Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3438203d3e203631363134.roa
File:                     323830343a346166633a3a2f33322d3438203d3e203631363134.roa (raw, json)
Hash identifier:          Wr33nJVtlp/bOx5kpyjwz1oYBTkcrmJhGJBHcpNj/BI=
Subject key identifier:   40:8B:09:CD:1B:7E:2A:AB:B1:1A:BF:9F:66:5C:54:04:50:E6:56:21
Certificate issuer:       /CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2
Certificate serial:       07F4CB48EF5C0A0D917F972111D492ECD44E2F7B
Authority key identifier: D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3438203d3e203631363134.roa
Signing time:             Thu 30 Jul 2026 01:20:54 +0000
ROA not before:           Thu 30 Jul 2026 01:15:54 +0000
ROA not after:            Thu 29 Jul 2027 01:20:54 +0000
asID:                     61614
IP address blocks:        2804:4afc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f4:cb:48:ef:5c:0a:0d:91:7f:97:21:11:d4:92:ec:d4:4e:2f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D66BB8CE65AD4BF384941D4C6B525858D1272FE2
        Validity
            Not Before: Jul 30 01:15:54 2026 GMT
            Not After : Jul 29 01:20:54 2027 GMT
        Subject: CN=408B09CD1B7E2AABB11ABF9F665C540450E65621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:bf:a7:4c:20:c1:d9:40:9a:06:ff:49:cf:9b:
                    bd:d5:97:a4:b6:65:4d:a6:64:6a:e0:75:57:8c:17:
                    cd:0c:93:3b:e0:32:95:f4:42:41:54:46:1d:47:65:
                    b9:fb:3e:2e:b8:ba:92:13:c1:6c:8b:34:10:2e:da:
                    31:2e:4e:33:8f:ed:e9:88:d7:99:92:08:16:fc:dc:
                    8e:ff:79:88:62:9c:ad:ed:ab:87:3b:c5:ec:e3:6f:
                    2a:6d:c8:13:82:1e:f7:ae:16:05:24:53:d2:68:b7:
                    57:3f:72:9b:fe:52:58:3e:01:8c:d4:56:88:22:b8:
                    89:8f:40:26:29:f7:e7:93:f3:29:21:41:96:bb:28:
                    d8:c5:75:74:6d:86:46:51:48:42:0c:50:b8:bb:b2:
                    0e:66:7e:e3:e6:09:b9:b7:ac:0c:e0:77:d2:31:13:
                    5d:f6:da:a7:54:96:7b:ed:a9:90:24:ac:18:52:c5:
                    60:42:63:2a:f1:9c:93:8d:69:85:73:ed:27:96:5a:
                    37:e0:a5:64:18:a5:96:c4:ba:1c:bb:89:d6:64:1c:
                    11:f7:1c:99:69:c8:4b:56:81:b5:12:f1:ac:29:6a:
                    ec:4d:92:4f:56:b4:47:af:ed:16:1e:60:fa:2b:04:
                    37:f0:7f:7a:dc:19:06:9c:88:f2:be:e8:36:09:f6:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:09:CD:1B:7E:2A:AB:B1:1A:BF:9F:66:5C:54:04:50:E6:56:21
            X509v3 Authority Key Identifier:
                keyid:D6:6B:B8:CE:65:AD:4B:F3:84:94:1D:4C:6B:52:58:58:D1:27:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D66BB8CE65AD4BF384941D4C6B525858D1272FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/0/323830343a346166633a3a2f33322d3438203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:75:4e:f0:a6:9a:53:0a:ae:7c:aa:a0:e1:d9:60:5c:62:d5:
         9a:a7:d0:4e:80:31:57:f0:f7:35:f7:03:fd:0e:80:fc:9e:c2:
         7b:84:43:83:82:5b:a2:6e:c4:e0:ea:7a:75:2c:21:4b:f7:72:
         cd:64:90:8e:0f:cd:7f:bf:81:43:7e:97:9e:09:05:a5:c3:73:
         93:a3:84:ff:03:41:d5:a6:b7:f2:1a:48:de:0e:2e:f1:ea:7a:
         e9:ab:ae:82:51:72:dd:54:cc:72:3e:9c:79:9e:12:b2:91:e7:
         0a:8f:86:d0:ae:1a:4d:02:ff:56:fb:b5:e7:07:79:17:fe:7b:
         d9:48:b5:27:78:dc:79:22:47:ab:b2:a1:4f:c0:e3:52:73:4e:
         e0:39:c1:46:6f:18:12:14:ed:26:17:c4:10:ff:20:ba:cb:32:
         a2:b1:4b:e1:a2:6e:4d:1b:6a:e8:f2:43:91:94:6e:44:e3:b9:
         4b:66:6b:53:2f:82:af:e3:dc:30:fe:be:d5:5a:8a:a4:60:3a:
         c1:92:74:e2:77:41:ed:9f:12:e8:30:2e:a3:e7:eb:6a:87:74:
         47:20:d9:6c:c8:ab:72:55:48:c6:2a:11:0e:2e:46:0a:59:9a:
         81:4d:b4:c7:25:5e:14:5f:5e:43:da:e2:41:9b:1e:11:b3:98:
         26:c4:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:52 2026 by rpki-client