Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
File:                     323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier:          dp6dvWSVwridKVvYCEecehG9EUJ+C0/DwXlPmjpCLw0=
Subject key identifier:   92:37:82:1C:1C:7B:75:B2:44:5D:E1:D6:CA:5E:EB:35:09:9C:ED:9E
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       6697BAC385A9FFF089251869411643D1E323D416
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
Signing time:             Mon 27 Jul 2026 20:33:22 +0000
ROA not before:           Mon 27 Jul 2026 20:28:22 +0000
ROA not after:            Mon 26 Jul 2027 20:33:22 +0000
asID:                     272218
IP address blocks:        2804:83c4:100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 15:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:ba:c3:85:a9:ff:f0:89:25:18:69:41:16:43:d1:e3:23:d4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Jul 27 20:28:22 2026 GMT
            Not After : Jul 26 20:33:22 2027 GMT
        Subject: CN=9237821C1C7B75B2445DE1D6CA5EEB35099CED9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:16:17:30:62:70:27:40:5c:d7:3d:1e:1e:
                    1c:59:56:0b:bb:9a:f7:7c:14:52:77:bd:e0:b0:15:
                    91:9d:69:07:19:59:9c:20:c9:51:46:84:69:29:c7:
                    ab:11:f3:8b:fe:88:cf:5c:5b:4a:9d:42:52:0d:7a:
                    aa:1d:70:bf:92:f7:83:03:8c:99:c7:b4:f1:aa:6d:
                    1b:76:60:cd:73:8e:b6:c8:03:a3:da:44:1e:33:7b:
                    0c:0c:85:06:66:7f:47:2e:b8:77:b8:99:db:6f:0f:
                    8a:c5:03:bb:1d:ba:82:a2:02:00:15:61:29:1e:43:
                    7d:ba:27:cc:8a:ca:5f:90:56:5a:74:92:85:c2:f7:
                    02:ee:2f:bb:24:16:1b:f4:2a:03:34:26:41:f8:09:
                    d9:30:57:93:f2:9f:fa:e7:e8:63:bd:83:13:f6:0d:
                    20:01:82:45:3f:39:01:65:41:04:a2:36:92:40:19:
                    2a:32:a5:c3:a3:8f:5c:92:81:79:f8:3d:fb:c2:e8:
                    65:98:76:18:06:54:09:6e:43:d0:4f:3f:c3:68:eb:
                    d0:1b:06:f4:a1:79:7e:fa:ba:2a:ac:6d:4c:51:0b:
                    18:9e:9f:a1:e0:b2:d6:87:56:ad:24:dd:2c:e1:b4:
                    b6:18:1a:7e:75:f6:e3:b5:91:9b:cb:a7:c6:53:44:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:82:1C:1C:7B:75:B2:44:5D:E1:D6:CA:5E:EB:35:09:9C:ED:9E
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         ba:dd:15:86:70:de:21:da:00:33:9e:9c:d0:3e:0e:7f:53:8b:
         d0:25:4d:c7:cf:0e:2c:3e:06:c5:1d:e0:2e:2b:b5:3f:14:94:
         c1:88:f9:6e:6c:23:74:d0:13:11:55:26:cb:c8:6d:da:56:5d:
         bd:6b:87:6e:bc:38:f8:9d:61:42:0c:c8:5a:bf:da:fd:4d:f8:
         8d:34:54:c3:ff:6b:b4:a8:88:3d:b7:14:04:58:63:f1:ce:48:
         80:8f:53:ae:c5:b4:64:8a:5d:fb:d5:92:db:e1:1c:91:c1:aa:
         97:90:21:84:6a:b5:d6:43:ae:aa:33:62:0e:0c:40:bb:0d:01:
         71:e7:b0:6a:22:ab:7c:d9:b0:51:ba:a1:1f:45:e9:80:c6:98:
         56:ad:c1:99:0e:b1:60:3f:53:c1:39:04:cf:82:21:5f:90:06:
         ae:57:7c:d3:c9:2f:2e:a2:9f:0e:b8:81:33:58:81:f8:6f:9d:
         19:59:92:b5:62:3f:58:e3:29:49:bb:f7:26:22:9c:cd:1e:eb:
         ba:77:93:21:9c:ec:ed:31:bb:a3:2f:57:79:35:46:f3:03:44:
         09:f4:17:b6:53:11:b6:dd:4a:ff:3d:10:2d:67:2a:50:75:04:
         a4:2d:37:59:d1:3d:b3:94:1b:a8:b2:17:9a:b1:e0:d8:f6:6f:
         83:68:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:07:25 2026 by rpki-client