Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f33322d3438203d3e20323634333434.roa
File:                     323830343a323637343a3a2f33322d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          m2zeFYVSwv5dk0dykyxcu2SMdrLTqQWtr2OsLGCJBX8=
Subject key identifier:   35:8A:95:02:CC:06:27:50:FF:A0:97:63:66:26:68:F2:4A:E6:14:FD
Certificate issuer:       /CN=7A1C2423C46D82BAAC95737EA77BA194C01EEB0F
Certificate serial:       04D6C803F208A9DA60ECD29C7CC048180EE3C65B
Authority key identifier: 7A:1C:24:23:C4:6D:82:BA:AC:95:73:7E:A7:7B:A1:94:C0:1E:EB:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f33322d3438203d3e20323634333434.roa
Signing time:             Thu 11 Jun 2026 18:00:14 +0000
ROA not before:           Thu 11 Jun 2026 17:55:14 +0000
ROA not after:            Thu 10 Jun 2027 18:00:14 +0000
asID:                     264344
IP address blocks:        2804:2674::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:c8:03:f2:08:a9:da:60:ec:d2:9c:7c:c0:48:18:0e:e3:c6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1C2423C46D82BAAC95737EA77BA194C01EEB0F
        Validity
            Not Before: Jun 11 17:55:14 2026 GMT
            Not After : Jun 10 18:00:14 2027 GMT
        Subject: CN=358A9502CC062750FFA09763662668F24AE614FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:f3:c0:a7:9f:9c:02:ba:24:af:fb:c4:4f:
                    39:8f:9a:80:6b:76:d7:e0:d9:ac:27:7e:68:70:a2:
                    cd:3b:1a:e8:dd:95:dd:11:da:55:52:fd:ad:09:b9:
                    79:ae:43:0d:18:c3:b2:b3:29:83:e3:57:99:dd:ea:
                    34:96:6e:fd:e8:bd:c7:72:d8:aa:94:bd:3e:e0:69:
                    0f:c2:38:44:89:53:7a:3a:40:4a:a5:45:a8:42:f3:
                    5f:41:5c:33:4f:73:ec:60:9b:49:21:ae:d3:83:67:
                    18:33:d0:b5:1b:ee:83:0f:b9:4c:51:23:fb:e0:06:
                    cd:45:8e:d3:e5:17:63:40:25:f6:7d:2d:4a:e7:1e:
                    4a:6f:85:0d:25:c3:47:1b:6e:8f:57:af:c7:67:63:
                    85:ae:a7:a7:fb:02:4e:f2:b4:fe:7e:c7:b5:ad:1a:
                    33:f0:f1:c4:6f:b1:41:2a:fb:ed:30:0f:f3:05:fc:
                    12:0c:1d:61:ec:a4:7d:05:8e:61:dd:d6:e1:61:a0:
                    cb:68:74:cc:14:8d:46:21:23:ff:97:7f:c7:ab:31:
                    c6:9d:cd:d1:b5:95:39:df:18:5c:97:34:5e:c1:9a:
                    5c:1a:aa:03:f9:83:01:ca:23:5a:93:35:1b:db:3c:
                    90:ae:78:dd:39:e6:cc:65:41:2d:84:ca:2e:9e:b7:
                    4d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:95:02:CC:06:27:50:FF:A0:97:63:66:26:68:F2:4A:E6:14:FD
            X509v3 Authority Key Identifier:
                keyid:7A:1C:24:23:C4:6D:82:BA:AC:95:73:7E:A7:7B:A1:94:C0:1E:EB:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A1C2423C46D82BAAC95737EA77BA194C01EEB0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f33322d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:c8:9c:ca:ab:08:83:f9:49:60:fd:0c:ba:37:89:33:82:
         11:10:13:07:f4:4a:da:eb:30:36:31:88:0c:ba:eb:bc:03:c9:
         16:0c:aa:01:83:18:9b:36:96:02:2f:25:d0:8a:21:c8:73:ee:
         2b:a9:cc:00:31:b3:ff:b7:64:5e:1f:0c:7c:25:ca:fe:61:0e:
         26:cb:58:c4:2c:2b:b0:1e:bf:de:ec:05:37:ed:88:f1:a7:42:
         c4:af:a3:21:08:c3:15:3e:20:70:19:43:7d:47:fc:ee:6b:70:
         9d:d1:8e:81:1a:ec:46:06:5e:6b:37:43:48:02:39:62:ac:c7:
         b4:82:2d:2b:82:25:c6:da:e5:bf:e2:85:5f:d8:57:78:b9:a8:
         54:b1:3c:87:80:9d:7a:a7:d5:18:5c:55:ed:5a:42:2b:f6:49:
         bd:53:fd:7b:68:31:d9:7a:74:73:15:5b:35:7a:52:e9:44:d4:
         20:0b:86:12:a5:c4:16:65:aa:dd:81:96:c2:fe:c6:d6:29:2d:
         60:b6:fc:aa:40:83:7f:77:54:65:85:27:6a:64:a2:2a:24:5a:
         6c:f5:01:39:d7:24:97:b8:8d:76:54:26:cb:c8:0a:cc:24:a9:
         a5:c8:3d:93:7a:67:97:8e:5f:ac:9c:99:ae:81:a1:9a:15:5d:
         75:b0:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:37:49 2026 by rpki-client