Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3438203d3e20323639303932.roa
File:                     323830343a356635343a3a2f33322d3438203d3e20323639303932.roa (raw, json)
Hash identifier:          YBHRyQZ+NeqjBWU+NidZV6rt7w0JT+UT8RxFxv2KXhI=
Subject key identifier:   B1:D6:B7:BB:DC:D8:F5:95:3A:5B:84:73:E0:34:39:2F:3D:49:77:6C
Certificate issuer:       /CN=AB00D389FD23CB3052DBCE4826BCBE05D0C1D363
Certificate serial:       5CEE4854D4CD5746BDB9A221B281BD0222A48D5F
Authority key identifier: AB:00:D3:89:FD:23:CB:30:52:DB:CE:48:26:BC:BE:05:D0:C1:D3:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3438203d3e20323639303932.roa
Signing time:             Fri 14 Aug 2026 19:23:35 +0000
ROA not before:           Fri 14 Aug 2026 19:18:35 +0000
ROA not after:            Fri 13 Aug 2027 19:23:35 +0000
asID:                     269092
IP address blocks:        2804:5f54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ee:48:54:d4:cd:57:46:bd:b9:a2:21:b2:81:bd:02:22:a4:8d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB00D389FD23CB3052DBCE4826BCBE05D0C1D363
        Validity
            Not Before: Aug 14 19:18:35 2026 GMT
            Not After : Aug 13 19:23:35 2027 GMT
        Subject: CN=B1D6B7BBDCD8F5953A5B8473E034392F3D49776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:83:2a:05:3b:01:70:78:85:f0:66:d3:90:
                    31:d7:a8:8f:d6:8c:9d:ee:62:a3:db:02:94:fc:99:
                    28:a1:df:e4:be:59:5a:9c:0f:97:8c:a7:e4:84:52:
                    4b:62:a0:87:8c:10:ee:77:e0:14:cc:88:72:93:8e:
                    90:bb:3a:b6:fc:47:29:d3:dd:ca:61:5b:0c:56:59:
                    52:47:3d:2b:07:d3:96:e2:a7:55:d1:8b:f5:4d:01:
                    de:4e:29:36:45:1b:1e:57:25:1b:2b:82:3d:0f:b8:
                    26:cf:ec:8e:df:74:e8:22:78:4c:81:42:08:5a:9f:
                    d6:e1:ed:64:e6:4a:24:f5:d7:56:ba:c6:83:fa:61:
                    90:1c:71:95:4b:80:c6:aa:17:18:c2:37:97:0a:a0:
                    ca:78:ad:11:9c:28:8d:d6:eb:35:c2:d1:fd:2e:be:
                    5a:6a:43:13:8a:d8:c4:13:20:25:90:2a:25:ff:53:
                    1a:1f:45:62:43:98:7c:15:5f:11:b4:eb:cb:5c:db:
                    b4:ab:7d:f0:5a:12:4f:3c:73:72:dc:ef:ce:a4:1d:
                    d6:31:72:e1:71:47:51:c0:cf:d3:72:e0:49:a5:c9:
                    c3:2f:43:da:0f:61:26:52:ad:d6:64:c8:46:f5:f5:
                    8b:e7:e4:49:1a:0d:ce:33:33:72:38:b4:24:54:14:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D6:B7:BB:DC:D8:F5:95:3A:5B:84:73:E0:34:39:2F:3D:49:77:6C
            X509v3 Authority Key Identifier:
                keyid:AB:00:D3:89:FD:23:CB:30:52:DB:CE:48:26:BC:BE:05:D0:C1:D3:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB00D389FD23CB3052DBCE4826BCBE05D0C1D363.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/0/323830343a356635343a3a2f33322d3438203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:6e:94:e0:a5:67:c7:e7:a9:d2:66:a3:ba:3b:d3:c7:e6:
         ec:66:b7:06:c6:07:a4:49:9c:3c:36:6b:58:92:91:44:70:12:
         34:7f:77:dd:2c:4e:36:f0:92:97:ee:e2:90:2e:2f:97:7a:8f:
         50:9e:ef:31:08:34:1f:a8:3f:4b:dc:32:d1:ab:a0:5d:18:b7:
         ad:c3:11:a9:e1:40:fe:76:9d:72:cc:cb:63:69:7d:e3:79:60:
         74:f0:6b:fe:5f:a2:e3:d7:ef:d6:4b:75:51:7a:4c:54:b6:55:
         0d:a5:25:dd:a7:a1:e8:b3:0e:da:6d:2a:54:1a:a9:ad:c9:f0:
         ab:44:6a:ab:d9:19:d2:82:7b:d3:af:1f:8e:dd:29:6c:24:07:
         f4:cb:0f:d5:06:a9:4a:75:0b:28:49:70:79:bf:f0:5a:ca:6e:
         7d:85:9d:78:43:90:62:f9:59:bf:07:a9:1c:f4:a9:92:45:c5:
         19:cd:b5:a4:be:59:7a:e2:37:1c:90:7f:d7:67:39:6c:0c:0e:
         f1:2d:ad:85:12:db:7d:09:eb:96:69:f3:61:98:cd:23:24:f3:
         11:5b:e3:50:09:f9:ab:ef:95:ce:a1:e2:bb:4f:b5:1c:09:8c:
         91:70:7c:3f:9e:18:b9:4c:9c:e0:51:b8:81:27:e7:7b:a4:aa:
         35:cf:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:54:19 2026 by rpki-client