Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3130303a3a2f34302d3430203d3e20323730393139.roa
File:                     323830343a373338303a3130303a3a2f34302d3430203d3e20323730393139.roa (raw, json)
Hash identifier:          8fsIFx8c+u7JZpE6MnwXj8II+7bxi0DXcwCEso0/IRU=
Subject key identifier:   83:75:CF:CA:2E:89:00:25:28:1E:99:3B:42:8C:43:1B:EE:67:6F:3E
Certificate issuer:       /CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
Certificate serial:       6734C20FFDDC9A3E6011D3750450A866B220D814
Authority key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3130303a3a2f34302d3430203d3e20323730393139.roa
Signing time:             Mon 31 Aug 2026 19:42:19 +0000
ROA not before:           Mon 31 Aug 2026 19:37:19 +0000
ROA not after:            Mon 30 Aug 2027 19:42:19 +0000
asID:                     270919
IP address blocks:        2804:7380:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 00:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:34:c2:0f:fd:dc:9a:3e:60:11:d3:75:04:50:a8:66:b2:20:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
        Validity
            Not Before: Aug 31 19:37:19 2026 GMT
            Not After : Aug 30 19:42:19 2027 GMT
        Subject: CN=8375CFCA2E890025281E993B428C431BEE676F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:91:d6:8f:2d:78:07:49:39:d7:17:b2:48:
                    13:f4:4a:67:88:8d:fe:25:e5:7e:45:30:77:ff:7c:
                    c3:06:aa:dd:e4:81:67:e1:c8:c8:a5:25:c7:71:e0:
                    91:29:98:83:d4:f1:09:84:09:7b:d8:08:0f:46:a2:
                    c6:4a:56:aa:71:44:ab:33:c9:0a:bc:be:91:d9:47:
                    09:d9:d9:6d:c7:a7:18:0c:07:a4:ce:92:c3:11:b8:
                    98:03:f8:f8:c2:80:11:fc:a9:e7:dd:4a:87:f2:b2:
                    d3:21:fc:69:6d:7d:a1:fc:3a:d6:97:e5:34:2e:24:
                    eb:a5:b5:ca:ed:50:ce:c3:12:d4:c9:b3:59:51:90:
                    4b:ab:ac:ac:24:89:a0:a0:2c:4e:20:c0:f6:01:31:
                    0b:39:ff:04:4d:d8:db:03:1d:d9:a5:db:19:f6:2f:
                    71:94:ed:80:f8:85:48:d7:2b:6c:0a:ba:7a:3a:87:
                    82:46:25:dd:64:c1:38:81:29:c1:a0:06:8e:0d:22:
                    1f:a1:80:ec:4f:c9:11:da:14:c1:4a:c9:ee:68:b3:
                    85:ee:b4:58:7b:9a:81:2a:92:2b:4e:e2:47:fb:38:
                    cb:bb:d6:f1:07:83:1f:78:07:2a:6a:33:a6:40:3c:
                    2e:ab:cf:af:ea:9b:2c:62:5e:43:ac:d3:c7:61:93:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:75:CF:CA:2E:89:00:25:28:1E:99:3B:42:8C:43:1B:EE:67:6F:3E
            X509v3 Authority Key Identifier:
                keyid:DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3130303a3a2f34302d3430203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7380:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:dc:59:23:96:64:72:27:ff:a1:f8:b7:60:a7:b6:b3:e1:74:
         bc:29:72:b7:de:86:29:38:fe:65:50:45:e3:29:92:2d:cc:8f:
         27:64:53:12:e9:77:19:cc:9f:b2:0b:a9:e0:79:51:1e:6b:99:
         42:ea:bc:3b:43:f5:44:61:0c:ef:6a:7a:79:ab:92:56:69:a7:
         6d:ad:74:47:53:82:16:44:e9:45:e4:fe:54:e9:bf:2e:eb:95:
         cc:44:49:82:24:b7:4d:52:fd:98:dc:55:bb:d9:9e:0c:eb:2d:
         5f:bc:e3:23:58:16:2a:5e:64:92:b9:1c:ea:c1:2b:89:34:0c:
         e7:b9:68:db:87:af:33:fa:ba:5a:68:78:a6:72:96:b5:ac:2b:
         c8:99:14:4b:4f:7c:da:2a:da:30:1e:4d:b7:51:cb:dc:12:ee:
         9d:be:9e:24:ea:18:7c:92:d4:c3:76:19:32:d6:72:9e:54:7e:
         51:69:b3:db:c6:58:04:f9:65:37:39:1d:af:f5:ef:4a:f2:f0:
         15:54:9f:b8:82:ab:c7:0b:e8:be:6e:b8:56:67:04:52:ea:37:
         3a:5c:25:0e:6c:36:2b:a2:61:61:9f:5e:95:b0:a3:92:e0:3d:
         b2:4c:7f:2d:86:7d:c7:af:05:58:5a:d0:dd:84:46:47:39:bd:
         b1:53:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:41:37 2026 by rpki-client