Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          rabhmXVmB+E2W85qE+aHKpok8VjQaOxMQih5Lm77+EY=
Subject key identifier:   82:DC:29:EC:56:30:8F:58:E9:05:17:F1:C5:18:5C:82:FA:61:22:7E
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       2335D3904FF0069307BA28C09861E80F606E12DD
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 27 Jul 2026 20:33:24 +0000
ROA not before:           Mon 27 Jul 2026 20:28:24 +0000
ROA not after:            Mon 26 Jul 2027 20:33:24 +0000
asID:                     272218
IP address blocks:        2804:83c4:801b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:d3:90:4f:f0:06:93:07:ba:28:c0:98:61:e8:0f:60:6e:12:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Jul 27 20:28:24 2026 GMT
            Not After : Jul 26 20:33:24 2027 GMT
        Subject: CN=82DC29EC56308F58E90517F1C5185C82FA61227E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:6d:3f:42:4b:7a:b1:54:6d:9c:49:65:e1:
                    27:04:c2:0a:b3:46:ea:62:2f:16:91:90:b1:9f:16:
                    a2:56:36:56:82:d4:12:48:0d:6d:17:1e:ff:a2:84:
                    47:89:ae:24:7a:24:cc:4f:d2:c9:28:b1:4c:f8:72:
                    80:c5:55:d1:32:2a:fe:78:dd:30:49:7c:5d:ce:65:
                    f8:ba:73:a6:1c:29:6c:10:89:46:22:42:85:4e:2b:
                    67:87:6d:00:fe:41:31:cc:82:f6:3c:ac:2f:c9:a4:
                    c2:26:13:89:27:32:cd:87:15:2b:eb:a5:5a:40:ad:
                    3d:54:b7:83:cf:99:ef:2a:9d:95:0d:90:f1:56:9f:
                    83:97:87:ad:c3:f1:6b:dc:d2:e9:06:73:7f:b2:80:
                    4b:b5:79:27:7d:f4:9c:2b:93:b1:fc:e2:47:9e:2e:
                    5f:d5:c9:d3:59:1e:e5:2a:94:58:4a:ea:77:b5:7e:
                    e9:5c:01:2d:42:c9:f8:31:bf:b0:a9:58:a9:f7:e1:
                    ec:ae:72:66:fd:08:94:e8:41:ad:d2:87:2f:50:5e:
                    70:7f:d8:b3:91:02:7e:6a:40:23:22:1f:6d:ab:6b:
                    74:05:4b:c6:37:e1:d0:b0:14:f4:6e:20:bc:76:ad:
                    50:0c:77:9a:f6:9a:5f:52:06:b2:bf:18:64:3c:d6:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DC:29:EC:56:30:8F:58:E9:05:17:F1:C5:18:5C:82:FA:61:22:7E
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:d4:2e:0b:b3:36:60:b9:ba:3c:eb:a9:5c:6c:cb:61:66:
         57:6f:0b:aa:e5:bc:9d:75:d6:6b:ad:4a:7f:d8:ac:3a:bd:85:
         76:70:a8:62:65:44:93:18:f3:be:bc:52:90:0b:93:71:27:7d:
         aa:7c:54:82:27:04:8c:ba:d6:34:d4:c1:ba:fc:2e:29:d4:40:
         c0:a6:33:66:fa:f5:26:9a:d4:6e:61:87:46:06:bc:24:d4:9c:
         02:b8:00:69:6c:d9:6e:51:85:00:ca:cd:4f:2f:16:ca:42:a4:
         40:c5:37:b0:f6:c0:ae:7b:57:0c:e9:3f:65:4d:74:36:cd:aa:
         55:53:75:a8:dd:dd:bd:3d:31:f9:1f:a9:8e:78:8e:96:b8:1c:
         4b:c1:1c:49:aa:76:a5:92:36:a8:ca:50:f6:b9:de:6d:18:52:
         4e:7f:d8:21:34:4e:ee:b3:64:f8:70:71:f3:f8:c9:7a:ee:c4:
         eb:ea:4f:11:66:7a:54:38:0f:fb:2e:66:57:0e:d6:fc:b0:27:
         99:1f:33:ec:2c:24:7f:92:eb:40:8c:4d:db:5d:5c:2b:ea:ea:
         35:40:bc:e5:32:b4:d3:5c:1c:e4:7b:d9:0d:9c:cb:18:53:e3:
         58:ac:60:47:89:22:92:bf:5e:a0:74:80:0a:cf:6f:6d:0d:0b:
         31:ad:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:16:29 2026 by rpki-client