Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3438203d3e20323635303239.roa
File:                     323830343a333161383a3a2f33322d3438203d3e20323635303239.roa (raw, json)
Hash identifier:          phJx6PZ87FTGKvs7xnHG2aIfizN9insbjmDn3Abub0A=
Subject key identifier:   80:80:DF:31:3C:CB:CD:AC:07:07:C6:9E:F2:F0:F2:0E:A3:24:9D:AB
Certificate issuer:       /CN=7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5
Certificate serial:       4A55E474F1F29FF8BA7FA8893EE156B64FB7AE77
Authority key identifier: 7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3438203d3e20323635303239.roa
Signing time:             Tue 28 Jul 2026 11:08:45 +0000
ROA not before:           Tue 28 Jul 2026 11:03:45 +0000
ROA not after:            Tue 27 Jul 2027 11:08:45 +0000
asID:                     265029
IP address blocks:        2804:31a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.crl
                          rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 12:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:e4:74:f1:f2:9f:f8:ba:7f:a8:89:3e:e1:56:b6:4f:b7:ae:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5
        Validity
            Not Before: Jul 28 11:03:45 2026 GMT
            Not After : Jul 27 11:08:45 2027 GMT
        Subject: CN=8080DF313CCBCDAC0707C69EF2F0F20EA3249DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:9d:e9:12:3c:29:55:36:eb:0b:e9:3f:80:
                    86:29:3f:5f:8e:dd:65:a8:69:31:5c:ed:0c:c2:5d:
                    26:4d:d7:a4:55:9e:2b:0f:a1:c1:00:27:f8:ca:22:
                    4d:be:70:11:4c:12:b1:a8:77:00:8b:fd:a2:e3:13:
                    a0:30:fa:8f:ee:67:4d:41:fb:e4:e7:b9:4c:8b:e7:
                    a5:4c:af:78:01:07:56:c1:5a:c1:7b:e2:c0:38:f6:
                    d9:f0:fa:63:3b:3b:c3:c4:a4:45:d1:0c:1d:2a:27:
                    10:de:cc:56:33:40:5f:53:70:d3:b4:45:b0:38:fa:
                    d2:5e:2a:51:0a:5e:42:d8:78:9d:26:61:2b:1c:a3:
                    af:bf:0f:40:3a:db:b5:1b:1e:c1:1e:07:04:56:55:
                    2f:18:68:a2:c5:42:b6:c1:85:9b:7a:ec:e8:cc:7b:
                    1c:44:57:3a:b7:bf:85:c8:36:f0:9a:90:73:25:a9:
                    01:d0:cc:8d:4b:8d:3f:fa:b4:cc:54:5e:16:f6:ea:
                    00:7e:c7:99:a2:da:fd:8f:ee:04:c3:c7:0d:8e:33:
                    ef:9c:41:1a:7d:a3:bd:95:fb:52:5c:b1:8c:3a:7f:
                    7c:ca:a7:3f:83:7d:68:ce:bf:cb:a4:16:57:5f:08:
                    c9:71:9d:eb:01:cb:2c:19:3e:23:8e:c7:8e:0e:08:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:DF:31:3C:CB:CD:AC:07:07:C6:9E:F2:F0:F2:0E:A3:24:9D:AB
            X509v3 Authority Key Identifier:
                keyid:7C:C7:FE:AF:66:BD:90:E2:ED:09:2B:6E:9B:77:4D:F6:9C:E7:5A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CC7FEAF66BD90E2ED092B6E9B774DF69CE75AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GqgFFx74YGtPGqo8RS3Fty1CjTxepiPR1yYJ6svqqeTJ/0/323830343a333161383a3a2f33322d3438203d3e20323635303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:b1:aa:cb:78:a6:62:3a:39:8d:60:1b:b2:3d:2e:96:35:6d:
         fa:05:29:e4:90:a1:1f:f2:a1:07:82:38:33:5a:45:c4:b5:f5:
         e5:17:b6:e8:9c:f9:f9:a1:0c:17:ae:6c:92:e6:f2:4f:48:13:
         7f:ad:95:f2:ea:cf:48:52:bc:4a:ab:19:40:a2:8b:3a:d4:43:
         e7:4f:8e:ca:63:73:91:c0:65:92:5f:b9:71:f3:21:6e:ab:4b:
         41:b2:1f:69:37:bf:27:44:54:78:44:40:ed:c3:2d:61:0e:fb:
         d7:15:3d:77:1c:c3:0c:07:30:13:12:88:7c:53:e0:c0:d0:45:
         b4:65:c5:9a:e2:ad:37:3b:41:a4:4f:29:0a:2a:02:95:46:4d:
         d9:c4:01:c0:b7:40:20:d3:96:00:56:3e:bc:26:4b:4e:78:46:
         60:13:9a:35:45:89:79:d1:cb:ff:76:24:08:ba:ff:76:de:27:
         b3:e7:b8:21:5c:a2:04:04:7d:31:6f:2d:f1:1d:71:b1:75:dd:
         a1:cd:46:aa:bc:19:f4:c8:19:cd:00:6d:6e:c1:13:a8:fa:04:
         b5:89:44:c5:c6:48:3f:76:87:22:dc:98:d6:ee:74:8d:18:31:
         9d:15:3b:e5:f5:5d:3a:5d:cf:72:21:d1:ed:31:35:c2:e3:f0:
         e3:97:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:48:05 2026 by rpki-client