Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336538303a3a2f34342d3434203d3e20323731363633.roa
File:                     323830343a376630633a336538303a3a2f34342d3434203d3e20323731363633.roa (raw, json)
Hash identifier:          FYGmvkaqnr2/eIfXTaujXh78UtB56yOzFFZm/fbFeoM=
Subject key identifier:   A7:E1:E4:1A:6D:0F:EA:61:37:65:37:4A:82:08:B3:E3:66:D5:E9:69
Certificate issuer:       /CN=C157E5F588C0832A94818A6C0EEC46D363140D95
Certificate serial:       1C257CE9FDF840BC340B2A1444A3B5F21305723F
Authority key identifier: C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336538303a3a2f34342d3434203d3e20323731363633.roa
Signing time:             Mon 03 Aug 2026 12:46:55 +0000
ROA not before:           Mon 03 Aug 2026 12:41:55 +0000
ROA not after:            Mon 02 Aug 2027 12:46:55 +0000
asID:                     271663
IP address blocks:        2804:7f0c:3e80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl
                          rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:16:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:7c:e9:fd:f8:40:bc:34:0b:2a:14:44:a3:b5:f2:13:05:72:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C157E5F588C0832A94818A6C0EEC46D363140D95
        Validity
            Not Before: Aug  3 12:41:55 2026 GMT
            Not After : Aug  2 12:46:55 2027 GMT
        Subject: CN=A7E1E41A6D0FEA613765374A8208B3E366D5E969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:f1:17:b9:0f:7b:09:3d:31:bb:60:bf:41:
                    85:3b:06:db:ab:27:a5:86:9b:94:83:8c:c3:eb:9c:
                    b0:bb:63:4f:5f:09:6c:e7:8a:62:8c:64:bb:c8:27:
                    c2:4d:4b:2e:c5:70:c7:6c:d9:2b:09:b5:ce:c4:90:
                    5e:7d:5b:f5:4c:92:81:ca:bf:fe:34:9f:bb:fd:bf:
                    20:cf:1e:de:42:ad:d3:22:c8:48:f3:b5:92:b7:c1:
                    c5:67:db:51:6a:98:f2:c5:17:87:15:fb:46:bc:e0:
                    fe:a5:e8:8e:8e:83:85:e2:39:ca:39:a4:f5:6c:55:
                    04:21:f5:ea:68:d7:52:cf:77:a9:03:88:52:06:b5:
                    97:09:8e:bd:55:cf:02:32:e3:83:e1:4c:13:16:60:
                    83:51:58:99:dc:a8:5e:5e:66:e0:da:84:ad:3b:19:
                    e6:f1:53:15:be:21:c8:e6:02:1b:df:31:d7:56:d3:
                    a1:2e:bd:24:42:c6:97:d7:35:c2:df:42:d8:f1:3e:
                    66:9f:35:4e:00:2e:c4:65:f4:54:72:89:09:bd:cc:
                    ac:98:b1:bf:32:25:72:50:cd:50:42:d9:1d:5f:36:
                    e6:29:2d:98:04:f4:7e:76:ba:66:31:03:49:28:ed:
                    49:33:79:70:54:eb:21:6b:31:4e:56:f6:6a:bd:01:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E1:E4:1A:6D:0F:EA:61:37:65:37:4A:82:08:B3:E3:66:D5:E9:69
            X509v3 Authority Key Identifier:
                keyid:C1:57:E5:F5:88:C0:83:2A:94:81:8A:6C:0E:EC:46:D3:63:14:0D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/C157E5F588C0832A94818A6C0EEC46D363140D95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C157E5F588C0832A94818A6C0EEC46D363140D95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jWaLStsnbCpUGuc7YQCE3iQqNjjgcuEE8er7Nx18JpG/0/323830343a376630633a336538303a3a2f34342d3434203d3e20323731363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f0c:3e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:42:5e:d0:57:57:0a:e0:62:57:fd:ad:3b:42:d8:4a:58:87:
         9f:d6:b6:2a:ff:1c:71:68:0e:95:46:a2:14:fd:4e:65:42:2c:
         4f:36:20:03:f9:ab:dc:f2:1a:a0:f9:49:ee:01:1b:2c:6a:e8:
         02:7f:cb:a1:6f:2e:e2:78:c7:6d:43:09:ee:cb:8a:67:7c:32:
         c6:78:06:ca:ad:42:61:67:79:9d:12:9d:2d:c6:53:46:fe:38:
         f8:70:70:2e:ad:45:e4:e9:bd:aa:cf:d9:50:ba:fc:43:0f:60:
         2a:12:ac:47:b0:51:31:6b:08:44:34:a9:53:6c:7d:d0:07:5f:
         44:88:66:74:2f:bc:0f:d0:7b:92:52:f8:08:d5:08:15:4d:81:
         6f:76:fd:c8:1d:fe:e9:62:2a:05:73:24:9b:3d:1f:4c:c9:4e:
         39:5a:ad:ee:49:d0:08:d0:92:6b:5b:67:a4:f2:2f:70:b9:2b:
         bf:84:df:34:ce:c9:61:c6:1f:27:81:ae:da:db:e4:83:b9:cb:
         e6:2d:bd:ef:60:c7:e1:60:51:97:8f:4b:3a:7d:7d:d2:60:43:
         1f:26:f1:61:ea:4a:f8:ad:30:6d:42:88:72:71:0c:f3:fa:c3:
         0e:c2:43:88:f1:0b:d6:8f:95:75:37:77:57:b5:0e:3a:2c:a0:
         e7:05:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:59:08 2026 by rpki-client