Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/323830343a323835383a3a2f34342d3434203d3e20323633393537.roa
File:                     323830343a323835383a3a2f34342d3434203d3e20323633393537.roa (raw, json)
Hash identifier:          BwUeLNbL9eTadq5CmB8mLsLntrYsRI2aSC7fLHw5Js4=
Subject key identifier:   32:B2:88:F0:3A:CF:0A:60:0C:DF:06:E7:8D:E9:ED:94:FE:6B:79:CC
Certificate issuer:       /CN=810D658787BD89F5CDCA9BF1A698D06E4A2B784B
Certificate serial:       2771BB9794695FC320616AE2FD045F9A248E5E26
Authority key identifier: 81:0D:65:87:87:BD:89:F5:CD:CA:9B:F1:A6:98:D0:6E:4A:2B:78:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/323830343a323835383a3a2f34342d3434203d3e20323633393537.roa
Signing time:             Sat 25 Jul 2026 13:49:32 +0000
ROA not before:           Sat 25 Jul 2026 13:44:32 +0000
ROA not after:            Sat 24 Jul 2027 13:49:32 +0000
asID:                     263957
IP address blocks:        2804:2858::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.crl
                          rsync://rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 16:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:71:bb:97:94:69:5f:c3:20:61:6a:e2:fd:04:5f:9a:24:8e:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810D658787BD89F5CDCA9BF1A698D06E4A2B784B
        Validity
            Not Before: Jul 25 13:44:32 2026 GMT
            Not After : Jul 24 13:49:32 2027 GMT
        Subject: CN=32B288F03ACF0A600CDF06E78DE9ED94FE6B79CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:da:7a:16:33:11:d8:26:5c:3e:50:0d:6f:
                    43:f4:75:97:3f:7e:20:9c:9b:ba:ea:68:17:81:a1:
                    2c:df:85:09:29:80:a3:00:9b:77:e7:3e:03:f0:7a:
                    39:5c:52:ed:38:2f:05:49:3a:81:0a:2e:cb:d7:96:
                    35:e1:40:dd:55:fe:68:19:c2:b6:a6:e5:bb:a2:97:
                    10:47:ee:93:5f:4e:22:4c:a7:09:49:46:62:63:11:
                    ee:df:d8:48:e2:e6:af:1f:0c:3c:4d:96:68:a1:61:
                    09:db:23:8e:9a:3c:4c:6d:0b:b0:43:22:13:cb:f2:
                    b1:22:26:5a:5a:c6:48:52:85:e7:c1:82:52:7a:c7:
                    7a:d1:56:8d:4e:68:e7:29:57:0a:ff:73:b4:a3:96:
                    af:d7:f6:96:f1:03:57:cb:34:13:82:ac:31:1c:1f:
                    01:e7:93:be:51:1c:ea:0d:5a:87:71:5d:30:06:60:
                    51:fb:33:89:c2:0e:1d:ea:86:db:13:9f:62:95:85:
                    99:41:22:c5:8b:98:7d:78:60:b5:85:11:67:7e:f4:
                    1c:64:63:59:5a:40:9c:e1:14:e6:3f:c3:de:d4:17:
                    4d:ca:0a:02:7a:49:85:66:71:a0:0d:fd:65:6f:e2:
                    17:8c:38:67:01:4e:30:0d:5e:13:e8:04:b5:68:74:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:88:F0:3A:CF:0A:60:0C:DF:06:E7:8D:E9:ED:94:FE:6B:79:CC
            X509v3 Authority Key Identifier:
                keyid:81:0D:65:87:87:BD:89:F5:CD:CA:9B:F1:A6:98:D0:6E:4A:2B:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/810D658787BD89F5CDCA9BF1A698D06E4A2B784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BofLjk6sivckZ1CtSZc73a7fpKRJzAzUmzej4mA9J6wA/0/323830343a323835383a3a2f34342d3434203d3e20323633393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2858::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:76:b5:45:76:a8:fc:66:f4:ee:ec:17:b9:8d:37:5c:35:9c:
         c1:7a:5b:9e:7c:bc:e2:31:5e:95:86:da:f8:c3:4a:02:28:79:
         f4:c6:6f:f9:0c:a9:8a:48:53:4b:90:93:ca:f9:1c:66:b6:a8:
         20:b6:d0:33:24:89:02:44:85:36:03:bc:cf:57:2f:d2:02:78:
         aa:54:45:ff:c3:3d:a8:3e:f3:0a:0e:1f:8c:25:51:b5:31:96:
         39:e7:0a:26:7c:1e:41:67:a6:eb:b6:a3:dd:f3:93:99:be:54:
         4c:a8:57:af:20:15:b1:0e:17:fc:ff:c0:d0:33:62:c3:6c:2a:
         2e:c1:5e:fa:e5:db:0a:ae:f5:f2:12:2a:2d:f6:40:81:2a:26:
         0d:b3:69:2e:ad:59:ec:62:c7:e7:d8:7f:89:a1:11:b4:70:9d:
         e4:95:fa:c6:38:7b:ef:92:dd:4a:56:83:31:85:fd:49:94:6e:
         23:68:6f:63:51:2e:ec:dd:cb:0b:ce:b5:a1:59:bb:e4:75:f4:
         12:c3:19:5a:09:ab:a3:61:d6:07:6b:47:36:a0:e9:85:2b:c0:
         72:ef:30:6e:16:e8:01:85:df:b1:48:33:62:9f:03:ff:32:be:
         48:ea:cb:0e:0e:2c:19:a1:a3:9c:3a:3f:a8:b7:40:99:3f:2d:
         61:b4:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:35 2026 by rpki-client