Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20313938393439.roa
File:                     323830343a3732303a3a2f33322d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          7hN8AzuP0FzNJCEVeJslaqlAsudTs85gl0B4zSn/YFY=
Subject key identifier:   9E:DB:61:DE:CE:FA:24:83:D2:6C:33:D8:E4:99:B5:24:FB:98:DF:23
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       5DB8952922CF8900FD814463B4D951A6DDB5FE00
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20313938393439.roa
Signing time:             Fri 14 Aug 2026 22:42:33 +0000
ROA not before:           Fri 14 Aug 2026 22:37:33 +0000
ROA not after:            Fri 13 Aug 2027 22:42:33 +0000
asID:                     198949
IP address blocks:        2804:720::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 03:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b8:95:29:22:cf:89:00:fd:81:44:63:b4:d9:51:a6:dd:b5:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Aug 14 22:37:33 2026 GMT
            Not After : Aug 13 22:42:33 2027 GMT
        Subject: CN=9EDB61DECEFA2483D26C33D8E499B524FB98DF23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:d2:4a:20:d8:41:12:69:eb:3d:94:cd:ef:
                    8c:66:47:9a:ff:9a:89:a1:ad:e4:ba:06:ef:9e:30:
                    a7:5e:d3:b0:2a:d3:0e:1d:c3:03:ee:3d:fb:9d:df:
                    48:8c:91:fa:9a:66:6a:c6:3b:55:5e:ca:f7:50:d7:
                    85:df:5d:35:44:be:e1:df:58:0a:26:b5:ab:f4:3c:
                    3f:2b:e5:0d:21:88:06:7b:bb:e5:21:67:25:bb:bb:
                    69:35:6f:75:ef:14:6e:e4:2a:49:c7:0d:75:c3:4a:
                    a5:7f:7c:2c:6a:9e:0a:88:d3:b7:fc:49:53:51:59:
                    29:4f:19:ff:9b:ef:32:99:01:c2:68:d1:b3:67:37:
                    30:91:a1:7a:bc:6d:09:f8:88:ee:cf:68:a7:b2:6f:
                    bb:50:25:53:18:a4:3f:22:b4:04:4d:cf:26:fc:24:
                    94:83:29:d4:ab:f6:77:96:04:f9:a7:64:41:24:41:
                    6d:7f:47:45:c2:9a:f0:49:ff:e0:c3:55:e5:56:b9:
                    09:db:19:89:b2:09:9d:e6:db:09:10:e0:a2:b7:d9:
                    3a:70:ba:2d:00:02:05:56:49:2b:30:e1:a3:a5:cf:
                    24:d8:d6:c9:9b:5d:9e:a4:d3:d1:d5:8e:b0:70:e9:
                    ea:04:47:04:60:7e:47:7e:c1:f3:86:bd:9a:2c:4d:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DB:61:DE:CE:FA:24:83:D2:6C:33:D8:E4:99:B5:24:FB:98:DF:23
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/323830343a3732303a3a2f33322d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:720::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:bc:42:4c:94:ee:2e:4f:86:21:4f:98:b3:7e:1e:fb:ab:33:
         54:28:6a:ed:f8:d3:0e:a5:b2:a7:b6:6a:7d:14:a1:de:f6:ef:
         81:a3:f2:e8:ff:41:88:d3:36:af:41:5f:19:ae:c6:ef:23:80:
         20:6d:f5:fe:63:11:d4:44:40:34:b8:47:ac:4c:cd:51:6d:13:
         83:a4:57:8a:b2:6f:bb:b1:69:1d:5f:3c:37:91:66:40:a3:50:
         15:a2:82:5b:bf:7a:a0:bc:20:ce:6b:5d:08:24:30:5c:2b:2f:
         52:c0:07:dd:c2:be:a3:c4:2c:09:ca:77:3d:79:02:05:92:b4:
         2e:e6:ff:82:d3:20:b8:cc:6e:17:8e:9e:0a:69:ab:c7:e7:57:
         eb:e6:04:33:fb:2c:4b:65:cf:90:48:16:d6:dd:0b:3e:c3:18:
         8d:eb:dc:01:11:83:34:a4:2a:67:d7:bb:33:e7:cc:df:97:6f:
         74:83:0f:49:3d:1e:28:ef:9e:8a:50:a5:18:96:4c:95:d8:53:
         3f:ff:43:21:00:6f:df:c5:cb:27:a4:31:6b:19:75:88:a9:47:
         c6:f3:0c:bf:64:64:fe:23:bd:70:df:4f:0c:c2:7a:4f:f7:2a:
         7c:1e:8c:28:85:2a:48:1b:ca:b0:44:1e:f7:2a:bc:4a:65:39:
         e2:14:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:30:25 2026 by rpki-client