Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
File:                     323830343a333131633a3a2f33322d3438203d3e20323634393933.roa (raw, json)
Hash identifier:          +0UviIQ+HJhv5JlsPpMnjK5eGKgZicJVxL5tSdGqIBw=
Subject key identifier:   C1:E0:1E:77:1D:93:74:39:B1:49:18:C6:83:E5:8C:FC:27:22:02:49
Certificate issuer:       /CN=B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A
Certificate serial:       2F003A1373A6FFA037EF4837C02ADFD2AE3263B2
Authority key identifier: B6:50:B3:1B:E0:EB:5B:C7:B1:DF:19:23:EA:5E:65:3B:7F:1E:D6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa
Signing time:             Thu 03 Sep 2026 20:44:39 +0000
ROA not before:           Thu 03 Sep 2026 20:39:39 +0000
ROA not after:            Thu 02 Sep 2027 20:44:39 +0000
asID:                     264993
IP address blocks:        2804:311c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.crl
                          rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 23:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:00:3a:13:73:a6:ff:a0:37:ef:48:37:c0:2a:df:d2:ae:32:63:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A
        Validity
            Not Before: Sep  3 20:39:39 2026 GMT
            Not After : Sep  2 20:44:39 2027 GMT
        Subject: CN=C1E01E771D937439B14918C683E58CFC27220249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:94:f8:23:df:71:9b:20:19:03:e0:02:ea:
                    56:2c:de:00:f9:e7:36:91:e5:c6:8f:81:47:fb:4a:
                    e7:46:49:5b:c7:51:66:b7:c1:8e:16:ef:56:12:54:
                    e7:b3:12:37:db:ed:d4:34:14:df:8f:73:84:25:f4:
                    ab:22:95:de:3b:55:7d:8f:48:db:99:20:52:82:cf:
                    f9:b9:48:e6:a9:7e:e0:e2:7e:86:42:f1:3b:09:bc:
                    7f:83:0f:90:7a:02:df:0f:aa:67:7f:72:46:aa:5f:
                    17:05:e9:ef:73:7d:8c:d9:d9:41:da:f5:1f:fe:7e:
                    50:99:ee:a5:ae:a6:a3:50:4b:67:23:c5:81:01:3a:
                    29:03:27:5d:3a:ca:1e:30:52:e3:a0:2b:b6:74:28:
                    d4:2d:08:91:35:1f:47:4e:40:ab:84:8d:1c:c4:02:
                    93:2d:39:33:2d:9b:10:24:38:0f:2f:64:d3:65:8f:
                    4a:96:13:57:15:1e:9b:8f:5d:13:37:69:23:0e:af:
                    4e:54:b3:b4:45:a2:47:7a:7c:1b:c2:0e:5e:17:f8:
                    f1:38:8b:f2:f2:cf:94:61:11:00:8e:67:fd:d5:79:
                    f0:a6:5f:1c:84:a7:68:a9:ce:b8:a8:0b:35:92:61:
                    60:f5:af:7c:50:5c:8b:81:e8:11:73:94:c4:17:85:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:1E:77:1D:93:74:39:B1:49:18:C6:83:E5:8C:FC:27:22:02:49
            X509v3 Authority Key Identifier:
                keyid:B6:50:B3:1B:E0:EB:5B:C7:B1:DF:19:23:EA:5E:65:3B:7F:1E:D6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B650B31BE0EB5BC7B1DF1923EA5E653B7F1ED62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2ADHL2BQbxFQzH5pquqBKDvofb4VMYjZTNDegQrVDcw/0/323830343a333131633a3a2f33322d3438203d3e20323634393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:311c::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:70:bd:ef:16:f3:65:20:75:67:52:25:e4:ac:14:7f:50:b2:
         8c:2e:e3:2b:05:2b:48:2a:7d:33:93:ec:56:a3:bc:e1:5b:77:
         0e:4e:f0:33:d5:c9:1e:99:f7:e3:dd:04:6e:86:8a:99:44:61:
         b9:69:e4:fa:bc:88:cf:dc:f5:9d:8b:f5:4b:07:5c:20:f7:23:
         0d:d6:eb:1a:c9:5a:1e:a7:bf:a9:55:76:7e:a4:e4:68:73:80:
         61:c7:09:c1:40:f4:71:06:4d:0f:48:2f:29:c5:95:36:c8:49:
         ab:01:08:b2:b8:fb:6c:c6:ae:cf:15:98:f9:a1:fa:66:ad:c7:
         87:cf:dd:62:d8:e3:fb:3a:c0:45:53:f7:8d:1f:e1:8f:a8:7a:
         05:1c:f6:19:d2:65:f8:ca:ab:26:5f:b6:1a:a3:35:30:e7:62:
         c0:f6:c0:bf:73:30:ca:89:be:6c:cd:cf:bc:3b:b9:5e:37:79:
         bb:7e:e8:00:c3:6f:77:fe:86:c9:6c:f9:ef:b6:78:bd:25:c2:
         5b:c9:63:35:22:cb:5d:1e:31:e6:51:23:f9:60:35:59:30:ce:
         8b:b5:c4:9e:c1:07:c5:9b:d2:dc:2b:7f:c6:86:35:a7:df:26:
         9b:9f:2c:3a:a5:43:d7:e1:ed:99:b1:e6:5f:2e:68:ed:98:b8:
         38:6d:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:29:22 2026 by rpki-client