Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3a2f34302d3430203d3e20323730393139.roa
File:                     323830343a373338303a3a2f34302d3430203d3e20323730393139.roa (raw, json)
Hash identifier:          w8turzchJ6+vo3kXVvrCg0qH8UMxxDBQtQV0FcYDrJc=
Subject key identifier:   B2:F0:B4:C7:7D:17:59:A2:B4:57:3A:A9:3D:53:13:F4:27:CD:72:76
Certificate issuer:       /CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
Certificate serial:       42D1CCD2151F9083FC256112E329335BD25534E7
Authority key identifier: DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3a2f34302d3430203d3e20323730393139.roa
Signing time:             Mon 31 Aug 2026 19:42:18 +0000
ROA not before:           Mon 31 Aug 2026 19:37:18 +0000
ROA not after:            Mon 30 Aug 2027 19:42:18 +0000
asID:                     270919
IP address blocks:        2804:7380::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d1:cc:d2:15:1f:90:83:fc:25:61:12:e3:29:33:5b:d2:55:34:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE
        Validity
            Not Before: Aug 31 19:37:18 2026 GMT
            Not After : Aug 30 19:42:18 2027 GMT
        Subject: CN=B2F0B4C77D1759A2B4573AA93D5313F427CD7276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:84:a4:87:7c:d2:12:e2:2d:ff:53:34:44:
                    57:28:98:2a:ca:21:18:6e:2e:e8:f1:1d:83:4b:76:
                    c0:ff:e3:e5:5f:41:e2:41:e9:a4:17:1a:03:a8:07:
                    13:ca:78:35:e1:97:ef:82:2f:8c:5e:e1:06:ef:88:
                    a3:a5:7b:7f:ca:cd:06:a1:ab:25:53:c2:77:18:f2:
                    86:a6:51:25:3c:40:8b:99:52:fb:da:2e:a5:8e:39:
                    a2:b9:ac:5b:3e:ae:d9:98:61:46:91:99:f6:44:e5:
                    4b:af:4f:ba:6c:c8:6d:ef:6b:d5:e9:95:4f:7a:c6:
                    6e:8f:8a:86:5d:0c:39:20:8f:34:4b:8d:f4:56:eb:
                    a3:63:68:07:88:6d:3a:57:e9:c1:a9:77:b9:bb:98:
                    59:bd:f0:02:55:ae:73:e5:36:6d:4d:da:b5:e3:71:
                    85:a3:33:0b:fe:bb:63:5a:37:ab:f8:9c:2a:50:18:
                    67:48:ac:c9:ec:f9:b9:f2:19:94:cb:47:7a:ed:f3:
                    a2:4f:91:52:a6:4b:d8:e3:ab:2b:0b:bb:44:43:1f:
                    1f:08:03:b0:ad:5d:02:3b:93:10:59:9c:f9:6e:a1:
                    7f:ca:b0:62:62:5b:eb:be:df:3f:8d:37:34:e4:88:
                    9f:a1:7b:16:8d:ab:98:68:f7:3a:4d:3d:31:f2:25:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:B4:C7:7D:17:59:A2:B4:57:3A:A9:3D:53:13:F4:27:CD:72:76
            X509v3 Authority Key Identifier:
                keyid:DB:8E:BD:30:EE:DE:9C:17:09:CE:DB:DF:41:5C:B9:F6:D3:70:E5:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB8EBD30EEDE9C1709CEDBDF415CB9F6D370E5AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/323830343a373338303a3a2f34302d3430203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7380::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:90:97:41:2e:68:5f:bd:42:16:22:90:52:f3:48:3e:c2:
         86:9b:e8:6b:10:6b:71:01:ee:c2:47:c9:22:a1:7c:46:fe:80:
         f2:7b:37:22:23:44:9a:19:a5:57:3b:ad:14:97:75:0e:c6:53:
         0b:0f:d1:ff:c4:bf:e9:58:38:3d:36:3f:35:07:85:f2:15:01:
         92:5e:79:03:39:d0:81:42:f0:49:13:4e:70:c5:6c:64:89:47:
         ab:e7:fc:68:58:8d:51:87:59:4d:3c:f1:a2:41:bf:67:83:55:
         cc:dd:34:97:d2:62:fe:0c:18:c3:c0:25:db:68:1f:ae:50:28:
         43:52:8e:51:b9:47:f7:51:ca:4a:0d:01:9a:b0:54:b7:92:d7:
         2e:a2:b0:9d:c2:33:ff:b3:c9:a5:bf:f0:2f:08:ee:ab:64:e2:
         a9:0a:61:c4:50:84:18:be:8a:1b:2d:3d:e7:61:2b:e2:00:3e:
         e9:33:4b:42:69:00:02:b0:01:4d:fa:eb:1a:9c:1b:60:a3:d9:
         7a:28:3f:f6:5a:45:b4:4e:9f:52:95:fc:36:f6:f2:bd:96:f1:
         78:c9:05:91:04:fe:42:f1:fb:44:eb:37:c9:53:43:bd:78:df:
         af:72:3c:eb:92:2e:52:f6:01:34:ea:05:a7:40:6e:f7:c8:80:
         82:96:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:04 2026 by rpki-client