Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa
File:                     323830343a333032633a3a2f33332d3333203d3e20323634393334.roa (raw, json)
Hash identifier:          ME6xNUb+LZP4yG81fYONVG1N38TQci7dt8TajtAAYRg=
Subject key identifier:   85:15:E6:0A:94:31:A0:77:30:BF:FE:C9:C4:9D:03:AE:F4:18:CD:5D
Certificate issuer:       /CN=E218C01DA973A8B3E7216095AB8855E6A9D21676
Certificate serial:       4DF18082CFCB6402979E299B40ED25E940BFE133
Authority key identifier: E2:18:C0:1D:A9:73:A8:B3:E7:21:60:95:AB:88:55:E6:A9:D2:16:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa
Signing time:             Thu 20 Aug 2026 23:20:30 +0000
ROA not before:           Thu 20 Aug 2026 23:15:30 +0000
ROA not after:            Thu 19 Aug 2027 23:20:30 +0000
asID:                     264934
IP address blocks:        2804:302c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:80:82:cf:cb:64:02:97:9e:29:9b:40:ed:25:e9:40:bf:e1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E218C01DA973A8B3E7216095AB8855E6A9D21676
        Validity
            Not Before: Aug 20 23:15:30 2026 GMT
            Not After : Aug 19 23:20:30 2027 GMT
        Subject: CN=8515E60A9431A07730BFFEC9C49D03AEF418CD5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:67:28:40:f1:b0:89:11:3c:16:d6:16:db:
                    14:e1:a2:73:67:ca:e7:fd:28:e8:3f:e9:84:ac:f8:
                    32:e2:d1:b4:d8:18:d2:2f:59:df:ae:72:68:f9:2c:
                    6f:bc:4b:65:de:17:b7:bb:f0:dd:3c:bf:79:b7:12:
                    8c:dd:e5:4f:ad:ca:0f:3d:b9:50:8a:5e:65:36:d9:
                    03:bc:66:b1:5c:0d:b5:67:e2:f9:41:bc:87:5a:2a:
                    bc:65:63:e4:e4:95:e0:e3:c6:30:e3:b8:12:16:d6:
                    33:9a:b3:4a:d1:5e:62:3c:10:e9:b6:3e:a0:2a:91:
                    7c:c3:b5:99:a2:19:f8:fe:e7:7e:a8:c4:b0:69:a7:
                    e9:44:a9:ca:5e:67:8f:13:15:e0:29:67:b7:0f:bd:
                    b4:5b:08:ff:1e:7c:05:96:22:07:8f:21:3f:ec:5c:
                    ae:14:7f:2d:de:f8:b4:3d:2b:29:c4:d3:93:c1:36:
                    19:c7:64:93:4c:f2:05:c2:a2:6e:bd:29:47:58:f7:
                    92:02:49:27:e2:07:c9:fe:80:b4:f9:85:a8:0a:ec:
                    43:15:c6:aa:48:31:fa:d2:ad:48:fb:d9:81:71:14:
                    83:ce:d5:e1:0a:ed:ca:4d:e4:74:13:2c:91:75:3c:
                    2e:72:8b:43:76:95:5e:01:ba:04:66:05:17:c2:ca:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:E6:0A:94:31:A0:77:30:BF:FE:C9:C4:9D:03:AE:F4:18:CD:5D
            X509v3 Authority Key Identifier:
                keyid:E2:18:C0:1D:A9:73:A8:B3:E7:21:60:95:AB:88:55:E6:A9:D2:16:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/323830343a333032633a3a2f33332d3333203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:302c::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:aa:ca:31:8d:86:ba:07:b2:3b:7c:80:22:e4:d4:f8:8b:
         63:fd:0f:4b:60:a8:fe:e6:4a:82:ae:f1:5f:93:83:03:76:85:
         55:4d:f0:9e:e4:07:48:a2:78:70:97:00:ac:e1:26:b8:c9:4d:
         1a:d9:1b:fd:1b:50:0e:55:b2:e0:a5:04:09:23:4a:ea:c8:5b:
         4c:f7:e7:a4:45:05:be:4f:7a:18:b9:d3:9b:7a:d9:64:81:6d:
         19:b3:79:5d:d8:96:af:e2:2d:66:d2:10:c7:34:f1:4c:3f:df:
         4a:cd:07:f9:99:9f:b0:fe:79:50:cc:8d:2c:0f:8d:07:bf:13:
         b8:a5:97:bd:b4:f2:c0:0c:11:7c:ed:42:e2:a9:dd:8a:27:83:
         98:de:d1:de:3c:e7:15:9f:ad:a5:16:dc:54:6a:fa:e8:7c:ab:
         6f:78:52:82:bf:e7:a7:68:f2:bf:6a:66:b7:b9:ce:c6:72:00:
         13:c6:2f:2f:64:32:51:53:75:86:7c:6b:0a:ac:d5:d2:63:f5:
         11:5e:6f:09:95:01:b5:32:5b:65:c7:df:ad:c3:ca:f5:ab:3b:
         92:63:78:3d:15:46:fc:bc:c1:4d:76:74:96:79:75:18:a6:c3:
         e3:9b:6f:07:c2:8e:f9:9a:97:10:11:4a:99:5c:e8:b7:82:3d:
         54:7a:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:35 2026 by rpki-client