Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa
File:                     323830343a333864633a3a2f33322d3332203d3e20323636353036.roa (raw, json)
Hash identifier:          oxwrQBbVlk2WTO6iLzwjmiJ8+Lb8Y4FdWConI6dcX0U=
Subject key identifier:   B5:43:2C:76:16:C4:F8:3E:F4:CD:1F:11:4B:8F:41:D3:92:86:8E:D1
Certificate issuer:       /CN=D196CBB7864C30EC3736D079A81944C128A22071
Certificate serial:       53A1994B5FC10D1CFD0204514355223904AA9D0C
Authority key identifier: D1:96:CB:B7:86:4C:30:EC:37:36:D0:79:A8:19:44:C1:28:A2:20:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D196CBB7864C30EC3736D079A81944C128A22071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa
Signing time:             Wed 26 Aug 2026 20:05:46 +0000
ROA not before:           Wed 26 Aug 2026 20:00:46 +0000
ROA not after:            Wed 25 Aug 2027 20:05:46 +0000
asID:                     266506
IP address blocks:        2804:38dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D196CBB7864C30EC3736D079A81944C128A22071.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D196CBB7864C30EC3736D079A81944C128A22071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D196CBB7864C30EC3736D079A81944C128A22071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 10:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a1:99:4b:5f:c1:0d:1c:fd:02:04:51:43:55:22:39:04:aa:9d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D196CBB7864C30EC3736D079A81944C128A22071
        Validity
            Not Before: Aug 26 20:00:46 2026 GMT
            Not After : Aug 25 20:05:46 2027 GMT
        Subject: CN=B5432C7616C4F83EF4CD1F114B8F41D392868ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:a5:eb:2f:3b:e6:5b:75:4b:87:b4:04:0c:
                    4d:e5:22:3b:74:fb:e4:10:08:01:a9:07:c8:b4:28:
                    50:5e:19:8c:86:f5:e3:5d:7c:0e:f7:9a:c2:d1:50:
                    25:f1:20:af:30:30:50:cc:03:01:f4:85:3a:3f:e2:
                    4c:a3:4e:2e:32:ec:fb:28:35:ab:ff:e1:ed:8c:2c:
                    12:c6:01:7f:ec:26:39:ee:5c:bd:db:2e:44:77:75:
                    bb:be:84:4e:9b:72:92:ab:a3:ca:78:71:7c:49:7d:
                    f5:f9:c8:55:1e:39:50:25:00:1e:24:44:e4:c9:57:
                    ca:8a:6f:ec:59:89:f3:01:54:32:1b:bd:23:24:02:
                    c5:14:da:1c:1d:45:f0:e7:a0:ab:f0:db:4a:c3:21:
                    75:65:b6:32:14:76:b9:e1:54:64:a7:ec:7f:c9:5a:
                    19:72:d9:58:cf:38:41:be:32:d7:2d:b5:ac:ca:5a:
                    27:0e:4a:48:7d:9b:0e:d6:9b:55:58:2b:84:a2:4c:
                    58:5c:15:55:c8:10:cc:04:e0:98:36:c5:b2:64:7b:
                    8c:a7:71:cf:da:b2:16:c8:e0:ef:df:30:f7:ff:ef:
                    eb:5b:d7:79:05:52:35:fb:4f:0b:aa:4a:44:c2:fa:
                    df:1b:3c:e4:fa:48:9b:8e:01:bb:e4:5e:54:91:cc:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:2C:76:16:C4:F8:3E:F4:CD:1F:11:4B:8F:41:D3:92:86:8E:D1
            X509v3 Authority Key Identifier:
                keyid:D1:96:CB:B7:86:4C:30:EC:37:36:D0:79:A8:19:44:C1:28:A2:20:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/D196CBB7864C30EC3736D079A81944C128A22071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D196CBB7864C30EC3736D079A81944C128A22071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/0/323830343a333864633a3a2f33322d3332203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:43:23:5d:db:e2:de:f6:5e:52:bb:b0:60:4b:18:c4:e3:a5:
         75:6d:8f:73:7d:4a:ce:a3:1e:72:b5:54:31:69:d3:37:94:cc:
         82:32:fd:fe:22:0a:76:63:d5:2a:7a:58:c9:4e:94:2d:3d:fb:
         24:a5:59:42:1a:bf:81:06:24:63:99:1e:a7:13:b9:9a:c5:28:
         50:bd:bf:24:e4:a7:63:8e:1d:dc:ec:a3:87:da:fc:0e:87:bc:
         84:77:1a:e1:6d:86:56:eb:61:e1:95:91:00:c5:74:2d:43:1e:
         fe:14:82:16:dc:37:b0:51:73:f6:b2:a4:f2:47:8b:c4:9a:89:
         ee:7e:74:64:59:aa:ac:66:32:28:c2:e9:31:e8:06:ea:e7:c1:
         25:f1:06:d2:33:d2:1f:4f:79:9c:94:b4:80:e7:9e:52:2e:c3:
         da:2a:ee:09:db:08:20:7b:c7:35:2c:26:d4:ba:40:e5:ef:16:
         0f:71:20:1c:ba:40:7a:07:33:a2:88:07:65:8a:d4:30:49:f2:
         f0:2d:0b:a9:68:96:62:6b:1e:28:06:da:e8:8d:41:03:5e:55:
         2f:17:e1:eb:8c:19:7e:5a:3a:32:87:0c:ad:b3:c0:e0:2a:e7:
         25:c0:7a:d1:ab:90:b7:95:54:f0:fd:74:38:f8:88:d8:93:7d:
         65:1d:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:54:40 2026 by rpki-client