Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3a2f33372d3337203d3e20323635393533.roa
File:                     323830343a343035383a3a2f33372d3337203d3e20323635393533.roa (raw, json)
Hash identifier:          iyS8iGpj34TcvclhQzmyGfkKpf6kwhWEbaBdDx6K7Ec=
Subject key identifier:   F2:E2:E0:A4:54:B9:B5:F8:E1:B2:27:C0:BC:D1:6D:90:75:9F:E1:3D
Certificate issuer:       /CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
Certificate serial:       6C3CF33FF0C83F49B42C642C1950D547A42AEC26
Authority key identifier: FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3a2f33372d3337203d3e20323635393533.roa
Signing time:             Tue 25 Aug 2026 13:04:12 +0000
ROA not before:           Tue 25 Aug 2026 12:59:12 +0000
ROA not after:            Tue 24 Aug 2027 13:04:12 +0000
asID:                     265953
IP address blocks:        2804:4058::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3c:f3:3f:f0:c8:3f:49:b4:2c:64:2c:19:50:d5:47:a4:2a:ec:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
        Validity
            Not Before: Aug 25 12:59:12 2026 GMT
            Not After : Aug 24 13:04:12 2027 GMT
        Subject: CN=F2E2E0A454B9B5F8E1B227C0BCD16D90759FE13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:3f:88:5d:35:65:60:35:3b:54:f7:24:f6:
                    43:b4:d7:aa:fd:b5:ae:58:9a:47:5d:c3:ba:97:fd:
                    a6:7e:81:41:f0:77:d1:a6:f2:ec:8e:be:94:38:60:
                    46:46:95:11:c8:d6:6d:67:ae:38:d1:c1:3e:1d:ee:
                    64:92:ed:a1:27:c1:72:47:0a:63:b3:95:15:ac:66:
                    2f:7d:97:70:8c:90:9f:06:b4:60:6a:3d:bc:af:6c:
                    d9:fe:94:ca:f6:ac:8b:47:ae:37:ec:41:af:2a:85:
                    ef:ee:ba:76:38:bd:a1:19:55:c0:e5:fb:ca:50:e3:
                    b8:05:97:01:1d:59:e9:f3:07:e6:d3:6c:9c:48:6f:
                    56:8e:37:0e:48:e3:53:b6:13:ff:19:2a:40:bb:ed:
                    95:5a:fa:94:d8:c1:59:07:e5:22:b6:a5:b0:e1:f2:
                    8d:fb:69:f3:41:b2:51:9b:4b:71:71:30:25:7f:5a:
                    8e:4b:82:cd:24:33:83:10:ac:5b:09:ab:b2:56:6a:
                    e7:14:20:03:80:8c:92:6a:92:0c:4d:e7:08:f1:cc:
                    11:eb:49:70:4d:b6:5c:6c:7d:d6:bc:8b:81:cd:64:
                    d5:4a:9b:e9:f4:cd:80:e1:a1:03:da:f9:29:69:78:
                    41:ca:b0:13:cf:32:d0:03:0c:c7:3b:84:d1:c7:af:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:E0:A4:54:B9:B5:F8:E1:B2:27:C0:BC:D1:6D:90:75:9F:E1:3D
            X509v3 Authority Key Identifier:
                keyid:FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/323830343a343035383a3a2f33372d3337203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4058::/37

    Signature Algorithm: sha256WithRSAEncryption
         2a:c9:c9:58:82:c2:3e:83:b6:f7:f8:60:85:f2:15:fb:50:f0:
         20:dd:e2:94:0f:f3:e3:75:41:07:ab:59:6e:6d:3c:23:7c:35:
         8d:9d:eb:94:bf:22:11:f7:62:c9:af:98:95:96:bf:6b:0b:ad:
         8e:1f:3a:59:ac:96:1f:81:f8:11:62:4b:c9:41:0d:fd:0d:b4:
         9e:1b:81:59:be:40:cb:fa:3f:6a:58:15:7f:5d:b2:86:bb:59:
         cb:76:bd:38:62:c4:e2:97:35:52:d8:91:ba:53:2c:9e:37:81:
         fd:97:bf:b9:f0:b2:4f:ef:15:a2:53:11:41:4c:33:ca:09:63:
         d2:cb:e9:ed:5f:d6:90:26:15:c9:24:4a:65:eb:0c:52:c3:1c:
         c5:1a:b6:09:2c:a8:40:20:c1:e6:7a:4f:70:d3:c7:94:9b:c9:
         e1:b9:1b:bc:8f:01:92:1b:f4:fe:af:52:67:89:c5:d7:9f:62:
         6f:59:aa:4d:61:2b:3a:03:3b:f3:b6:46:fd:d9:11:22:7c:33:
         48:93:03:cd:29:b3:07:2c:21:c4:d5:3d:d6:b2:0c:13:e4:96:
         02:ac:42:62:e0:31:f0:cc:5a:42:6a:c8:d0:46:4b:06:6d:d4:
         16:f8:b3:53:b4:68:e4:46:b4:6d:5b:04:42:39:03:b3:41:b3:
         4b:02:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:50:53 2026 by rpki-client