Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
File:                     323830343a373966303a3a2f33322d313238203d3e20323731333337.roa (raw, json)
Hash identifier:          BbhTfY0G0csADM6CDpzS3zEgjYwBm42ZWa4I8krUF+k=
Subject key identifier:   62:F7:FF:B2:15:BF:F2:83:73:CC:D7:5B:4C:86:C3:A9:1A:2E:C9:A3
Certificate issuer:       /CN=230621F0568B19CE05FE2306C094C84B666D6C54
Certificate serial:       29F757766ED5C132A436E418E6BA5F174942CFC8
Authority key identifier: 23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa
Signing time:             Thu 06 Aug 2026 14:45:57 +0000
ROA not before:           Thu 06 Aug 2026 14:40:57 +0000
ROA not after:            Thu 05 Aug 2027 14:45:57 +0000
asID:                     271337
IP address blocks:        2804:79f0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl
                          rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:57:76:6e:d5:c1:32:a4:36:e4:18:e6:ba:5f:17:49:42:cf:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230621F0568B19CE05FE2306C094C84B666D6C54
        Validity
            Not Before: Aug  6 14:40:57 2026 GMT
            Not After : Aug  5 14:45:57 2027 GMT
        Subject: CN=62F7FFB215BFF28373CCD75B4C86C3A91A2EC9A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:3d:2e:ff:80:00:aa:ba:ae:35:fc:f0:1c:
                    fa:34:65:ce:f9:db:5a:78:69:c2:f4:b4:1d:e5:2f:
                    fe:e4:e9:4f:8b:10:4d:24:f1:23:f5:87:3b:63:9d:
                    aa:ba:57:d6:26:82:63:b0:e8:f8:35:8d:b4:01:54:
                    6a:4e:e3:fc:fa:d6:d4:5a:42:85:75:a2:db:45:e4:
                    bb:7a:7f:e7:e7:e0:7b:f9:c5:7e:7e:ac:0a:3f:59:
                    3c:ab:16:f1:13:90:72:80:2f:92:65:71:1f:e9:57:
                    a4:f1:c4:14:35:d0:19:ef:ed:ed:ab:03:a9:92:c5:
                    2a:fc:0d:43:68:85:01:63:f9:51:d0:d8:09:ac:90:
                    98:fb:ba:f5:47:e5:5b:99:75:6b:08:53:69:ed:4e:
                    76:69:28:91:45:27:f4:d9:3f:d5:d9:69:3c:ce:57:
                    5f:a6:85:db:e1:06:59:89:35:ac:5b:3a:f6:8a:66:
                    13:92:32:f7:ec:52:76:d5:39:93:eb:77:00:87:c8:
                    6c:7d:58:b4:7f:a5:08:d6:a6:28:6c:1f:ac:1b:1d:
                    79:d0:3e:8e:dc:04:59:7b:3b:3d:70:33:de:65:37:
                    cb:0c:26:70:e1:aa:fc:33:69:78:5a:bf:fe:5b:6b:
                    44:10:bb:6f:54:86:dc:4a:fe:e9:56:bf:b4:6f:46:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F7:FF:B2:15:BF:F2:83:73:CC:D7:5B:4C:86:C3:A9:1A:2E:C9:A3
            X509v3 Authority Key Identifier:
                keyid:23:06:21:F0:56:8B:19:CE:05:FE:23:06:C0:94:C8:4B:66:6D:6C:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/230621F0568B19CE05FE2306C094C84B666D6C54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/230621F0568B19CE05FE2306C094C84B666D6C54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/323830343a373966303a3a2f33322d313238203d3e20323731333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:a6:07:58:2c:7f:a5:1a:de:20:55:13:77:d8:53:2c:ad:
         26:17:55:e8:a7:00:bc:a8:44:7b:71:e2:e3:3b:dc:7e:8a:3d:
         35:e5:6a:8f:4a:34:9c:1c:e5:77:ae:fa:22:cb:3b:f8:6d:a6:
         5d:ab:d2:7d:ba:cd:0b:ff:ae:4a:ff:d1:cf:f4:11:96:b6:88:
         3f:00:8d:45:ff:4c:d5:63:b2:47:7d:a7:59:d0:9a:fe:f1:37:
         1f:c0:81:52:f8:94:d3:35:16:20:5b:7a:14:fe:51:0f:bc:11:
         b2:46:83:7f:f5:2d:df:b6:d9:94:7d:68:93:70:68:d1:42:ca:
         0a:ee:44:ae:fe:4f:55:e4:5a:6f:28:bb:c3:e3:35:4e:da:fb:
         9e:58:b3:c3:46:10:fb:c2:56:65:84:a2:25:a4:fc:b9:2e:5b:
         75:4a:54:8e:56:e9:95:ce:a8:01:47:af:8c:1c:10:6f:eb:8a:
         38:ce:5a:83:c4:3e:5c:f6:0d:0d:6d:b7:dd:29:1d:e1:a9:d3:
         a6:e0:d4:96:3f:7e:52:d8:b4:39:2b:9a:d4:ab:00:3a:00:27:
         bb:c8:6d:19:5e:60:dc:6a:fd:46:7a:22:32:c9:e9:87:27:71:
         12:58:3e:84:d7:70:d5:2a:7d:fc:1c:11:31:73:03:6e:6e:9e:
         2c:d3:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:22:01 2026 by rpki-client