Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/323830343a343362303a3a2f33322d313238203d3e20323637353834.roa
File:                     323830343a343362303a3a2f33322d313238203d3e20323637353834.roa (raw, json)
Hash identifier:          wkPtFfyuDOTHhOmZTeJgBmQHkJzdHSmDIQJBb31ip4s=
Subject key identifier:   28:34:DB:57:8C:20:C4:BD:F4:8A:83:E5:5A:D8:7F:59:C9:D3:72:10
Certificate issuer:       /CN=FB5CEE1C8803B1784A457EF4F1028E42429DCB06
Certificate serial:       7959E98A265327059B68077DEFEC7520FCE0E232
Authority key identifier: FB:5C:EE:1C:88:03:B1:78:4A:45:7E:F4:F1:02:8E:42:42:9D:CB:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/323830343a343362303a3a2f33322d313238203d3e20323637353834.roa
Signing time:             Thu 13 Aug 2026 12:31:14 +0000
ROA not before:           Thu 13 Aug 2026 12:26:14 +0000
ROA not after:            Thu 12 Aug 2027 12:31:14 +0000
asID:                     267584
IP address blocks:        2804:43b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.crl
                          rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:59:e9:8a:26:53:27:05:9b:68:07:7d:ef:ec:75:20:fc:e0:e2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5CEE1C8803B1784A457EF4F1028E42429DCB06
        Validity
            Not Before: Aug 13 12:26:14 2026 GMT
            Not After : Aug 12 12:31:14 2027 GMT
        Subject: CN=2834DB578C20C4BDF48A83E55AD87F59C9D37210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:0e:4e:3b:ea:86:dc:a2:4a:3d:f7:09:d3:
                    08:2b:12:e2:91:0c:1b:14:46:85:40:54:d9:ab:81:
                    fd:49:9a:7a:af:cb:78:ae:21:78:9b:e5:88:f7:8c:
                    ca:19:f8:ee:7f:0a:5c:c4:b5:b9:8d:f1:26:a7:4e:
                    56:04:bc:dd:a1:2f:40:96:49:51:e4:2b:eb:04:53:
                    c0:d2:35:4a:62:5f:be:6e:57:32:06:6f:68:69:d1:
                    c7:ea:7c:d4:94:96:b7:01:61:ef:9c:00:cc:57:cc:
                    ac:19:96:70:b7:81:1d:6e:5e:65:95:84:d0:a0:4b:
                    83:7b:d7:26:d2:ac:8c:83:d8:e2:f8:75:84:2f:da:
                    06:ab:98:5a:b2:5e:2d:b4:49:1e:e1:08:94:a0:49:
                    3e:a0:53:b1:68:91:3f:77:1c:00:4a:9c:7b:91:2a:
                    23:03:91:7b:a3:d7:dd:46:70:91:eb:83:68:d4:2a:
                    ab:07:b2:84:57:50:d4:56:f6:36:48:9f:68:30:18:
                    ff:51:ec:18:49:34:e0:e9:c7:b5:cf:5e:8f:e7:3a:
                    94:79:c6:33:28:23:e2:3d:a2:8b:f4:30:50:3a:9c:
                    ea:f0:39:9d:24:79:0a:f3:77:4a:da:2e:5b:6f:12:
                    3a:19:50:45:b8:67:57:18:07:68:b3:e9:df:81:ec:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:34:DB:57:8C:20:C4:BD:F4:8A:83:E5:5A:D8:7F:59:C9:D3:72:10
            X509v3 Authority Key Identifier:
                keyid:FB:5C:EE:1C:88:03:B1:78:4A:45:7E:F4:F1:02:8E:42:42:9D:CB:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5CEE1C8803B1784A457EF4F1028E42429DCB06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/323830343a343362303a3a2f33322d313238203d3e20323637353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:5e:c7:dc:4f:61:e5:b1:1a:49:cd:2c:df:8f:38:d4:a5:
         98:33:2e:4d:8a:ac:cb:1a:26:32:d5:99:1f:30:09:57:a5:66:
         19:b9:76:b8:60:50:a7:69:35:d6:f7:dc:d9:c8:4a:36:6e:5e:
         10:9c:39:7e:d2:49:b9:80:ac:18:fc:d9:fc:22:dd:ea:cd:de:
         c4:ff:ae:74:ca:0e:45:74:65:ad:b8:b7:4d:63:19:90:aa:b6:
         87:ee:a0:e6:1f:4e:1b:28:b5:60:4f:52:80:a7:7e:2b:25:67:
         cd:15:e9:11:bc:0e:aa:e1:2e:bc:89:2d:3c:09:15:2c:00:b7:
         bb:8d:2f:fa:db:02:6a:ee:3d:ab:8a:21:59:66:eb:1b:be:7d:
         89:e1:b8:39:45:34:4d:aa:73:e4:61:62:fe:ab:57:dc:0b:8b:
         ad:59:6a:de:f3:78:25:f7:44:d0:67:56:14:1c:0b:62:d9:89:
         70:c3:fb:f6:3e:a6:b2:3b:8b:be:7e:55:f1:ca:7f:11:ce:55:
         78:13:13:12:1d:7d:55:cf:6a:7e:d5:73:3c:e9:83:c7:1c:00:
         87:f3:63:9b:92:a6:64:17:de:a8:5c:9e:1a:68:5c:7e:ac:40:
         23:e8:40:be:2c:7a:42:be:aa:78:4e:71:06:91:0b:ef:78:25:
         55:8d:1f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:52 2026 by rpki-client