Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa
File:                     323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa (raw, json)
Hash identifier:          XkuL26hDWOO2IvWbReKAwtcCcMOf/JaaUw1v/DbY5pI=
Subject key identifier:   63:E9:7E:FE:A8:17:B3:A7:D6:7D:74:C0:D1:59:DE:70:46:5E:7F:19
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       3B878C521CD73FE9D05250AA44116DF7D3AE3D9C
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:03 +0000
ROA not before:           Wed 26 Aug 2026 02:02:03 +0000
ROA not after:            Wed 25 Aug 2027 02:07:03 +0000
asID:                     52765
IP address blocks:        2804:b54:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:87:8c:52:1c:d7:3f:e9:d0:52:50:aa:44:11:6d:f7:d3:ae:3d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:03 2026 GMT
            Not After : Aug 25 02:07:03 2027 GMT
        Subject: CN=63E97EFEA817B3A7D67D74C0D159DE70465E7F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:57:fd:61:3d:1c:14:38:bb:b8:1f:c7:53:
                    de:ed:16:c7:8c:64:99:43:c5:c9:dc:f8:16:32:ab:
                    f8:2c:02:68:53:4c:93:cf:04:ac:01:31:cd:a7:3a:
                    f0:f3:77:1a:5f:26:97:10:67:f4:6d:a4:ee:97:bf:
                    ad:cb:da:2d:4d:34:02:95:1b:5b:a9:20:72:83:26:
                    df:3e:55:40:b3:3a:20:7b:cb:99:be:78:0f:82:67:
                    8a:2e:21:54:ed:e2:38:1c:fd:ca:82:c6:5c:be:e9:
                    ee:37:b5:07:cf:d4:bd:5c:0c:14:e2:f7:52:c9:21:
                    33:8a:ff:17:9e:43:37:2a:b2:d7:27:d4:78:c9:cd:
                    51:3d:c5:b7:9c:44:71:04:b6:d9:d9:17:03:c9:68:
                    d7:ff:ee:2f:d2:46:aa:c4:34:74:c8:84:0f:e6:0a:
                    63:13:11:45:ca:1a:4a:42:cf:a7:1e:0e:62:c2:f4:
                    06:d2:df:a8:5f:f7:6b:16:c7:00:51:68:42:39:d0:
                    9d:be:20:af:41:f2:1e:c4:ca:0b:34:07:89:c3:81:
                    4c:8c:3b:1b:af:79:f0:19:ca:2d:57:a8:97:47:a5:
                    4d:ec:0e:2a:9e:de:fb:64:b9:92:23:85:a6:4e:93:
                    30:56:83:79:ee:b4:e9:1c:c8:b0:d7:76:ac:8f:e4:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:7E:FE:A8:17:B3:A7:D6:7D:74:C0:D1:59:DE:70:46:5E:7F:19
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a383330303a3a2f34302d3430203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:61:2d:d0:5d:42:00:3c:8a:ad:18:19:5a:61:4c:9a:b8:d8:
         d6:aa:23:9d:51:1d:cb:75:c2:56:81:8f:6a:14:63:db:0a:a3:
         65:ea:e2:de:98:29:c3:15:d9:9b:f1:dc:e9:ab:ff:60:ea:93:
         02:50:9e:18:62:e9:8f:00:eb:a0:58:a3:00:fb:6b:97:6b:d6:
         fb:fc:95:fb:a4:09:1c:25:5b:73:ae:57:8d:cd:26:a1:29:18:
         c0:73:c9:ec:f8:84:97:95:2c:a5:ae:bd:b6:86:fb:1c:40:a5:
         f2:a2:10:5f:6d:9e:31:76:f6:a9:26:cc:04:10:85:c9:b6:c1:
         e2:3b:c4:da:b6:67:62:06:04:6d:ed:ac:f1:bc:44:0e:53:61:
         ca:17:12:a7:66:d7:58:4f:5a:22:3e:91:7b:e6:54:f8:53:c7:
         db:7b:5c:11:b8:e9:68:af:e5:c2:4c:ab:7e:a8:70:a5:97:c9:
         d7:12:87:1e:30:5a:28:4c:dd:d4:bc:16:a5:02:4d:79:bf:15:
         35:0f:83:70:20:b6:ae:d2:39:96:4f:a8:79:35:97:9b:39:68:
         61:58:17:2d:2e:fb:e7:8a:e1:ee:ed:d4:db:8f:5e:e4:2d:72:
         6a:ae:51:b1:8b:64:5e:d3:f7:18:24:54:20:9d:29:d3:e7:f0:
         23:c0:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:47:10 2026 by rpki-client