Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa
File:                     323830343a326134303a3a2f33322d3332203d3e20323634303637.roa (raw, json)
Hash identifier:          Cl8aNa/OTynkoetGtAKwZGqKXfrKYeznhkksnsZpIFI=
Subject key identifier:   7E:A7:D2:5A:8B:13:3C:D5:CF:01:24:67:02:0C:C3:D0:84:6E:3F:13
Certificate issuer:       /CN=92D101F1B4C5FEE312D127BDA455367E044A8DFB
Certificate serial:       7C0DF3080D29CAC2AEAF69EEEF5DF478A710ABE8
Authority key identifier: 92:D1:01:F1:B4:C5:FE:E3:12:D1:27:BD:A4:55:36:7E:04:4A:8D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D101F1B4C5FEE312D127BDA455367E044A8DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa
Signing time:             Fri 31 Jul 2026 14:49:02 +0000
ROA not before:           Fri 31 Jul 2026 14:44:02 +0000
ROA not after:            Fri 30 Jul 2027 14:49:02 +0000
asID:                     264067
IP address blocks:        2804:2a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/92D101F1B4C5FEE312D127BDA455367E044A8DFB.crl
                          rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/92D101F1B4C5FEE312D127BDA455367E044A8DFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D101F1B4C5FEE312D127BDA455367E044A8DFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:f3:08:0d:29:ca:c2:ae:af:69:ee:ef:5d:f4:78:a7:10:ab:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D101F1B4C5FEE312D127BDA455367E044A8DFB
        Validity
            Not Before: Jul 31 14:44:02 2026 GMT
            Not After : Jul 30 14:49:02 2027 GMT
        Subject: CN=7EA7D25A8B133CD5CF012467020CC3D0846E3F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:69:a1:24:14:58:ce:03:2f:aa:c4:71:1f:
                    f7:20:38:29:89:46:5c:ae:4e:84:d6:e3:61:3e:88:
                    2a:1e:86:e0:0d:da:b7:17:58:c0:13:0b:b1:56:80:
                    93:c0:e3:cb:82:a4:ba:ac:99:2a:6f:d8:b8:c1:d3:
                    bc:ad:45:32:e7:2e:6c:8e:a8:47:bd:38:8b:63:4f:
                    c3:b6:1a:07:1d:f6:18:c9:46:2c:c8:41:4f:9e:a9:
                    f7:ca:00:3e:a1:2a:91:81:85:f8:78:43:6b:f8:a2:
                    c8:e6:ea:6c:b6:f8:ff:4d:c7:65:cb:36:c2:8c:47:
                    4b:55:6a:ff:23:6a:7e:20:62:f6:63:ec:33:63:d4:
                    52:72:c6:99:ea:17:b4:a4:26:4f:a7:25:b2:39:7d:
                    8a:30:50:b9:48:b7:66:9c:2f:d3:ea:f2:32:b4:3e:
                    72:03:f2:ca:4f:b0:73:29:29:91:78:53:20:f8:52:
                    92:32:fe:ce:73:3b:f4:62:75:90:af:43:a8:7c:ec:
                    3d:64:a9:8d:51:91:5e:10:6e:ae:80:17:42:21:fe:
                    28:d7:dd:26:94:85:1d:c1:9a:39:9b:3b:be:59:fc:
                    17:5e:9f:f7:07:4c:43:3b:85:31:e4:86:7f:7f:ba:
                    23:2d:59:31:88:3a:ed:c1:fc:59:3c:39:ed:3d:cc:
                    ab:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A7:D2:5A:8B:13:3C:D5:CF:01:24:67:02:0C:C3:D0:84:6E:3F:13
            X509v3 Authority Key Identifier:
                keyid:92:D1:01:F1:B4:C5:FE:E3:12:D1:27:BD:A4:55:36:7E:04:4A:8D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/92D101F1B4C5FEE312D127BDA455367E044A8DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D101F1B4C5FEE312D127BDA455367E044A8DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/323830343a326134303a3a2f33322d3332203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:9d:46:c4:66:cd:9c:5e:d8:04:77:08:14:d8:41:3e:2b:
         64:0a:46:41:9a:a2:92:73:2a:da:77:43:19:2f:da:f7:7d:91:
         67:c7:f7:04:49:f5:60:19:42:5f:f3:ba:17:e2:5c:cb:f7:cc:
         7b:22:bb:01:14:da:22:e4:f6:3b:f2:d0:57:c9:13:f7:5b:6a:
         2f:c6:9a:fd:13:7a:84:8c:81:65:75:49:e3:84:d2:5f:65:6b:
         ab:25:2d:c5:15:a6:69:4d:61:a9:6d:34:8b:71:70:de:e9:f7:
         92:8f:7f:b5:e9:88:29:e7:91:8b:d8:0a:76:1a:dc:44:e1:d3:
         1e:18:d6:d8:77:58:8b:47:16:cc:83:6b:73:be:eb:ee:37:4c:
         2a:42:76:c5:3d:54:c7:ac:32:f5:81:e5:f2:28:17:07:c0:48:
         7b:dd:ff:32:2d:3c:26:75:11:40:b6:df:bc:7a:79:3f:f4:ee:
         49:80:eb:ed:0c:b6:1e:3e:cd:6e:fc:df:38:7e:70:ed:11:b6:
         15:7e:98:d8:14:c0:a9:d5:da:18:03:e3:cf:42:4f:26:10:ea:
         11:ce:58:91:21:69:ad:fb:57:07:f5:fc:55:e7:be:9f:35:29:
         9e:de:ff:21:97:11:fa:84:cc:4e:4d:2c:66:4b:34:06:b0:cd:
         14:a0:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:51:09 2026 by rpki-client