Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/323830343a343632633a3a2f33322d3333203d3e20323636393733.roa
File:                     323830343a343632633a3a2f33322d3333203d3e20323636393733.roa (raw, json)
Hash identifier:          TmfpOxuEUbW6rsagqB6hoVOfAqitKFcBFK+hNgV9t/E=
Subject key identifier:   E5:30:E3:BA:78:9E:BA:E6:14:11:78:83:5F:99:73:BA:37:A4:28:EC
Certificate issuer:       /CN=E733AA153674F005E1E2420E2120F1E954A2110F
Certificate serial:       715D950E4EF48A8B374C092D55AF09481A3C6382
Authority key identifier: E7:33:AA:15:36:74:F0:05:E1:E2:42:0E:21:20:F1:E9:54:A2:11:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/323830343a343632633a3a2f33322d3333203d3e20323636393733.roa
Signing time:             Wed 26 Aug 2026 16:11:47 +0000
ROA not before:           Wed 26 Aug 2026 16:06:47 +0000
ROA not after:            Wed 25 Aug 2027 16:11:47 +0000
asID:                     266973
IP address blocks:        2804:462c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.crl
                          rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 04:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5d:95:0e:4e:f4:8a:8b:37:4c:09:2d:55:af:09:48:1a:3c:63:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E733AA153674F005E1E2420E2120F1E954A2110F
        Validity
            Not Before: Aug 26 16:06:47 2026 GMT
            Not After : Aug 25 16:11:47 2027 GMT
        Subject: CN=E530E3BA789EBAE6141178835F9973BA37A428EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:03:ec:30:87:07:ab:95:3d:dd:08:bb:b5:
                    59:5a:bb:71:9c:9d:76:7b:9e:9c:6d:08:6b:f1:4b:
                    82:22:b0:7c:ac:5f:a2:ce:56:76:ab:19:e5:9a:df:
                    ca:b6:e2:5e:6b:7d:56:cb:34:eb:2a:d9:52:ba:39:
                    d2:20:21:b9:da:fa:a0:42:27:f8:8e:63:76:b4:67:
                    a0:30:80:89:e0:fa:3b:a2:52:b5:96:03:c2:3f:23:
                    5a:72:6d:3a:1c:93:f7:b3:26:59:f2:fd:bf:fa:06:
                    a0:cf:d0:44:c2:14:9d:da:41:45:1c:87:98:7e:79:
                    86:03:3f:9e:27:6b:03:71:52:e3:c9:af:29:37:e5:
                    b3:25:d9:bc:db:df:00:40:3f:aa:eb:e6:58:36:26:
                    b9:9f:29:6f:88:40:39:b2:58:d2:13:d3:8c:16:7d:
                    d4:5b:07:c7:a1:da:09:c0:ca:ea:62:91:4e:22:b5:
                    00:85:74:77:62:aa:dd:6d:d3:d5:c0:83:c1:1a:f5:
                    fa:0a:c1:31:8c:3e:03:2d:32:0a:f1:b1:b2:90:ab:
                    53:90:8b:df:ca:2a:de:6b:7a:43:d1:17:ff:57:42:
                    3a:6c:73:f2:95:b7:20:69:d3:b1:3b:26:8a:15:c0:
                    9f:82:82:f9:6b:ef:06:94:1d:95:43:e7:71:7b:f0:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:30:E3:BA:78:9E:BA:E6:14:11:78:83:5F:99:73:BA:37:A4:28:EC
            X509v3 Authority Key Identifier:
                keyid:E7:33:AA:15:36:74:F0:05:E1:E2:42:0E:21:20:F1:E9:54:A2:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/E733AA153674F005E1E2420E2120F1E954A2110F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E733AA153674F005E1E2420E2120F1E954A2110F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/0/323830343a343632633a3a2f33322d3333203d3e20323636393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:462c::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:9a:13:76:56:07:a6:6b:01:32:8e:fa:3b:9c:32:e3:2f:
         e6:a8:84:d3:98:50:49:79:4b:5e:72:89:f5:3c:d2:28:c4:61:
         52:59:a2:a6:67:40:cb:35:34:b5:93:62:0b:3e:b4:c1:7b:0b:
         10:a5:0c:f9:02:64:25:9d:d1:af:5e:32:de:19:c8:9a:4f:fe:
         fe:78:ae:16:7c:aa:cf:0a:31:e0:2d:7b:1c:40:02:e9:03:8f:
         cb:91:e1:c2:1b:dd:d6:fd:9d:4f:16:df:af:92:3f:8f:05:51:
         01:ff:14:f5:fa:bb:84:d7:0e:79:04:bb:b7:e5:63:04:8e:ad:
         fb:ac:a4:86:7f:47:f4:bb:43:12:ac:37:a6:26:cf:85:86:a0:
         05:3c:ab:23:b0:d9:05:8e:8e:8e:5c:d0:f4:ea:a9:06:a4:90:
         7c:9f:dc:8f:0f:bb:23:24:f1:3b:44:15:9f:0d:2f:92:ca:d6:
         4b:6c:ef:08:7a:2a:c5:a1:9d:84:52:08:05:d6:e0:14:a7:44:
         4b:b0:d8:22:77:4a:98:29:37:2e:00:28:2e:08:47:12:0f:e1:
         ca:8b:de:70:c2:48:f1:57:b8:10:2b:1a:63:74:c2:b5:ff:12:
         2c:7f:dc:47:38:a0:e4:5c:73:72:13:71:fe:c3:c4:82:ec:e2:
         48:03:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:37:39 2026 by rpki-client