:55:1c:2f:3e:d6:12:db:69:c9:02:
                    31:ee:66:28:ab:35:78:fc:95:5a:d3:15:f9:d6:60:
                    51:1b:9f:fa:a7:e3:c6:bc:c3:70:c8:63:69:61:b8:
                    50:fd:e6:7d:5e:51:61:88:a6:78:ef:e0:c6:6a:29:
                    cd:c0:f0:09:55:23:02:81:45:0e:68:ab:44:c3:61:
                    5d:2d:1c:92:cc:8e:c6:68:d1:a8:d0:d9:57:9e:37:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:22:14:40:1D:55:91:A3:F3:AA:7B:2D:02:ED:13:F3:F3:79:C9:2F
            X509v3 Authority Key Identifier:
                keyid:E7:B9:E4:1C:50:9D:DF:DE:9E:11:B9:A9:93:8D:39:BE:97:F5:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7B9E41C509DDFDE9E11B9A9938D39BE97F5662D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A89bSVDwNxiePN6M8BSJDHMVH3UpgYjFxRnSFZiE4kBX/0/323830343a386664633a3a2f33322d3335203d3e20323733353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:a9:07:65:1b:38:c5:7c:b6:be:98:7a:f2:7e:5b:02:c4:
         45:ad:12:f6:51:58:f3:5a:6d:a1:ce:f2:45:55:c5:84:96:70:
         08:50:be:06:4f:12:33:af:e8:86:62:d9:91:49:5e:0a:fb:05:
         58:e5:db:96:4f:1c:29:54:f2:d6:8a:d6:f2:46:7e:3c:ed:ea:
         9c:03:24:60:bb:0c:de:38:ee:62:25:a0:37:9e:d6:9a:f0:ab:
         3b:66:30:5d:35:43:d6:9d:7a:52:75:bd:b5:31:6d:a6:c5:3f:
         d7:96:38:d4:b0:93:66:53:5f:b6:4b:36:5d:bf:30:1c:61:09:
         fa:f2:40:eb:7d:7c:5e:40:99:d5:73:12:b7:ea:33:29:32:d2:
         01:5c:ef:60:9c:8b:66:f6:61:6c:52:c1:d8:42:01:ed:db:11:
         f2:e2:ab:dd:18:d8:ef:22:00:9a:c5:d0:aa:93:5c:62:64:e3:
         e1:eb:b0:18:7a:62:c2:90:fb:ae:18:d5:54:69:06:41:57:2c:
         3a:64:74:2e:fa:13:9f:a7:cc:f9:bc:11:cc:15:d4:c8:7d:22:
         e7:15:64:a4:9b:ae:5d:8a:94:2b:05:32:58:7d:b7:5c:31:c0:
         cc:cb:6c:f9:a7:5d:c8:3a:1b:67:b9:eb:e8:ec:a2:53:00:5a:
         22:be:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:44 2026 by rpki-client