Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa
File:                     323830343a313035383a3a2f33322d3438203d3e20323632393838.roa (raw, json)
Hash identifier:          OHhjSNCGlmI02P6boLIIRu3+CJ6Hw5vH7HC/GWSs4vM=
Subject key identifier:   19:29:95:2F:A9:7A:5B:94:23:77:1D:90:9F:29:44:21:AB:4F:91:B2
Certificate issuer:       /CN=AED1979DFB6DB533BA277327FFBF031F521D7D84
Certificate serial:       36313B64697D0DC8C205447D5370B96D3409A0D2
Authority key identifier: AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa
Signing time:             Thu 06 Aug 2026 14:24:23 +0000
ROA not before:           Thu 06 Aug 2026 14:19:23 +0000
ROA not after:            Thu 05 Aug 2027 14:24:23 +0000
asID:                     262988
IP address blocks:        2804:1058::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.crl
                          rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 20:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:31:3b:64:69:7d:0d:c8:c2:05:44:7d:53:70:b9:6d:34:09:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED1979DFB6DB533BA277327FFBF031F521D7D84
        Validity
            Not Before: Aug  6 14:19:23 2026 GMT
            Not After : Aug  5 14:24:23 2027 GMT
        Subject: CN=1929952FA97A5B9423771D909F294421AB4F91B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:40:b2:e1:6e:62:c8:99:87:e0:1c:7d:e0:
                    9e:23:d7:c3:4e:00:1a:3e:e4:55:d4:82:f8:cf:c1:
                    7c:68:f3:08:5b:94:fa:2b:95:0b:52:58:79:ed:24:
                    2f:f5:c6:ed:e3:96:90:1e:b7:6f:45:6e:d3:aa:86:
                    85:d6:e8:11:a6:5b:86:0b:ee:d8:e9:e6:e1:5c:bc:
                    af:ea:db:03:37:8e:af:fe:63:39:b9:0e:81:ce:da:
                    55:81:e7:64:69:11:c3:63:a7:90:75:2b:db:8e:20:
                    55:cd:1e:b4:41:1a:92:a1:d3:b7:49:c4:3d:7c:a7:
                    c7:6b:eb:5d:81:c0:4c:c2:42:66:c7:0d:d3:ea:22:
                    09:36:bb:76:85:88:b3:b1:55:5b:6b:e0:4a:fc:51:
                    cf:3e:c8:8e:7e:15:84:02:2d:2a:5a:f7:ba:c6:35:
                    ad:c0:76:26:db:a6:98:0d:90:73:9c:f9:6e:bb:77:
                    23:76:5b:3f:0a:10:32:0b:74:6a:43:7e:7e:52:6b:
                    8f:c6:0a:d1:fe:2b:00:aa:46:4e:6e:50:85:da:fe:
                    ce:a9:0c:5f:af:0b:00:8c:13:a3:ee:35:08:04:2b:
                    1e:5f:56:32:cf:cf:83:6c:74:be:11:6d:7e:1b:44:
                    be:bc:46:c8:ec:4b:b7:bf:20:a1:27:09:3f:94:7f:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:95:2F:A9:7A:5B:94:23:77:1D:90:9F:29:44:21:AB:4F:91:B2
            X509v3 Authority Key Identifier:
                keyid:AE:D1:97:9D:FB:6D:B5:33:BA:27:73:27:FF:BF:03:1F:52:1D:7D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/AED1979DFB6DB533BA277327FFBF031F521D7D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AED1979DFB6DB533BA277327FFBF031F521D7D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/323830343a313035383a3a2f33322d3438203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1058::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:c0:d5:b6:87:f1:6c:fd:a2:76:1e:4d:5d:6b:e2:a5:f5:
         ae:c2:5d:5e:60:6a:f9:4e:93:61:9b:bf:b4:e8:3d:00:57:23:
         b4:d8:61:7a:ae:c2:e1:9e:e0:3e:7a:70:aa:c1:6b:dc:2d:00:
         8e:91:78:2d:d3:ab:f7:80:92:4f:32:2f:8e:cf:48:20:7f:02:
         bc:fb:b0:3a:61:f0:26:c3:52:72:f0:00:2a:1a:20:bb:98:d2:
         bd:43:39:fc:66:04:37:f2:a2:20:23:68:3b:47:21:6d:34:c7:
         15:03:ed:04:04:92:98:a7:f8:79:81:77:c4:bc:d0:d7:88:38:
         c7:46:97:15:2c:d0:69:52:62:8a:98:b9:09:3e:69:9d:9f:0f:
         be:a3:59:3d:48:4c:34:29:9c:71:68:69:d6:a3:93:52:3d:48:
         85:1e:28:00:15:05:e1:3b:fc:90:1c:74:35:db:02:b0:51:7a:
         62:16:db:a8:fa:dd:14:5e:65:54:27:f6:f1:50:c6:9f:00:69:
         83:9f:f4:89:af:af:74:a6:e8:1c:da:de:8f:66:43:71:13:10:
         53:20:95:5a:bc:2c:80:22:5e:7a:45:79:ff:20:ba:a2:ed:a5:
         b5:a9:1e:bf:f6:25:10:aa:ac:9a:72:45:81:32:18:3b:b2:7d:
         50:84:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:59:57 2026 by rpki-client