Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/323830343a383234303a3a2f33322d3438203d3e20323732353038.roa
File:                     323830343a383234303a3a2f33322d3438203d3e20323732353038.roa (raw, json)
Hash identifier:          zt1SFnyBViNTsxTfqshRQlcco6qHA7SCoY1SiV3a2F8=
Subject key identifier:   CF:1F:E7:C7:B7:4F:E3:0C:40:F5:1D:79:48:B1:42:7A:66:C0:40:A7
Certificate issuer:       /CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
Certificate serial:       397D2226119C3F010E59D9C4A493D2034190F92B
Authority key identifier: 13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/323830343a383234303a3a2f33322d3438203d3e20323732353038.roa
Signing time:             Sat 25 Jul 2026 15:22:56 +0000
ROA not before:           Sat 25 Jul 2026 15:17:56 +0000
ROA not after:            Sat 24 Jul 2027 15:22:56 +0000
asID:                     272508
IP address blocks:        2804:8240::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl
                          rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 09:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:22:26:11:9c:3f:01:0e:59:d9:c4:a4:93:d2:03:41:90:f9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13444CACBA70082038368F9FE638A30F9C9B0F6B
        Validity
            Not Before: Jul 25 15:17:56 2026 GMT
            Not After : Jul 24 15:22:56 2027 GMT
        Subject: CN=CF1FE7C7B74FE30C40F51D7948B1427A66C040A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:61:9c:68:21:96:54:81:b8:c0:ab:da:a1:
                    56:b0:ea:89:d0:5c:4d:f0:12:d4:74:88:33:1a:0c:
                    cd:08:e2:fd:0b:a9:9e:fa:8a:97:5e:8c:29:c9:aa:
                    d6:6b:09:92:f3:c8:af:54:70:51:84:9d:9d:7d:69:
                    25:0b:06:85:1a:04:05:21:84:b3:59:93:5d:fd:fa:
                    73:fe:21:b3:42:0e:52:cd:bf:0e:e6:22:95:a8:53:
                    33:af:f5:2b:a4:b2:42:a8:2c:1d:04:9c:00:28:11:
                    3f:e9:e6:1f:1a:f6:c8:f2:99:d1:7e:ed:b6:dc:27:
                    2c:05:fd:ee:ce:cc:2c:9f:a0:3e:3c:6a:a6:92:fa:
                    1f:07:75:79:c2:07:b7:cc:d1:14:75:e1:58:91:05:
                    9f:5b:71:35:88:b1:47:c4:e1:20:1e:10:67:c3:ad:
                    75:cd:1d:e5:24:ea:71:a1:b5:0a:af:3e:75:b3:2e:
                    6e:00:89:2a:d7:28:f2:e9:ef:3a:b7:73:f4:00:13:
                    18:b1:ad:72:af:f1:38:c1:1c:c4:91:07:ef:38:7a:
                    9c:37:aa:cd:f2:67:fa:6f:3f:a7:3c:54:99:51:5a:
                    f9:ac:f9:1b:63:32:41:c9:55:9a:09:dc:9a:d6:be:
                    a7:20:7a:44:0f:8e:ab:d2:34:e3:ba:25:3e:c8:3d:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:E7:C7:B7:4F:E3:0C:40:F5:1D:79:48:B1:42:7A:66:C0:40:A7
            X509v3 Authority Key Identifier:
                keyid:13:44:4C:AC:BA:70:08:20:38:36:8F:9F:E6:38:A3:0F:9C:9B:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/13444CACBA70082038368F9FE638A30F9C9B0F6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13444CACBA70082038368F9FE638A30F9C9B0F6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRcn5bfRYzVkUCnkKtS2iibdWmwTWD1kgyes5dXidZRF/0/323830343a383234303a3a2f33322d3438203d3e20323732353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8240::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:c5:d8:a1:49:84:ea:cd:d5:b3:c2:dd:ad:d6:85:f8:79:
         c7:6c:b8:64:a9:6f:25:00:d2:78:18:49:c2:2f:af:9c:db:ad:
         ad:b5:52:26:e1:32:69:47:72:68:b1:8b:9d:8e:91:57:f1:27:
         b6:fd:8a:46:c1:56:d2:ed:8c:e7:3f:e2:b0:65:08:d4:85:81:
         b2:a6:53:1f:95:da:c0:f3:62:32:1b:fa:20:2d:04:a6:63:fe:
         59:78:6a:ab:25:d5:f8:35:b4:cb:57:84:30:7b:71:73:5b:38:
         31:d6:1f:48:86:cf:d4:1e:9d:96:98:bd:b5:2a:b3:e3:2f:1d:
         84:44:a0:3e:96:03:7e:8e:88:01:e2:7c:29:41:79:2c:fb:de:
         9e:31:72:c0:45:62:dc:5a:67:b1:53:9b:69:0d:22:27:fa:2a:
         a5:18:94:7f:db:04:75:bc:42:cd:da:bc:e3:92:23:20:1e:d4:
         57:a8:66:83:2f:ad:4f:65:5e:34:55:ba:9d:54:99:38:74:e2:
         a2:c3:4a:9d:4f:30:3c:3c:d9:17:4e:49:bb:cd:9c:d9:cf:41:
         ad:cc:84:2b:78:09:2e:09:e2:27:08:b3:5d:70:db:aa:59:b9:
         5d:dd:4f:56:a5:9f:6b:61:78:92:73:5f:7f:e4:a1:50:08:cf:
         88:cf:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:25:59 2026 by rpki-client