Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d3438203d3e20323635393133.roa
File:                     323830343a336663343a3a2f33322d3438203d3e20323635393133.roa (raw, json)
Hash identifier:          UTHsSKmLKMUnKzOR1dRr2vReaKbSgqpbarlL7XzKZEU=
Subject key identifier:   87:85:F5:52:F3:8D:1C:5F:81:C4:AE:96:56:8C:E5:D8:A0:34:91:3F
Certificate issuer:       /CN=22FA4E557286489926DC93881B6C67734DA20CE6
Certificate serial:       30B8BAC1460CDEE95E14C98703FB6CE13D8FD3BC
Authority key identifier: 22:FA:4E:55:72:86:48:99:26:DC:93:88:1B:6C:67:73:4D:A2:0C:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA4E557286489926DC93881B6C67734DA20CE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d3438203d3e20323635393133.roa
Signing time:             Mon 03 Aug 2026 14:38:02 +0000
ROA not before:           Mon 03 Aug 2026 14:33:02 +0000
ROA not after:            Mon 02 Aug 2027 14:38:02 +0000
asID:                     265913
IP address blocks:        2804:3fc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/22FA4E557286489926DC93881B6C67734DA20CE6.crl
                          rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/22FA4E557286489926DC93881B6C67734DA20CE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA4E557286489926DC93881B6C67734DA20CE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b8:ba:c1:46:0c:de:e9:5e:14:c9:87:03:fb:6c:e1:3d:8f:d3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22FA4E557286489926DC93881B6C67734DA20CE6
        Validity
            Not Before: Aug  3 14:33:02 2026 GMT
            Not After : Aug  2 14:38:02 2027 GMT
        Subject: CN=8785F552F38D1C5F81C4AE96568CE5D8A034913F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:b4:d4:74:55:f9:20:58:1c:ba:bb:00:09:
                    23:96:8b:d2:6c:1c:38:cc:8f:66:c6:6e:a9:9f:1b:
                    6b:3d:54:25:bf:f6:f3:f4:e6:a8:e6:73:6a:63:3a:
                    7d:00:69:db:98:09:6a:5a:e4:af:82:04:f2:46:1c:
                    52:01:5c:45:64:ed:7d:cb:a8:84:13:5f:37:e2:03:
                    5a:45:ab:d2:44:1b:33:53:a1:20:49:25:82:6c:2d:
                    36:b9:72:c0:a9:b2:0b:44:3f:c6:17:73:11:97:55:
                    2c:8a:dd:e7:8c:47:61:ed:0d:82:c7:8e:af:09:64:
                    06:a3:46:7e:e5:6c:9e:c8:30:ac:12:13:98:7e:a2:
                    5b:e8:54:77:f2:03:bc:e4:6a:01:18:a1:a5:08:d7:
                    26:93:5b:7e:c5:d2:92:8d:c6:1c:02:f5:bf:b9:2d:
                    24:8c:65:e5:a2:e9:44:f9:fe:e4:24:ad:73:39:29:
                    e4:9d:76:f6:40:39:f1:c5:be:73:e0:72:58:73:aa:
                    a8:ea:6a:cf:ec:24:af:af:04:b6:02:60:3e:f1:07:
                    03:29:28:cf:86:71:32:1a:04:6a:ed:da:ea:93:61:
                    83:b1:f0:c4:8b:46:86:ac:2a:c5:b1:35:b8:8e:88:
                    51:6a:26:a5:73:b5:7b:45:c8:ff:38:38:53:d1:d2:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:F5:52:F3:8D:1C:5F:81:C4:AE:96:56:8C:E5:D8:A0:34:91:3F
            X509v3 Authority Key Identifier:
                keyid:22:FA:4E:55:72:86:48:99:26:DC:93:88:1B:6C:67:73:4D:A2:0C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/22FA4E557286489926DC93881B6C67734DA20CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA4E557286489926DC93881B6C67734DA20CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/323830343a336663343a3a2f33322d3438203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:c4:33:cf:57:ca:03:1d:4a:dd:fe:22:b3:30:05:c4:72:87:
         ce:75:11:02:b4:a9:c1:d3:55:6a:8d:40:56:2b:82:b3:b8:45:
         c9:72:81:bb:c6:8e:4b:4e:cd:a4:fa:b5:41:b6:3d:05:8f:62:
         9a:a9:db:d2:da:7d:9e:f3:67:60:82:17:6e:2c:b9:6e:28:60:
         50:af:54:3a:fa:08:b2:12:e4:0f:a7:31:35:6c:84:df:9c:4d:
         ef:42:46:1b:59:8d:aa:a9:b5:85:11:2e:9c:e7:02:99:df:ba:
         03:cb:c1:6c:ac:a8:a3:ec:c0:0f:bb:6b:01:90:09:83:a4:63:
         28:e4:12:f2:7d:34:bd:08:22:4a:f5:07:d3:1f:4e:51:c7:be:
         96:9f:99:99:fa:6b:1d:fc:8f:6e:07:17:ff:b8:4c:fc:10:e7:
         80:21:72:5d:59:7a:48:d0:6c:7c:6d:2f:78:3f:51:12:f3:0a:
         bb:12:cf:e4:14:73:2c:3c:27:b1:6e:3d:7d:d5:c8:61:0b:e8:
         4b:9b:dc:a7:19:3b:20:43:3c:e7:1a:c0:2f:cc:1f:84:b8:13:
         e0:36:8f:27:a9:c0:0f:47:ba:17:73:e9:8f:9a:e4:f0:0d:47:
         ee:bf:15:48:ec:cd:e9:b2:2c:19:e0:ad:5c:b6:0f:81:d5:3e:
         ec:45:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:42:40 2026 by rpki-client