Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a383030303a3a2f33332d3333203d3e20323634303134.roa
File:                     323830343a323936633a383030303a3a2f33332d3333203d3e20323634303134.roa (raw, json)
Hash identifier:          HCPc0IxNTm16M1Piaf3Jrc+avPIoFBSW3LQ1rprD6xo=
Subject key identifier:   54:BF:F3:FA:F6:05:75:C9:B7:E4:A5:33:A3:47:DD:44:16:CC:3A:D1
Certificate issuer:       /CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
Certificate serial:       2BC2DF0E238681E1F0A465DC04BA1442C217BCC6
Authority key identifier: 76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a383030303a3a2f33332d3333203d3e20323634303134.roa
Signing time:             Fri 28 Aug 2026 16:11:42 +0000
ROA not before:           Fri 28 Aug 2026 16:06:42 +0000
ROA not after:            Fri 27 Aug 2027 16:11:42 +0000
asID:                     264014
IP address blocks:        2804:296c:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 10:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c2:df:0e:23:86:81:e1:f0:a4:65:dc:04:ba:14:42:c2:17:bc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
        Validity
            Not Before: Aug 28 16:06:42 2026 GMT
            Not After : Aug 27 16:11:42 2027 GMT
        Subject: CN=54BFF3FAF60575C9B7E4A533A347DD4416CC3AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:c0:2a:53:de:31:20:bd:2b:9c:34:25:6f:
                    3a:60:34:9a:84:68:4b:5a:91:9c:c9:b9:04:a3:66:
                    a9:3e:af:a1:7e:14:b1:46:5c:83:e7:9e:70:9d:d1:
                    88:4d:0f:54:e8:6c:85:1e:62:98:4e:c0:81:46:8c:
                    90:3b:a0:9a:e8:59:c8:24:27:94:5f:23:15:7c:01:
                    20:04:9a:9b:69:2b:c7:e3:0b:9b:4c:77:10:64:43:
                    78:60:dd:fe:68:d8:b6:b1:f3:aa:b9:6f:35:55:3d:
                    d9:59:10:a9:0e:a9:40:4c:ab:f9:71:0f:f6:51:14:
                    b7:d7:85:fd:c8:c3:d6:11:71:a7:a3:da:03:62:95:
                    dc:fe:ae:64:d4:d2:2e:a6:f4:92:03:77:ab:e6:53:
                    8a:55:f7:d6:2d:fa:c3:01:e6:28:2d:cd:a2:8b:b3:
                    7a:27:c3:de:95:4b:10:8f:b4:ad:b3:7b:19:75:0a:
                    fd:50:eb:44:b6:22:6e:8b:11:47:c8:c3:ac:1d:ae:
                    e2:ae:07:38:d0:dc:5e:ae:4d:15:1d:5c:c0:62:0a:
                    d8:45:d9:34:31:16:e9:75:6f:b7:d0:49:34:0d:1e:
                    3c:5e:ef:6d:96:30:f8:be:09:a1:ab:27:87:00:51:
                    7b:79:8a:4e:e3:bb:df:f6:01:f8:31:3e:0e:af:29:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:F3:FA:F6:05:75:C9:B7:E4:A5:33:A3:47:DD:44:16:CC:3A:D1
            X509v3 Authority Key Identifier:
                keyid:76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/323830343a323936633a383030303a3a2f33332d3333203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:296c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:39:bb:77:f9:9c:65:98:ba:f7:2a:31:34:50:d5:93:85:
         22:2c:80:af:c2:39:3c:e9:af:bf:55:51:b0:d6:8f:5d:26:b6:
         72:24:ba:fb:59:9b:51:21:69:ea:fd:4e:65:66:5d:42:83:65:
         99:a4:24:b8:ae:18:ec:6e:cc:27:2b:d7:25:c0:8c:9d:7e:ad:
         3f:90:43:ad:5c:bf:7f:7a:69:4c:25:55:ff:b5:ea:61:c7:2e:
         cb:f1:7f:c4:b1:5d:f0:48:9d:4f:c3:02:71:b7:55:d5:d4:37:
         2e:8d:ae:ed:e3:e5:cd:c5:55:6b:76:a0:22:e0:c5:18:e2:a4:
         3f:22:cb:62:ff:f5:25:2f:07:3f:96:bf:05:e9:bf:cb:f7:95:
         eb:a8:9b:ef:f9:b7:6d:36:97:98:52:e2:6a:15:a9:4a:a0:77:
         f0:e2:49:91:1f:62:fd:61:73:95:b6:a9:30:c5:c1:94:4b:4a:
         bd:3e:ac:bd:78:b2:fa:e5:46:21:49:2b:a1:bc:ec:e8:6b:66:
         f1:e8:15:6b:d8:fb:ad:b5:aa:0e:4a:7b:7c:ff:36:09:75:84:
         7a:8b:c0:23:f4:35:37:61:a6:5c:03:12:4a:75:e4:e7:d6:0b:
         df:6f:82:76:42:bb:f8:f7:b2:e7:6a:04:74:dc:a1:67:d7:cd:
         da:5c:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:51 2026 by rpki-client