Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3830303a3a2f33372d3337203d3e20323635393533.roa
File:                     323830343a343035383a3830303a3a2f33372d3337203d3e20323635393533.roa (raw, json)
Hash identifier:          +u4CLg0Eua+XzSrc5WBjFGp+oN2oC+UoewU4nTTvxz8=
Subject key identifier:   7E:AD:99:2A:78:B2:CE:76:75:A6:69:C8:EE:42:95:44:4B:00:FD:04
Certificate issuer:       /CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
Certificate serial:       2EB79416350C8D2D647BA6A472F609A0D5165E93
Authority key identifier: FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3830303a3a2f33372d3337203d3e20323635393533.roa
Signing time:             Tue 25 Aug 2026 13:04:13 +0000
ROA not before:           Tue 25 Aug 2026 12:59:13 +0000
ROA not after:            Tue 24 Aug 2027 13:04:13 +0000
asID:                     265953
IP address blocks:        2804:4058:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b7:94:16:35:0c:8d:2d:64:7b:a6:a4:72:f6:09:a0:d5:16:5e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
        Validity
            Not Before: Aug 25 12:59:13 2026 GMT
            Not After : Aug 24 13:04:13 2027 GMT
        Subject: CN=7EAD992A78B2CE7675A669C8EE4295444B00FD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:7e:33:93:14:af:ef:d3:85:c3:97:1b:d3:
                    f3:95:7d:da:ae:bc:89:c1:4c:82:5e:af:33:eb:8f:
                    30:92:a3:b7:28:70:d6:21:5e:1e:f2:b4:a9:ba:ab:
                    44:9a:6d:a5:6a:7c:1b:9c:3b:89:7f:04:09:26:bb:
                    6c:6a:51:76:f4:93:7b:f1:50:2c:8a:3b:94:63:80:
                    fc:78:c9:d1:dd:74:50:ba:d8:1b:73:6d:46:8e:bf:
                    d2:f7:94:ef:fa:6a:fa:84:53:f0:be:69:18:5f:b2:
                    15:89:ae:91:e2:bf:fe:9a:50:a1:ed:4a:ec:32:07:
                    8d:40:7b:bb:db:ff:d5:4d:c6:ac:28:7c:99:79:96:
                    36:b3:57:4f:2d:6a:dc:f9:59:e7:9b:f1:2d:11:a1:
                    56:ed:ef:f5:cb:2d:1c:e6:cf:35:9a:81:24:1e:5a:
                    06:a4:bc:af:7e:9a:01:49:c6:a7:9e:cf:a5:1f:87:
                    19:3e:2e:94:89:4c:30:dc:76:ef:77:cd:bf:38:aa:
                    c6:a0:f8:f2:44:12:de:aa:58:e9:f7:90:cc:69:e9:
                    1f:4c:be:a7:2c:f9:20:4e:b9:35:fd:9b:9b:53:bf:
                    58:a6:b6:02:d4:e7:7e:77:dc:5e:cf:48:1b:34:9f:
                    aa:3c:d4:f4:c6:79:56:84:70:a5:c2:6f:d1:d9:41:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:99:2A:78:B2:CE:76:75:A6:69:C8:EE:42:95:44:4B:00:FD:04
            X509v3 Authority Key Identifier:
                keyid:FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3830303a3a2f33372d3337203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4058:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:76:51:a2:88:43:3f:b1:9b:f7:62:bd:b8:be:05:5c:a4:
         ed:f7:ac:4a:57:b1:a0:ee:40:f9:2d:8b:3b:2f:d7:4d:99:f9:
         3f:f4:bf:2f:10:7b:fb:73:f4:7c:8a:ac:4a:cb:1e:50:33:8e:
         be:c0:d7:97:50:cd:2d:0b:e2:d8:00:41:10:ba:5e:c5:c5:c2:
         9d:9b:5b:39:63:ec:91:d5:44:38:06:8d:fe:e7:86:b0:27:06:
         71:d1:62:52:ae:51:65:a2:89:70:00:9a:47:71:b1:cd:4b:72:
         c4:fe:38:7a:32:a7:2c:fa:a6:00:80:35:8e:a3:48:ea:5e:e6:
         bd:05:9b:3e:a3:18:cc:a0:29:4b:e2:fc:9f:13:64:0f:1c:ec:
         75:21:a0:19:51:2c:e0:3d:0a:ea:01:f1:61:fd:51:21:54:af:
         13:0c:52:6c:05:d1:d2:a6:fa:65:78:d2:f6:f2:7e:81:ec:b3:
         64:fa:17:fe:7e:c6:b7:5f:62:ab:10:73:57:29:31:22:16:aa:
         25:14:9b:84:0e:bb:6e:54:3d:51:c0:1a:ab:79:2a:a2:ba:65:
         3b:84:7a:78:5e:75:a4:6c:ce:0f:03:8a:ee:82:2a:12:5b:53:
         e2:07:06:50:34:29:cd:0b:b4:14:e5:27:f0:ac:29:45:da:fb:
         a3:16:f7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:51:02 2026 by rpki-client