Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa
File:                     323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (raw, json)
Hash identifier:          Bkg1IzTmrP9kunXNNIdeWG2nAi0FZxtbD5lFTTOXa2s=
Subject key identifier:   7B:68:3C:79:78:9B:F2:DC:E1:47:AF:97:1B:7B:0E:C8:26:BB:82:F8
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       66793C68055BE8896A789D055D3794AA55E9E2B0
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 15:00:24 +0000
ROA not before:           Fri 28 Aug 2026 14:55:24 +0000
ROA not after:            Fri 27 Aug 2027 15:00:24 +0000
asID:                     264589
IP address blocks:        2804:2210::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:79:3c:68:05:5b:e8:89:6a:78:9d:05:5d:37:94:aa:55:e9:e2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:55:24 2026 GMT
            Not After : Aug 27 15:00:24 2027 GMT
        Subject: CN=7B683C79789BF2DCE147AF971B7B0EC826BB82F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:fb:f4:ce:0c:0b:f7:69:38:3e:ee:a8:6c:
                    d3:e6:f9:07:4c:44:d1:84:dc:01:d1:d6:3f:12:af:
                    11:16:92:46:d0:51:1e:fd:8e:2f:ac:29:da:6a:7a:
                    01:cf:d4:63:08:40:82:81:67:b8:44:39:b6:ac:fc:
                    05:be:82:16:bf:76:2f:e8:cf:d3:0c:94:8a:22:43:
                    b8:c7:7e:a5:a8:c7:3d:ee:30:39:09:0c:ba:47:60:
                    ca:f5:69:a8:3c:4d:3a:4e:86:26:ee:c5:33:32:3f:
                    2a:1d:ce:26:5d:03:cb:57:e1:c5:d5:52:8b:b0:40:
                    82:0b:b6:11:50:b3:07:f6:df:0b:f3:70:a0:36:8d:
                    8c:88:78:c0:ae:92:fc:36:53:54:e6:51:96:38:56:
                    9e:59:32:24:2f:1d:35:9f:6c:eb:fd:54:9a:3f:3e:
                    4a:73:03:c3:d2:c9:40:66:b1:35:30:44:d7:37:36:
                    6c:93:4b:22:e7:7d:b0:a5:40:16:79:1c:a2:67:5c:
                    e5:83:a9:15:f8:82:2f:6a:dc:fa:05:82:84:62:3b:
                    e5:48:94:71:e7:52:50:c8:55:e3:8b:71:9c:2f:b2:
                    e3:bf:01:7b:de:b7:30:e4:ee:b1:52:f3:9f:df:3d:
                    50:e8:a5:50:f1:eb:f8:32:e6:ac:7a:3b:bf:85:02:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:3C:79:78:9B:F2:DC:E1:47:AF:97:1B:7B:0E:C8:26:BB:82:F8
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:f1:02:5b:e5:96:af:4b:0c:ea:8c:6c:b6:fe:f0:5c:aa:09:
         bd:0b:ef:04:ef:39:9c:3d:65:b2:0f:3d:69:7f:0f:76:6e:d0:
         6a:9e:f6:85:39:dd:e0:ee:d3:46:73:37:85:b1:b7:ba:4b:63:
         60:ea:1e:ec:0a:f3:a2:13:df:66:79:a8:2f:55:88:53:92:a7:
         ce:14:10:6b:52:f5:b3:8c:91:52:6d:b6:1d:65:58:ad:b2:f9:
         8b:55:dd:68:d4:b8:cd:9e:dd:af:7d:14:c8:6a:a4:e7:23:8d:
         59:04:52:0a:5e:eb:f4:c1:b2:32:ba:d4:c9:46:d9:a1:f2:ce:
         f1:7f:71:fc:e3:d8:94:bc:f1:94:de:e6:c3:45:30:0c:87:0a:
         cc:15:02:b5:93:c4:06:af:d8:3e:25:1a:7a:22:b7:52:39:3f:
         c2:59:89:cd:00:51:38:ca:6d:fd:f2:ad:eb:81:b4:42:19:62:
         dc:a0:ae:a1:43:d1:0a:9e:34:3f:08:be:fc:b4:34:cd:be:a3:
         b1:e7:94:1d:06:59:d0:f3:29:a6:ab:36:86:c4:03:05:5a:de:
         9e:10:30:3f:02:1d:e8:53:73:92:91:ae:9f:46:8c:4b:ae:28:
         f5:13:27:af:ae:57:47:55:27:0e:61:50:9e:01:1c:b9:f2:15:
         3c:7f:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:25:24 2026 by rpki-client