Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d313238203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33322d313238203d3e20323734373236.roa (raw, json)
Hash identifier:          uMMvlyHYlwI6h6SMNfak16snAgPlkAmNBBhR4TWU3Fg=
Subject key identifier:   47:05:40:C0:CF:50:4A:68:1C:14:5C:E4:25:B8:98:0F:C8:D3:F1:7A
Certificate issuer:       /CN=7EC62DB487EE3828113118AA8CCABFC54185803A
Certificate serial:       77B7EDBD75EE1707DB5389653C9F7CE0CFC030DC
Authority key identifier: 7E:C6:2D:B4:87:EE:38:28:11:31:18:AA:8C:CA:BF:C5:41:85:80:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC62DB487EE3828113118AA8CCABFC54185803A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d313238203d3e20323734373236.roa
Signing time:             Thu 04 Jun 2026 13:23:30 +0000
ROA not before:           Thu 04 Jun 2026 13:18:30 +0000
ROA not after:            Thu 03 Jun 2027 13:23:30 +0000
asID:                     274726
IP address blocks:        2804:92a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/7EC62DB487EE3828113118AA8CCABFC54185803A.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/7EC62DB487EE3828113118AA8CCABFC54185803A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC62DB487EE3828113118AA8CCABFC54185803A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:ed:bd:75:ee:17:07:db:53:89:65:3c:9f:7c:e0:cf:c0:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EC62DB487EE3828113118AA8CCABFC54185803A
        Validity
            Not Before: Jun  4 13:18:30 2026 GMT
            Not After : Jun  3 13:23:30 2027 GMT
        Subject: CN=470540C0CF504A681C145CE425B8980FC8D3F17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:9b:fd:76:f1:b0:cc:3d:ca:a3:ff:59:ee:
                    41:e3:fb:85:ac:09:7f:63:60:75:a8:d6:cb:69:76:
                    bc:84:78:2b:fb:b0:95:3a:bf:1a:dc:24:4b:3c:0c:
                    5e:07:ed:cf:96:d4:48:4e:c9:cd:fb:09:78:c0:92:
                    16:8e:13:39:c8:89:73:a4:fe:2a:af:9c:5e:09:d3:
                    18:87:04:39:1e:bd:4c:74:49:06:69:da:00:af:4c:
                    ac:45:82:c5:fc:77:ae:97:ad:ff:19:3a:26:a2:73:
                    2d:4c:fe:04:83:63:a4:09:d4:e2:d4:27:93:79:cb:
                    07:25:92:40:58:94:86:10:2c:0c:de:06:19:c0:12:
                    e6:bb:e6:b0:41:46:6d:d0:0f:73:a8:63:03:de:33:
                    65:5e:9c:de:54:fc:0e:b4:fa:59:94:1b:52:02:ca:
                    f5:1c:99:b6:7b:d5:ba:31:53:bf:b2:44:55:9a:23:
                    2f:e1:63:1a:bc:8e:7d:75:81:5d:bc:e6:27:5c:b6:
                    2f:25:28:42:22:fb:f5:5c:d4:80:27:92:15:f7:ab:
                    a3:07:0f:ca:e5:f4:86:b5:17:f4:3c:7b:8d:c0:17:
                    ce:c5:72:17:35:09:f8:9d:9d:5d:66:9d:33:89:fd:
                    aa:e5:0b:ba:1f:d0:5d:07:f9:9e:d7:f7:d2:c6:75:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:05:40:C0:CF:50:4A:68:1C:14:5C:E4:25:B8:98:0F:C8:D3:F1:7A
            X509v3 Authority Key Identifier:
                keyid:7E:C6:2D:B4:87:EE:38:28:11:31:18:AA:8C:CA:BF:C5:41:85:80:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/7EC62DB487EE3828113118AA8CCABFC54185803A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EC62DB487EE3828113118AA8CCABFC54185803A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33322d313238203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:16:fd:5e:00:d7:f4:f8:2a:6e:45:af:05:8d:52:b5:de:84:
         68:b0:26:68:85:f8:04:8a:0e:6c:ee:d9:f1:9a:e8:43:66:5f:
         74:31:68:54:8f:70:fa:fc:e7:bf:21:c7:70:88:6a:d0:52:92:
         08:3a:96:bf:8e:17:6f:ba:48:af:34:21:a5:7a:ea:83:fc:98:
         5b:43:ad:db:63:76:2e:4c:af:19:a6:25:79:ec:a1:84:eb:18:
         e3:22:cb:b3:64:26:a0:a0:11:14:a1:d4:ed:7e:6c:47:c0:f3:
         3d:2c:4d:2f:24:4b:36:a5:da:62:8b:12:15:e3:95:fa:4b:b8:
         47:59:3e:4c:bb:5f:16:b4:97:a4:23:66:c8:56:86:3a:20:e7:
         e9:a5:63:c6:d9:8c:84:26:d8:20:1b:b8:1c:04:63:f5:8d:7d:
         69:43:a7:94:44:e1:56:0c:d6:48:e1:7e:78:9d:1a:a6:e7:37:
         df:cb:fb:74:01:f7:8e:f8:a1:24:02:82:2a:d2:7d:e4:ae:ed:
         e5:bb:c4:d7:c4:1a:23:4a:16:28:0a:91:9f:aa:db:44:24:60:
         88:e4:7b:b5:0c:a1:c4:bc:a0:5b:6b:0d:7b:e8:84:02:22:a2:
         3c:73:a3:a6:6e:87:e8:6f:b0:03:23:7c:d2:cf:c8:f8:53:4c:
         7d:bd:5c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:01:47 2026 by rpki-client