Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3438203d3e20323730343331.roa
File:                     323830343a366265303a3a2f33322d3438203d3e20323730343331.roa (raw, json)
Hash identifier:          KDqN+WTqZRxRB1lCBKFXt32NNMb6s+jvurV5sjZAUWU=
Subject key identifier:   2D:BE:87:72:08:43:04:E6:96:90:23:33:C5:20:93:CE:EA:B2:68:2A
Certificate issuer:       /CN=797EA179F58872917F817056DDA50640D6141177
Certificate serial:       17835BDA26D7826080C38A4D9A5E5589E61C323F
Authority key identifier: 79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3438203d3e20323730343331.roa
Signing time:             Mon 10 Aug 2026 03:02:49 +0000
ROA not before:           Mon 10 Aug 2026 02:57:49 +0000
ROA not after:            Mon 09 Aug 2027 03:02:49 +0000
asID:                     270431
IP address blocks:        2804:6be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl
                          rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:83:5b:da:26:d7:82:60:80:c3:8a:4d:9a:5e:55:89:e6:1c:32:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EA179F58872917F817056DDA50640D6141177
        Validity
            Not Before: Aug 10 02:57:49 2026 GMT
            Not After : Aug  9 03:02:49 2027 GMT
        Subject: CN=2DBE8772084304E696902333C52093CEEAB2682A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:7c:f5:7c:96:c1:22:63:36:d7:bb:39:24:
                    22:a4:9a:25:bd:bd:c8:d7:7c:c2:a2:8e:e3:51:e9:
                    a4:a3:e1:56:96:55:90:20:e0:3c:e0:3b:86:25:2e:
                    43:fd:11:57:ca:e4:7d:3b:a7:7f:20:00:82:e6:44:
                    df:b0:86:7e:ab:56:df:18:be:a3:31:25:53:ba:bc:
                    f9:9e:0a:2f:17:ee:ce:3c:9d:e9:2d:7b:4b:76:fb:
                    6f:27:eb:f1:17:04:ff:fb:9e:0b:eb:ff:d8:c3:28:
                    b0:9b:13:78:10:62:82:0c:e6:5d:f6:1c:10:7a:73:
                    4f:2e:a9:88:a9:7f:0e:71:a7:6f:f1:af:28:e0:c8:
                    1d:9f:8a:a6:3c:85:8d:b2:ed:f7:91:f7:68:04:78:
                    c9:c1:9b:52:3b:82:24:fb:4e:3f:f8:06:88:5b:bf:
                    12:c5:e5:17:a9:db:3c:3c:5d:1b:ac:08:c9:72:06:
                    b7:04:ed:cb:7e:a2:40:28:38:4b:95:24:a7:bb:13:
                    11:fc:8e:35:97:d2:6c:af:4b:8c:4c:bd:14:5c:4c:
                    4c:96:4c:16:b1:b3:c4:26:49:62:5e:05:d3:e6:14:
                    e8:80:49:3b:58:48:06:13:36:25:7b:e2:f7:18:d9:
                    83:ea:1f:22:be:cd:8c:04:76:0f:13:8d:9c:80:57:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:87:72:08:43:04:E6:96:90:23:33:C5:20:93:CE:EA:B2:68:2A
            X509v3 Authority Key Identifier:
                keyid:79:7E:A1:79:F5:88:72:91:7F:81:70:56:DD:A5:06:40:D6:14:11:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/797EA179F58872917F817056DDA50640D6141177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EA179F58872917F817056DDA50640D6141177.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3a2f33322d3438203d3e20323730343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:d6:f3:d3:1c:4f:4c:a4:00:82:ef:08:ce:18:57:d2:f3:
         4c:6d:25:e4:34:31:e1:4b:20:6e:bd:74:93:c3:06:80:ec:78:
         c0:e1:a1:89:79:42:2a:ca:22:19:ef:4d:e5:87:44:af:62:25:
         f0:7a:01:36:11:91:52:df:62:f5:8e:60:f7:df:00:a4:57:06:
         0c:69:13:20:3a:43:cc:87:18:d8:08:3c:25:66:80:34:1f:ca:
         2b:d7:42:03:fa:ed:41:b8:c8:16:09:8e:6a:f4:23:c6:7e:f7:
         69:d1:0a:70:9b:26:26:1c:b8:ea:c5:b8:03:bd:48:7d:6b:b3:
         94:35:f4:c5:79:cb:aa:05:7e:a0:12:63:a8:23:9f:49:63:c0:
         80:b2:4f:8c:a6:2c:0e:54:24:7b:1f:35:11:e3:7d:d5:13:5f:
         f2:21:b2:1e:22:9b:d1:20:a8:56:1c:1d:95:f2:55:ad:19:7b:
         95:c6:e7:1f:bd:18:b8:aa:a2:c4:98:7d:bb:0b:41:85:30:83:
         37:68:63:32:47:48:d0:bb:1d:0b:55:7f:fc:2e:02:94:55:cd:
         7a:7b:de:4e:0f:5d:e2:f3:4a:31:7d:7d:a7:ba:e8:94:fb:e0:
         d5:0a:80:cb:5b:74:4a:9c:78:4a:b3:4b:a8:20:70:fa:ad:52:
         dc:05:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:01:20 2026 by rpki-client