Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
File:                     323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (raw, json)
Hash identifier:          s9APBnYdHoCKlk2UFo+/gaEshp4+uceSM3Uu/cYcE+4=
Subject key identifier:   15:74:61:B5:B1:BA:7A:64:47:3D:62:88:BA:42:7A:EC:40:E2:8C:88
Certificate issuer:       /CN=711F71D9DC6B55658776AF536B9D14F47E8355D8
Certificate serial:       3A6BBC42A6687F10DDBC464D8A8AE2E87E62C808
Authority key identifier: 71:1F:71:D9:DC:6B:55:65:87:76:AF:53:6B:9D:14:F4:7E:83:55:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711F71D9DC6B55658776AF536B9D14F47E8355D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa
Signing time:             Thu 30 Jul 2026 13:23:10 +0000
ROA not before:           Thu 30 Jul 2026 13:18:10 +0000
ROA not after:            Thu 29 Jul 2027 13:23:10 +0000
asID:                     264577
IP address blocks:        2804:21d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/711F71D9DC6B55658776AF536B9D14F47E8355D8.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/711F71D9DC6B55658776AF536B9D14F47E8355D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711F71D9DC6B55658776AF536B9D14F47E8355D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6b:bc:42:a6:68:7f:10:dd:bc:46:4d:8a:8a:e2:e8:7e:62:c8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F71D9DC6B55658776AF536B9D14F47E8355D8
        Validity
            Not Before: Jul 30 13:18:10 2026 GMT
            Not After : Jul 29 13:23:10 2027 GMT
        Subject: CN=157461B5B1BA7A64473D6288BA427AEC40E28C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:41:b8:0d:41:9a:63:5e:0b:a0:5f:7e:45:
                    0b:ac:44:70:a6:fb:c6:e6:71:cd:dd:c6:42:a7:a7:
                    71:76:22:95:36:c3:69:7a:03:9c:4b:c6:9b:22:18:
                    a8:7c:47:6d:62:c8:4d:f7:e7:18:93:b5:8d:d8:96:
                    5c:2f:f1:a0:90:04:7a:69:ad:9b:0d:8b:21:78:5f:
                    9f:19:ce:d9:28:31:56:4f:14:41:7b:7d:43:65:cc:
                    b7:7b:ac:19:f0:de:90:c3:4a:ee:6a:63:63:a9:1a:
                    e6:62:9b:9d:e3:9c:c5:5a:8c:0d:49:64:7d:3c:4c:
                    50:da:30:98:b1:bf:81:26:3d:f5:b5:1d:16:47:1a:
                    f2:2c:6d:17:f0:92:90:0e:8b:56:ef:a9:59:bf:51:
                    75:58:2b:0a:7a:07:88:9a:5b:3f:7c:6f:4d:8a:25:
                    ae:34:1b:16:d8:d5:1f:64:b6:40:35:48:c4:7f:c8:
                    b9:49:b1:d6:cb:e1:8d:8d:f2:a9:0a:85:51:b0:1b:
                    56:f9:c0:d8:86:f3:35:74:d1:d7:0c:e9:75:b1:0d:
                    e8:a3:93:8e:0c:93:27:92:4b:80:37:11:62:b1:1a:
                    29:7f:15:37:36:82:17:0c:17:db:ba:e4:60:61:0c:
                    5b:75:28:36:95:d6:d2:c5:c9:ec:d4:48:f9:d3:19:
                    1d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:74:61:B5:B1:BA:7A:64:47:3D:62:88:BA:42:7A:EC:40:E2:8C:88
            X509v3 Authority Key Identifier:
                keyid:71:1F:71:D9:DC:6B:55:65:87:76:AF:53:6B:9D:14:F4:7E:83:55:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/711F71D9DC6B55658776AF536B9D14F47E8355D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/711F71D9DC6B55658776AF536B9D14F47E8355D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/323830343a323164383a3a2f33322d313238203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:70:e7:2c:20:49:3d:2e:df:70:d1:65:bc:86:00:6b:dd:30:
         b9:f8:41:e7:a2:ff:1f:0a:b4:e2:8b:63:0f:43:11:fc:5e:95:
         4f:11:53:0a:cf:1e:49:26:84:f2:c2:f7:1e:fc:e8:37:4b:3a:
         a9:9b:08:f8:91:ca:5f:26:d4:ef:75:24:40:59:d3:68:e4:fe:
         a8:06:a9:f7:9c:4b:ba:90:02:b6:54:a1:39:c1:61:ea:f1:7d:
         07:83:d5:d8:9e:78:26:ea:c3:0d:71:cb:c3:88:5e:7d:1f:44:
         73:bb:18:3a:f2:cd:75:87:bb:df:41:6e:05:9c:dc:0c:30:f1:
         a4:75:ec:d4:9d:ca:0d:fc:be:4c:f1:4d:30:4b:9c:c7:85:15:
         05:92:ea:ea:84:08:bc:b2:f3:8c:05:fc:d4:ec:77:6a:4d:ba:
         0e:0f:72:de:a9:63:1b:b0:f3:92:31:66:94:7e:8c:71:04:a4:
         df:fc:8b:38:60:fc:8c:00:c2:fb:72:26:fb:af:28:ab:29:86:
         0f:b4:9b:f4:c3:01:8e:63:a6:89:77:df:04:71:14:91:cc:e7:
         0c:f2:f4:f3:01:02:e8:5d:fc:fa:c8:32:80:a2:86:88:26:0e:
         38:25:6e:c5:ef:a6:d1:83:6d:91:2e:87:4c:24:ca:0a:1e:5d:
         84:42:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:10:00 2026 by rpki-client