Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313030303a3a2f33372d3337203d3e20323635393533.roa
File:                     323830343a343035383a313030303a3a2f33372d3337203d3e20323635393533.roa (raw, json)
Hash identifier:          Fq5mTjVebYy6V6kni1s652PF6S0WZniGpiNetgamd+I=
Subject key identifier:   78:21:DE:8C:DF:8F:45:1E:51:96:84:89:1D:FB:22:51:68:BE:CA:B4
Certificate issuer:       /CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
Certificate serial:       7B02697EE0B9072070F870D65AFE5A5CF1EE2C6D
Authority key identifier: FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313030303a3a2f33372d3337203d3e20323635393533.roa
Signing time:             Tue 25 Aug 2026 13:04:21 +0000
ROA not before:           Tue 25 Aug 2026 12:59:21 +0000
ROA not after:            Tue 24 Aug 2027 13:04:21 +0000
asID:                     265953
IP address blocks:        2804:4058:1000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:02:69:7e:e0:b9:07:20:70:f8:70:d6:5a:fe:5a:5c:f1:ee:2c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
        Validity
            Not Before: Aug 25 12:59:21 2026 GMT
            Not After : Aug 24 13:04:21 2027 GMT
        Subject: CN=7821DE8CDF8F451E519684891DFB225168BECAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:20:b5:f6:e0:58:9f:71:e0:d2:8e:b4:7b:
                    db:69:f0:a6:80:bb:5b:79:3c:f0:20:75:e6:c3:19:
                    c9:d1:d8:96:4a:c4:7f:d8:81:26:57:9d:d5:32:fe:
                    09:1b:ce:f4:e8:3b:1b:a4:56:fe:c9:01:fd:1c:6b:
                    a4:81:19:63:34:af:1f:04:a7:df:c0:10:31:2b:42:
                    60:7c:a6:9c:56:98:e1:0e:08:dc:1e:84:32:1f:a3:
                    99:b7:19:ad:14:05:31:84:67:42:e2:0d:23:40:56:
                    6b:d8:d1:4b:96:0f:eb:2e:c3:90:b5:9e:91:c8:ce:
                    f8:5b:6c:15:2d:e6:8b:33:2f:5d:99:d2:c6:7d:14:
                    55:f3:1a:bb:35:63:8b:b8:87:25:8d:21:38:82:ef:
                    6a:04:ee:d7:5d:5d:4f:da:27:46:f7:1b:76:27:44:
                    c8:70:f5:2b:a6:ed:9c:e0:1d:9e:f3:7b:b3:95:59:
                    2e:68:ae:a7:3a:c0:25:54:d4:e6:39:84:99:9e:f4:
                    67:b9:45:f4:a5:60:bb:6a:aa:9c:c5:cc:52:50:be:
                    bb:12:86:77:90:98:66:9f:a2:9c:cf:4c:31:5b:78:
                    96:85:d4:3c:bd:81:79:ed:04:fb:29:b0:74:0f:f3:
                    56:14:65:00:37:8b:71:d6:e9:d3:1d:b9:89:bb:99:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:DE:8C:DF:8F:45:1E:51:96:84:89:1D:FB:22:51:68:BE:CA:B4
            X509v3 Authority Key Identifier:
                keyid:FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a313030303a3a2f33372d3337203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4058:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:61:a9:34:e3:b5:aa:ab:63:25:81:c2:e9:c6:f7:ee:ae:
         2e:24:d0:72:16:3f:04:68:27:e5:2a:d8:2d:a9:bc:b8:8c:74:
         1c:0d:f0:b7:88:1a:ae:4e:5b:bb:2b:fd:ce:a2:5f:a1:54:23:
         44:ab:75:59:19:31:ae:ab:e4:88:00:07:b0:80:4a:0e:b2:04:
         62:5a:e6:f6:a3:52:da:d3:c1:1a:5d:72:f7:3f:57:4e:11:9d:
         75:6d:fe:74:88:eb:ff:38:73:48:ea:ec:97:f3:c9:24:83:83:
         2a:d2:f2:c1:6e:14:28:95:b7:0d:4c:35:0b:9c:43:55:f4:83:
         80:ca:64:f4:b3:8f:9a:3e:b1:85:72:be:bd:c7:ff:5e:10:e7:
         c2:1f:7a:1d:fa:cb:69:f3:3a:03:4c:86:19:72:f8:98:31:a4:
         fd:43:64:11:e0:ed:ff:61:88:11:c5:39:41:02:51:33:2f:01:
         47:6b:d1:b6:84:93:ba:60:01:b7:aa:40:e8:c6:6d:2e:33:f4:
         eb:91:40:d4:95:bf:4f:02:b5:28:d0:8c:cb:60:61:ef:bc:c9:
         e4:d2:44:88:70:1a:22:88:38:01:33:5f:8d:b3:fd:80:2e:8f:
         de:60:ae:f9:a1:7a:7c:70:fb:d6:d5:47:9f:94:89:1d:ad:9a:
         81:c7:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:51:07 2026 by rpki-client