Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
File:                     323830343a323039383a3a2f33322d3332203d3e20323634353030.roa (raw, json)
Hash identifier:          AoChGMhebi1lXdC41l69l4gS6VFlsjsJaBUug1GCfyM=
Subject key identifier:   6B:7D:C3:29:1A:D4:50:32:A0:24:29:4A:95:C6:78:9C:73:0D:26:AE
Certificate issuer:       /CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
Certificate serial:       6F868DC35011FE1BDD8BFC993F3E2C6547413365
Authority key identifier: 5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa
Signing time:             Wed 02 Sep 2026 13:25:34 +0000
ROA not before:           Wed 02 Sep 2026 13:20:34 +0000
ROA not after:            Wed 01 Sep 2027 13:25:34 +0000
asID:                     264500
IP address blocks:        2804:2098::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl
                          rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 09:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:86:8d:c3:50:11:fe:1b:dd:8b:fc:99:3f:3e:2c:65:47:41:33:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
        Validity
            Not Before: Sep  2 13:20:34 2026 GMT
            Not After : Sep  1 13:25:34 2027 GMT
        Subject: CN=6B7DC3291AD45032A024294A95C6789C730D26AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:19:b1:bf:93:c3:46:1a:28:2b:8e:53:ab:
                    1b:bf:5e:d4:c1:44:b7:1c:ad:0b:f2:07:a4:e1:aa:
                    93:93:98:4a:a8:f9:d9:c1:ab:e4:a6:62:5b:64:fc:
                    78:1b:68:fa:bc:e8:b7:8e:b2:a2:fb:d5:66:24:6b:
                    79:dd:66:c5:83:3e:9d:28:3e:d0:fe:5b:45:2e:8a:
                    c5:07:39:a5:b9:f8:22:e8:61:44:c9:e1:cf:37:9d:
                    6b:c3:93:a8:d7:28:50:e5:0b:e7:38:71:51:ad:01:
                    e0:3c:a2:26:15:a6:6a:c1:09:b2:28:ee:93:7c:bd:
                    e4:8a:28:31:07:cb:10:e2:81:8f:8b:3b:ad:0a:1e:
                    f4:bb:44:83:a2:4a:17:cd:ae:c6:5b:25:f0:d3:b8:
                    cd:d2:e8:09:59:7a:fb:b8:e3:e2:33:32:ee:cd:02:
                    b3:84:19:52:f6:e4:40:6f:bb:62:bf:2b:4b:d9:1f:
                    9d:ae:b9:13:13:87:d0:cf:eb:93:2a:a4:3e:be:c6:
                    06:ab:2e:2f:8d:17:56:45:08:3b:9b:9e:e7:3b:3b:
                    b7:bc:aa:31:81:4b:2a:8c:b5:73:64:b8:5b:dd:d6:
                    0d:d2:48:7e:17:a8:b2:12:d4:9c:5e:ce:14:9b:65:
                    a1:ac:7b:18:bf:54:13:01:25:ec:96:a1:86:c3:d5:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7D:C3:29:1A:D4:50:32:A0:24:29:4A:95:C6:78:9C:73:0D:26:AE
            X509v3 Authority Key Identifier:
                keyid:5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/323830343a323039383a3a2f33322d3332203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2098::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:54:6d:bd:d1:17:14:40:5b:4a:ad:27:00:3e:55:de:b0:
         fc:08:f5:c7:f1:8b:d4:8e:1d:2b:46:97:3a:f3:72:7f:c9:11:
         bb:66:4f:f9:e4:c2:7e:eb:79:bf:40:69:52:42:58:1c:d3:54:
         53:00:c9:10:62:c3:4b:bb:ba:a2:a5:f2:e0:49:1b:e2:cf:ce:
         26:27:5f:3e:1c:06:96:f1:26:15:d6:5c:47:af:5e:57:f6:82:
         77:a6:d0:9e:ca:5f:33:46:38:c9:52:52:d5:f3:af:0d:41:2c:
         c2:90:25:68:ce:66:22:76:59:c6:ac:4a:21:b0:26:71:15:ae:
         2f:5a:86:8b:dc:3e:de:ad:1a:9d:86:97:6a:82:29:9b:0b:8c:
         23:e4:00:a7:99:78:dd:e8:00:17:c8:24:e5:9b:08:bc:f8:7c:
         d7:9c:ec:1a:61:93:e3:98:c9:8c:b7:c2:ca:ea:1f:1f:41:c3:
         c8:2c:b7:fb:03:1a:77:65:f9:a7:b9:c1:d9:4d:24:83:5b:ce:
         f1:3d:8e:20:70:3a:82:16:64:b9:97:60:9e:5b:4e:55:33:71:
         ae:1f:fa:a6:74:38:7f:35:aa:cd:77:9b:d4:30:af:68:d6:ab:
         7b:2c:6f:69:61:e1:8b:4b:b1:a1:7f:58:75:14:c5:58:16:dd:
         87:71:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:52:18 2026 by rpki-client