Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34302d3430203d3e20323638333030.roa
File:                     323830343a383363343a316530303a3a2f34302d3430203d3e20323638333030.roa (raw, json)
Hash identifier:          yc4dp6MwyoRtb/1SYpekGh2EAmdl7Ext0Io5lD0opA8=
Subject key identifier:   0F:84:61:4D:65:55:D7:0A:9E:A8:D4:CE:D3:36:91:31:85:8F:F5:9C
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       1FBB4B4BCEF761BA63FE1913EFE7D9FBD9BC1A32
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34302d3430203d3e20323638333030.roa
Signing time:             Wed 05 Aug 2026 13:36:54 +0000
ROA not before:           Wed 05 Aug 2026 13:31:54 +0000
ROA not after:            Wed 04 Aug 2027 13:36:54 +0000
asID:                     268300
IP address blocks:        2804:83c4:1e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 15:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bb:4b:4b:ce:f7:61:ba:63:fe:19:13:ef:e7:d9:fb:d9:bc:1a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug  5 13:31:54 2026 GMT
            Not After : Aug  4 13:36:54 2027 GMT
        Subject: CN=0F84614D6555D70A9EA8D4CED3369131858FF59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:08:cc:6e:a6:fb:d0:6a:b4:4b:83:45:3b:
                    af:56:ee:9c:0d:f5:a9:9e:61:6c:3a:01:b8:f0:7d:
                    8f:7f:b0:67:50:e2:8c:d1:f1:f1:1a:16:77:b8:39:
                    71:a4:db:ee:cf:18:39:c2:b2:32:d8:f2:52:50:3c:
                    15:b0:1e:30:25:65:22:14:89:f5:c9:19:58:d7:08:
                    6a:23:f4:99:e6:29:e2:7f:9b:55:62:d0:80:f6:41:
                    a3:3f:73:af:4e:08:cb:bc:e3:26:35:ba:c6:71:81:
                    b0:d1:0c:83:c4:6a:13:d2:e3:00:f6:70:41:40:f2:
                    7c:5b:6a:13:ed:9c:be:fe:b1:23:a7:f1:65:55:e5:
                    a1:bc:5e:50:fb:7a:cd:65:d4:18:8a:36:90:61:ff:
                    73:63:aa:25:8d:cc:34:44:16:82:9e:9e:a8:75:1e:
                    46:14:fb:64:cb:86:3f:da:97:68:33:15:c6:4d:fc:
                    4b:a8:79:c3:67:cb:19:74:34:52:2b:c7:d5:37:a7:
                    c2:a5:66:61:88:08:78:f1:8a:fd:a5:f7:ea:cf:42:
                    08:65:3d:78:d9:72:4d:96:4a:99:67:8e:4a:ac:8b:
                    5e:41:e2:5f:bc:a3:0b:bf:77:49:41:a1:d6:2e:b0:
                    76:5e:6d:e9:3f:07:5a:a0:a5:36:66:dd:3c:89:40:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:84:61:4D:65:55:D7:0A:9E:A8:D4:CE:D3:36:91:31:85:8F:F5:9C
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34302d3430203d3e20323638333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:60:a3:de:4c:68:20:bb:10:f7:9f:92:8d:f7:fd:3c:9c:
         4e:ee:18:76:a1:fc:09:04:73:cc:34:f1:9a:ff:e3:79:6b:96:
         79:43:87:91:1a:b8:34:c6:9e:17:97:74:67:f9:32:56:f7:de:
         06:54:48:8f:46:7d:00:ba:60:dd:98:59:87:05:d2:18:4d:44:
         b8:bc:bf:c5:70:9d:78:97:a3:2c:78:36:d3:8d:3c:2e:2e:dc:
         3f:59:d0:44:bb:1b:fa:5a:19:3c:bb:16:d6:5f:98:00:75:d4:
         3a:85:03:a0:93:d3:30:90:cf:40:bf:41:b2:84:81:d8:ed:e3:
         4a:e6:d4:a0:28:a6:e3:6e:e8:a7:e7:04:cf:ff:59:c7:8f:81:
         4c:fc:29:bb:79:2b:eb:47:60:b5:eb:ad:a4:dd:8a:a9:fa:e9:
         a5:d6:73:d5:58:00:58:ce:7e:bc:d1:61:93:6e:fa:a8:ea:76:
         14:16:08:d7:30:34:c3:93:64:e5:f8:49:0f:82:f8:8d:72:67:
         f2:5a:e7:00:04:11:ff:4d:85:7f:77:37:ab:b7:a1:66:20:ad:
         cd:77:97:3b:2f:14:39:17:05:9d:66:21:f5:e6:df:e7:f2:6a:
         b6:50:8b:ed:4b:1b:e9:ce:af:fe:d3:d1:ae:0c:15:10:b8:0c:
         06:6b:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 17:36:55 2026 by rpki-client