Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa
File:                     323830343a313331383a3a2f33322d3332203d3e20323633353135.roa (raw, json)
Hash identifier:          tA35m52eVdAJ34C55ZYRxBEc4eVffQt9vogY17tJCdg=
Subject key identifier:   AC:2C:9C:A0:33:54:A9:E3:4F:77:D9:77:44:30:FA:F2:37:80:8B:13
Certificate issuer:       /CN=4177EB4445E439416051AB3B18D882B679B3BA71
Certificate serial:       091C5158AF8732A33758C5C8C80E41C320D47D58
Authority key identifier: 41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa
Signing time:             Mon 03 Aug 2026 16:54:46 +0000
ROA not before:           Mon 03 Aug 2026 16:49:46 +0000
ROA not after:            Mon 02 Aug 2027 16:54:46 +0000
asID:                     263515
IP address blocks:        2804:1318::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1c:51:58:af:87:32:a3:37:58:c5:c8:c8:0e:41:c3:20:d4:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4177EB4445E439416051AB3B18D882B679B3BA71
        Validity
            Not Before: Aug  3 16:49:46 2026 GMT
            Not After : Aug  2 16:54:46 2027 GMT
        Subject: CN=AC2C9CA03354A9E34F77D9774430FAF237808B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:91:40:4e:db:42:4c:e1:89:57:16:0d:f1:a7:
                    2b:22:e8:ef:b6:be:75:e7:c0:a2:a0:22:a7:69:c9:
                    7c:92:5b:d3:cb:cc:12:b3:8c:ae:9d:92:bd:6c:4f:
                    8b:0f:5f:e4:4c:ce:38:07:f5:9b:05:ac:5d:f2:4f:
                    30:8f:ea:de:94:87:c0:3c:0b:c2:2f:95:57:48:3c:
                    4d:c7:36:ac:e1:1d:a0:cb:38:ab:8f:52:65:22:74:
                    55:6e:06:01:b6:ab:03:49:54:1c:e5:4e:7f:9f:a0:
                    cc:27:36:8e:22:51:14:b9:67:41:17:b2:5d:9b:b3:
                    f3:6d:93:82:9f:1c:e5:1a:80:db:3d:5b:e8:9f:0a:
                    54:4a:71:53:e9:ae:c0:ea:09:25:3a:15:86:78:b3:
                    5b:01:db:a8:74:5a:98:1b:c7:60:cd:e6:a6:c3:f9:
                    6e:ab:f6:ff:86:68:fe:8d:c0:e1:c6:2a:0d:12:c0:
                    18:37:35:c4:8a:0a:97:1a:5a:7a:e2:05:35:2f:63:
                    bc:b4:84:dd:cf:9b:35:4f:3f:fb:be:4c:99:16:92:
                    ff:45:33:67:b0:e7:28:2f:ac:d4:e1:30:49:70:d3:
                    3d:dc:c0:ce:fd:ea:01:d4:65:9a:da:26:b4:f6:45:
                    7b:04:64:15:e0:51:09:c1:eb:74:bb:7d:40:12:16:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2C:9C:A0:33:54:A9:E3:4F:77:D9:77:44:30:FA:F2:37:80:8B:13
            X509v3 Authority Key Identifier:
                keyid:41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3332203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:04:9e:4c:2b:33:0d:20:d9:dd:3f:21:b2:70:a9:08:82:
         ba:82:e9:a3:1f:0c:10:4f:79:c5:aa:76:ac:71:d9:55:92:4b:
         7e:ab:44:ed:bb:4f:6d:d2:3a:c8:d7:d0:5b:88:c5:01:c8:d4:
         c7:1b:35:02:50:96:a2:f9:f4:e8:65:76:60:ae:9e:48:e9:b4:
         59:ef:50:a0:d8:20:8c:ef:2a:5d:2a:26:9d:21:25:24:21:0b:
         72:dd:cc:ae:ca:a2:19:36:2b:06:61:03:ee:52:e6:5b:b6:38:
         20:95:3d:2b:5b:a6:c7:f2:3a:4c:d7:ef:a4:96:ee:28:ba:67:
         a1:ff:c7:c6:f9:37:cb:4f:ee:b7:ea:10:3a:25:ca:c6:95:ff:
         91:6d:e0:a8:ae:13:9d:3a:78:24:5e:ea:fd:90:53:70:2e:b3:
         26:d8:6c:84:e5:dd:f8:b7:50:1e:52:90:29:97:b0:3e:60:bb:
         5e:70:ed:d5:14:3f:88:d4:8c:79:42:06:16:0b:44:58:89:6d:
         46:0f:93:df:ba:f4:33:e1:82:28:96:76:30:79:4e:c5:a0:7c:
         f0:b4:21:08:4b:ff:50:43:09:01:b2:8a:e8:ee:e6:06:1e:78:
         70:90:6c:fd:7e:bb:6d:86:7b:68:67:42:b5:02:04:7c:9e:7c:
         2c:b9:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:55:28 2026 by rpki-client