Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa
File:                     323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier:          1YcftdyFUlC0JQdE92iRbIIZ9xrKySxRE7BscpWC3R4=
Subject key identifier:   FC:B9:AA:02:37:D2:AD:93:40:4D:41:84:61:4C:69:EC:E3:C1:77:7E
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       793018DB68D9E5E542CECF499812A303490A57C8
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa
Signing time:             Wed 05 Aug 2026 13:36:54 +0000
ROA not before:           Wed 05 Aug 2026 13:31:54 +0000
ROA not after:            Wed 04 Aug 2027 13:36:54 +0000
asID:                     272218
IP address blocks:        2804:83c4:610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 20:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:30:18:db:68:d9:e5:e5:42:ce:cf:49:98:12:a3:03:49:0a:57:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Aug  5 13:31:54 2026 GMT
            Not After : Aug  4 13:36:54 2027 GMT
        Subject: CN=FCB9AA0237D2AD93404D4184614C69ECE3C1777E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:53:95:db:d3:5f:96:e2:29:7a:39:63:c8:
                    f9:55:61:94:6d:53:58:3c:d4:ed:e0:43:ab:b5:81:
                    ad:51:92:f7:b5:08:6a:71:3d:e0:f4:02:77:41:94:
                    61:1f:5d:63:01:4b:b7:0c:7f:c3:7e:56:f5:81:49:
                    42:41:4b:bb:d3:fd:97:74:bc:9e:26:51:96:5a:4d:
                    96:e5:76:c5:53:4d:f4:68:1d:8e:c7:a3:89:de:94:
                    7c:57:c8:24:b1:35:8f:45:07:14:b8:9c:1a:b6:0c:
                    e7:0f:d6:71:73:e9:0d:d9:a5:85:65:4d:9c:bb:cd:
                    80:6d:b2:8d:af:67:83:a4:e2:0b:c8:76:1d:ba:97:
                    57:aa:28:bc:3c:97:72:01:9c:d4:07:05:30:b7:fc:
                    5f:6d:b9:cd:26:3f:d9:de:26:b6:7c:fb:d0:00:2d:
                    c8:91:14:f1:14:34:c6:ed:2a:01:85:48:24:9a:c3:
                    c3:cb:ea:63:35:68:c5:99:15:82:71:db:1c:00:c2:
                    9f:a3:ec:df:0c:9b:b7:84:5c:9a:51:1a:73:b9:8e:
                    97:26:39:e3:ff:23:c0:3e:cb:b5:26:99:30:16:26:
                    37:3b:7c:8c:c3:d6:e1:11:5b:b2:da:1c:69:55:12:
                    96:59:4a:9b:57:21:96:b4:e0:00:5c:36:4b:cf:e0:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:AA:02:37:D2:AD:93:40:4D:41:84:61:4C:69:EC:E3:C1:77:7E
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3631303a3a2f34342d3434203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:610::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:5a:72:22:ed:48:ac:d6:bf:7f:d6:05:82:4a:0a:aa:f4:
         2a:a5:04:23:3e:98:f8:d1:a9:20:b2:e2:90:55:fb:da:82:bf:
         2d:ad:11:2f:c5:26:1f:be:52:cc:b5:03:2b:01:3c:73:27:05:
         6e:69:0d:4b:6e:39:43:dd:a1:d9:0b:5a:27:87:20:ec:89:93:
         ba:ba:4f:c8:a1:e1:97:66:83:10:95:0b:8b:cf:b0:99:9f:12:
         f4:b8:15:54:67:f3:6a:da:e2:4b:d9:08:f7:ff:85:ea:2d:26:
         4e:37:c8:2a:2d:00:5e:ed:ec:c4:e5:9e:f8:a1:c4:d6:78:9a:
         2f:c2:e8:77:e3:b9:1d:cf:95:26:43:84:b2:4d:0e:97:d1:ee:
         11:f1:eb:d0:85:14:7b:46:80:a1:08:8d:34:30:60:9c:d5:a3:
         b7:5d:f6:92:90:7d:5c:3d:ee:89:bf:0b:18:3d:0b:15:e4:85:
         73:9e:0f:8b:cd:8a:3d:d7:48:3b:17:52:67:ac:f8:65:4a:81:
         ed:dd:20:8f:45:eb:51:49:60:9e:0c:4c:4b:57:c6:b0:05:76:
         55:dd:a7:05:91:05:be:38:67:7e:3a:7c:62:33:e4:50:27:0c:
         60:ed:9c:32:55:0b:d0:7a:62:35:4b:93:4f:55:45:42:90:42:
         1f:a4:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:14:53 2026 by rpki-client