Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          GHxtuY3OjYF7vtgNDqDp+qhT5m/Mw1s6VHS4bFGtIL8=
Subject key identifier:   93:5D:9F:1F:34:CD:A2:B2:DE:68:38:72:58:06:83:8B:E2:EA:80:78
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       4E5F5FEF959A61095B9F8FB66E10256E004FE1AA
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 27 Jul 2026 20:33:23 +0000
ROA not before:           Mon 27 Jul 2026 20:28:23 +0000
ROA not after:            Mon 26 Jul 2027 20:33:23 +0000
asID:                     272218
IP address blocks:        2804:83c4:801c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5f:5f:ef:95:9a:61:09:5b:9f:8f:b6:6e:10:25:6e:00:4f:e1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Jul 27 20:28:23 2026 GMT
            Not After : Jul 26 20:33:23 2027 GMT
        Subject: CN=935D9F1F34CDA2B2DE6838725806838BE2EA8078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:2d:6a:03:c6:48:21:d0:44:05:5b:2e:5f:
                    b4:66:f4:72:9c:14:67:5a:9b:81:ab:55:78:08:7d:
                    09:79:df:b8:a0:05:e4:d8:2b:d6:75:b5:c7:6c:bc:
                    bf:d6:cb:bd:e7:2a:2e:b3:bb:1a:c9:b4:80:4b:d3:
                    9d:c4:56:99:ba:20:97:5e:fb:59:63:26:01:49:89:
                    a1:7f:8e:62:1e:f1:e7:3e:44:77:d0:ba:42:cc:d7:
                    7b:2f:04:8c:b7:c2:e6:91:87:12:82:11:45:ce:04:
                    d0:88:72:3b:d2:50:7c:44:87:d7:e4:20:fa:1c:9d:
                    20:19:94:44:e6:05:3a:0a:46:55:a0:bd:70:d3:5d:
                    de:ba:70:c4:67:70:0d:07:2a:c8:fe:17:2b:35:ff:
                    b9:b3:13:39:a1:b2:d4:22:70:62:43:8c:d1:a2:36:
                    59:d9:a7:44:6f:54:ed:e4:ca:22:ec:96:44:93:cd:
                    67:c5:35:56:ae:d2:41:4f:fe:b6:85:b8:5d:c9:c0:
                    16:e2:ea:b7:f6:10:98:41:66:a3:b5:23:62:e5:c5:
                    ae:f1:02:3f:db:de:dc:8d:5f:2d:0e:8d:73:b8:8c:
                    21:a2:17:f0:31:7d:90:93:85:45:d3:11:3f:4e:01:
                    22:0a:ea:99:10:2d:c9:75:4c:43:d8:bf:13:44:29:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:9F:1F:34:CD:A2:B2:DE:68:38:72:58:06:83:8B:E2:EA:80:78
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031633a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:801c::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:a0:58:fb:a4:c1:03:49:d1:e3:d4:9f:a9:ff:8d:50:a5:38:
         1c:3b:e6:18:64:4c:8c:29:e8:ba:6c:7b:5a:19:bf:a9:b1:b9:
         70:4d:e9:8a:1c:ee:5a:1f:e3:02:80:63:f8:25:88:98:f2:43:
         f3:3e:1f:d5:df:d4:10:c0:86:1a:07:db:6a:57:7d:1b:41:75:
         7d:ef:1c:38:d4:8f:ce:35:0e:a1:83:cd:96:df:eb:68:3a:78:
         98:02:ca:ed:ee:60:b8:7d:85:ab:a5:00:46:75:c4:f0:b0:9f:
         9f:21:1c:8c:1b:1b:7b:ed:dc:c7:c0:e1:d0:6b:46:a0:3f:ca:
         e0:bd:cc:04:96:fc:ca:82:6b:19:d1:b5:ec:63:1d:20:93:5f:
         93:ac:cd:2b:7b:09:fe:7c:e8:5c:5d:76:3c:84:95:21:c2:bc:
         56:29:f1:c9:e3:4e:6a:e2:a5:7a:14:26:24:55:05:0c:76:a1:
         e5:e8:aa:1e:bd:c7:a6:dc:92:e1:07:78:60:68:56:84:fc:60:
         82:2c:11:46:27:dc:a2:ff:ba:c2:84:52:d4:0f:1e:23:73:0d:
         72:a2:5c:45:75:2e:21:78:da:bb:76:4a:b8:7b:c7:43:e3:60:
         68:9b:a0:e1:df:3b:58:36:08:f4:0b:f1:04:4d:7e:5e:27:d3:
         10:6a:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 16:34:12 2026 by rpki-client