Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa
File:                     323830343a376463383a3a2f33322d313238203d3e20323731353832.roa (raw, json)
Hash identifier:          NG3Cc2awhZ74kUhI7ET0NgW9jgRu3ClW53Mlgk0l3Gg=
Subject key identifier:   21:B5:DE:6E:05:23:96:EF:33:32:32:EB:89:C9:FD:44:EB:16:FE:38
Certificate issuer:       /CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
Certificate serial:       3B41AA37A41D7F231ADAD7A5E268E81A07FE5D26
Authority key identifier: DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa
Signing time:             Fri 28 Aug 2026 22:16:49 +0000
ROA not before:           Fri 28 Aug 2026 22:11:49 +0000
ROA not after:            Fri 27 Aug 2027 22:16:49 +0000
asID:                     271582
IP address blocks:        2804:7dc8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl
                          rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 09:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:aa:37:a4:1d:7f:23:1a:da:d7:a5:e2:68:e8:1a:07:fe:5d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27
        Validity
            Not Before: Aug 28 22:11:49 2026 GMT
            Not After : Aug 27 22:16:49 2027 GMT
        Subject: CN=21B5DE6E052396EF333232EB89C9FD44EB16FE38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:8b:18:f0:48:41:ea:51:fe:9d:ac:01:62:
                    3c:c1:32:41:6c:1f:44:68:75:6c:89:fc:e1:c1:75:
                    bd:41:87:7f:00:c2:05:39:7d:1d:bd:43:f5:ba:0f:
                    04:17:40:cc:d5:54:7e:c4:07:4e:78:9a:12:8c:22:
                    53:d5:2e:57:96:ea:47:67:ad:9d:76:90:dd:9c:4c:
                    f2:e1:28:0d:66:70:e2:e0:8e:c6:aa:e1:45:65:e9:
                    7f:25:2d:52:d9:cf:97:92:f5:3a:83:a5:09:cc:b4:
                    c4:ca:f5:9d:dc:20:c8:25:73:d8:06:19:aa:49:4b:
                    8e:ed:ba:34:64:f5:73:b3:12:08:94:1b:1e:3b:db:
                    42:f1:ba:8a:11:76:53:60:dd:c3:a5:8b:ec:bd:c6:
                    90:f1:62:f7:58:35:7f:10:12:d8:f0:9f:dd:c5:10:
                    41:b9:d7:2a:0a:3b:9f:29:97:10:8d:bd:28:eb:7a:
                    26:91:05:28:a4:f2:33:5d:47:7d:9c:79:0e:38:8f:
                    f0:8a:87:2f:58:c7:8f:3e:b6:b6:8b:08:42:78:ff:
                    34:aa:25:02:54:c5:99:cc:b9:86:6f:1b:28:b6:e7:
                    05:7a:6c:54:72:0a:cb:7a:6e:fc:e0:16:f3:3f:36:
                    fb:96:de:f1:61:41:70:c9:8e:a4:9d:97:b6:7d:7d:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:DE:6E:05:23:96:EF:33:32:32:EB:89:C9:FD:44:EB:16:FE:38
            X509v3 Authority Key Identifier:
                keyid:DD:0E:48:3F:0E:70:4F:A6:BC:3E:5D:43:A0:00:C7:DD:80:0A:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD0E483F0E704FA6BC3E5D43A000C7DD800AFC27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/323830343a376463383a3a2f33322d313238203d3e20323731353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         dc:cd:39:09:17:a3:97:ae:f0:e2:98:64:10:c2:06:e9:1d:19:
         4b:36:7e:91:6e:d0:5f:39:c7:9d:d3:71:95:7e:0d:a4:f2:8a:
         b3:1e:25:88:ad:6c:40:cb:1e:de:87:25:a7:e6:06:06:19:52:
         d5:aa:ac:5c:32:a4:5f:e9:b9:8e:8b:d3:41:13:1d:53:cc:ce:
         d6:a2:17:1d:ec:ac:d7:ed:3d:5a:29:0e:12:fb:ed:30:3b:49:
         9d:16:61:b5:bc:b7:e0:0a:45:c2:83:10:3f:7e:75:30:46:b3:
         30:60:fd:74:58:31:24:c8:a4:1d:16:cd:ad:11:f2:e9:c1:45:
         68:dc:ea:aa:d3:25:cd:97:49:17:a5:d5:bc:5d:fd:48:89:72:
         f5:c1:0f:c6:4e:25:dd:c1:6d:cb:15:28:a3:f5:36:7b:70:36:
         15:d8:2e:35:e9:dd:cd:d6:02:79:67:85:d0:4c:12:c4:09:3c:
         26:a3:cf:e0:c1:cc:9f:c7:e3:bc:b9:2a:f8:0f:e9:7f:59:13:
         e3:45:fc:19:58:9f:52:07:56:d1:c0:bf:ef:83:e4:b0:fe:89:
         96:4f:a3:e7:c4:34:94:fa:09:e7:59:8a:f4:f9:52:6f:d4:2e:
         ed:b4:0b:58:6d:e8:77:a7:3e:42:27:e2:2f:98:6a:a6:5c:59:
         fb:cf:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:46:57 2026 by rpki-client