Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/323830343a316161343a3a2f33322d3333203d3e203631383733.roa
File:                     323830343a316161343a3a2f33322d3333203d3e203631383733.roa (raw, json)
Hash identifier:          n/x1lIMoW6Dyg9Acht0BpAEZtXXyx+xp0ohLnk+E2EU=
Subject key identifier:   76:2F:A7:03:1F:81:2D:05:68:1C:D6:9A:CE:3B:A4:80:58:AB:32:0F
Certificate issuer:       /CN=D282C434761DFE35CC47D787CB5B49E8C70879C7
Certificate serial:       1E8FCDF29175B40378059E52EF099ACBF968A05A
Authority key identifier: D2:82:C4:34:76:1D:FE:35:CC:47:D7:87:CB:5B:49:E8:C7:08:79:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D282C434761DFE35CC47D787CB5B49E8C70879C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/323830343a316161343a3a2f33322d3333203d3e203631383733.roa
Signing time:             Sat 25 Jul 2026 11:49:32 +0000
ROA not before:           Sat 25 Jul 2026 11:44:32 +0000
ROA not after:            Sat 24 Jul 2027 11:49:32 +0000
asID:                     61873
IP address blocks:        2804:1aa4::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/D282C434761DFE35CC47D787CB5B49E8C70879C7.crl
                          rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/D282C434761DFE35CC47D787CB5B49E8C70879C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D282C434761DFE35CC47D787CB5B49E8C70879C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 14:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:cd:f2:91:75:b4:03:78:05:9e:52:ef:09:9a:cb:f9:68:a0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D282C434761DFE35CC47D787CB5B49E8C70879C7
        Validity
            Not Before: Jul 25 11:44:32 2026 GMT
            Not After : Jul 24 11:49:32 2027 GMT
        Subject: CN=762FA7031F812D05681CD69ACE3BA48058AB320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:d4:7c:fa:f5:89:46:b3:b8:cd:b5:7a:40:
                    27:b5:4e:02:46:dc:a1:05:78:57:c2:07:a5:9e:90:
                    43:33:dc:f1:1e:c6:8a:4d:32:84:bc:9f:68:68:29:
                    43:ac:47:f6:33:f3:f7:75:4d:57:87:ab:55:bc:06:
                    05:14:20:2f:0c:2b:d4:03:51:8d:27:9a:c0:a2:9a:
                    d2:4a:9b:61:82:be:7b:27:0f:b7:ce:77:f2:fe:1f:
                    f9:55:36:29:eb:76:39:10:71:c4:ef:0d:b8:b0:fd:
                    bd:d6:b8:44:ba:04:33:a1:c3:e0:ba:fd:30:bc:66:
                    20:d5:b0:9e:fc:5f:4e:d2:b1:8b:16:d9:c5:52:c9:
                    ec:c2:85:73:f0:54:c3:22:eb:fe:11:5d:77:2d:d9:
                    e8:3d:d5:46:11:f3:a9:a8:7f:15:83:8d:be:06:22:
                    c2:26:34:0c:93:c7:4d:c3:b8:ae:4c:2e:9f:84:0f:
                    4d:a8:e9:d5:16:45:04:44:d3:32:82:1b:ca:8a:6e:
                    74:6d:aa:9f:ce:33:77:92:f0:02:e6:ff:f6:81:02:
                    45:f9:29:59:8c:1f:df:54:c8:27:d4:75:19:d8:5b:
                    c8:16:af:16:e3:be:91:9b:ce:1c:d4:8f:59:9d:ff:
                    c8:99:ce:6f:54:68:b8:a6:1f:b5:b9:4b:be:81:c1:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2F:A7:03:1F:81:2D:05:68:1C:D6:9A:CE:3B:A4:80:58:AB:32:0F
            X509v3 Authority Key Identifier:
                keyid:D2:82:C4:34:76:1D:FE:35:CC:47:D7:87:CB:5B:49:E8:C7:08:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/D282C434761DFE35CC47D787CB5B49E8C70879C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D282C434761DFE35CC47D787CB5B49E8C70879C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NkeyBvC69A3LmtCgkMFTRd6mT5K9NtCkAPQcYMrKPzg/0/323830343a316161343a3a2f33322d3333203d3e203631383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:b2:96:6d:3f:7c:b2:20:01:ef:03:cd:7d:e5:4a:75:c4:
         9a:1a:e3:9d:4e:c5:a1:64:dc:b4:c4:88:4c:47:ea:d1:c6:19:
         b7:07:d2:74:f4:aa:e8:f3:d8:db:3e:1c:f1:00:e7:38:f1:b6:
         4c:cf:a1:19:07:d3:c2:b5:f6:37:4e:de:f4:78:ce:36:51:ad:
         cb:b7:39:d6:58:c1:0b:2d:dc:ad:25:af:2e:be:67:2e:fa:41:
         0b:57:94:b2:e3:f9:e8:e1:87:6c:41:a3:a6:dc:85:a0:3a:a3:
         05:b6:57:b0:24:8f:9b:75:39:85:28:11:8e:77:16:c3:05:ca:
         cb:76:7e:79:40:70:50:d4:b9:f1:08:fb:7f:e7:6b:69:f1:d4:
         8f:c0:fb:7d:7f:5e:95:1b:b7:44:38:34:11:2b:7a:85:16:a3:
         b7:43:10:80:d4:a8:a0:b1:79:e2:71:77:44:3e:11:1b:5d:21:
         05:e5:03:b9:b7:d5:f8:bd:76:04:d3:5b:07:d0:3b:57:81:1d:
         65:dd:c6:c7:89:85:53:e2:82:37:64:bf:45:ab:ca:c6:65:96:
         9e:44:95:81:e2:03:01:60:d4:9c:72:9f:2a:2b:4f:6c:71:34:
         b6:2d:cf:10:c2:65:9a:af:b5:37:5d:8b:78:67:98:61:95:5a:
         7b:1f:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:58:44 2026 by rpki-client