Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/323830343a386661303a3a2f33322d3334203d3e20323733353032.roa
File:                     323830343a386661303a3a2f33322d3334203d3e20323733353032.roa (raw, json)
Hash identifier:          0BtIX/XkYzDSnu1ermEMxRxj1sN1evMf1sDfUyuJLFE=
Subject key identifier:   80:1E:DC:3A:6B:B7:87:A2:95:D5:08:92:F1:2C:1D:E2:95:00:BE:2B
Certificate issuer:       /CN=C770E73CBB311CA52AFF939067AA5EEEB15CD1BD
Certificate serial:       7D2850573F7D35EAE96BADCF939F3B8C5DBE2755
Authority key identifier: C7:70:E7:3C:BB:31:1C:A5:2A:FF:93:90:67:AA:5E:EE:B1:5C:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/323830343a386661303a3a2f33322d3334203d3e20323733353032.roa
Signing time:             Thu 11 Jun 2026 18:11:30 +0000
ROA not before:           Thu 11 Jun 2026 18:06:30 +0000
ROA not after:            Thu 10 Jun 2027 18:11:30 +0000
asID:                     273502
IP address blocks:        2804:8fa0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.crl
                          rsync://rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:28:50:57:3f:7d:35:ea:e9:6b:ad:cf:93:9f:3b:8c:5d:be:27:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C770E73CBB311CA52AFF939067AA5EEEB15CD1BD
        Validity
            Not Before: Jun 11 18:06:30 2026 GMT
            Not After : Jun 10 18:11:30 2027 GMT
        Subject: CN=801EDC3A6BB787A295D50892F12C1DE29500BE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:e1:7f:53:0b:f2:27:f8:07:ab:0e:9b:4c:
                    48:fb:45:cc:ff:f2:55:21:99:2d:57:43:c7:27:db:
                    d3:1f:1b:ef:cf:2a:57:df:d6:82:3b:7a:c3:89:0c:
                    c7:25:fd:80:f8:3b:ab:7a:1d:bf:c8:5a:33:bd:87:
                    3e:95:ca:61:30:38:6f:5e:23:f7:c4:27:df:d3:43:
                    f8:58:c5:2e:d9:03:f5:36:42:b5:c7:80:a0:15:d2:
                    3f:8f:5e:8e:78:e2:24:a7:98:55:10:80:d2:97:9e:
                    f9:55:48:76:b1:9c:61:3d:e7:07:46:07:df:21:e7:
                    d3:d1:9a:b4:3c:f2:8a:f0:ff:df:64:39:52:42:29:
                    6f:c4:ee:66:88:54:36:cd:5b:6b:54:74:43:da:4e:
                    ba:08:7b:26:e8:0a:1e:80:28:22:9d:c7:fc:90:18:
                    53:73:92:5e:f8:65:26:17:49:96:80:ea:15:a3:eb:
                    2c:93:a0:6a:49:24:2b:3e:f2:b7:ea:d3:05:10:6b:
                    9c:03:d0:ad:a9:d0:6a:e3:00:1b:45:89:45:6f:9a:
                    52:6f:b5:ec:e8:7b:a1:4e:d0:48:7e:d0:c9:44:44:
                    38:79:c0:28:dc:81:06:f4:76:f1:a9:e1:c6:71:31:
                    18:ba:00:ed:c2:5e:cd:37:77:1c:73:51:64:7b:8a:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1E:DC:3A:6B:B7:87:A2:95:D5:08:92:F1:2C:1D:E2:95:00:BE:2B
            X509v3 Authority Key Identifier:
                keyid:C7:70:E7:3C:BB:31:1C:A5:2A:FF:93:90:67:AA:5E:EE:B1:5C:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C770E73CBB311CA52AFF939067AA5EEEB15CD1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2GMfc6Mq3wpkMVejYYCEHFod7q28GmeP17XyP9ZMsZ4/0/323830343a386661303a3a2f33322d3334203d3e20323733353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:96:ae:cb:ed:26:8a:db:76:b6:8e:cc:45:00:c4:28:ef:d9:
         21:85:68:0f:48:c1:da:19:ab:05:49:1d:d3:bd:54:e0:86:79:
         3e:9d:3b:a8:b3:56:4b:04:cf:fe:d3:b1:9a:79:e9:34:a1:8e:
         13:4c:51:d6:a2:05:f7:29:04:4c:67:9c:b4:65:69:91:98:9e:
         13:f5:a6:0b:c3:35:bc:23:65:32:a2:a1:d8:ce:4a:c4:5f:1f:
         83:9f:25:45:15:70:12:f9:7a:d6:ce:2c:b9:6e:2a:f3:a9:b0:
         8c:8b:01:c6:49:17:bf:2e:4d:57:e6:67:0a:6d:df:89:19:67:
         6a:22:60:80:09:69:c1:77:7b:3b:73:c0:16:90:39:75:bc:5d:
         e1:ad:15:9a:2d:ab:05:dd:82:1c:74:13:71:42:f2:ab:53:02:
         64:56:d5:3c:ec:08:92:dc:24:78:00:23:c2:aa:40:97:ee:08:
         ad:b6:95:52:7c:a5:cc:db:1c:e8:b1:11:1c:b6:f5:62:b6:69:
         33:f0:93:87:32:c8:0d:13:74:95:6c:52:b1:68:eb:57:07:6c:
         38:93:31:7b:9b:5c:dc:ea:ed:9d:6c:21:ff:a3:14:e1:bb:3d:
         d4:9d:88:22:6a:41:50:34:cb:88:f5:b1:57:b8:d3:56:6e:0f:
         93:fd:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:22:34 2026 by rpki-client