Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/323830343a316632633a3a2f33322d3434203d3e20323635343738.roa
File:                     323830343a316632633a3a2f33322d3434203d3e20323635343738.roa (raw, json)
Hash identifier:          /xV/VeNvNNfUyFOB1eyPdg2pAV4vLFBGywp0InjE3yA=
Subject key identifier:   E8:9B:5D:14:6B:82:3B:5D:B0:66:9F:98:D2:69:CA:67:6F:BA:09:67
Certificate issuer:       /CN=9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE
Certificate serial:       3A4C5EDC7A022EF041B9B873DBB685EB5111A0E0
Authority key identifier: 9C:CB:E5:D9:D8:D4:57:6C:DD:82:71:E1:1C:C1:31:E1:59:62:ED:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/323830343a316632633a3a2f33322d3434203d3e20323635343738.roa
Signing time:             Mon 03 Aug 2026 19:41:02 +0000
ROA not before:           Mon 03 Aug 2026 19:36:02 +0000
ROA not after:            Mon 02 Aug 2027 19:41:02 +0000
asID:                     265478
IP address blocks:        2804:1f2c::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.crl
                          rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 19:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4c:5e:dc:7a:02:2e:f0:41:b9:b8:73:db:b6:85:eb:51:11:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE
        Validity
            Not Before: Aug  3 19:36:02 2026 GMT
            Not After : Aug  2 19:41:02 2027 GMT
        Subject: CN=E89B5D146B823B5DB0669F98D269CA676FBA0967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:ca:20:60:12:69:fb:58:06:f4:fd:4c:d6:
                    05:2e:23:b3:0f:b7:48:9d:58:71:a6:13:2c:a1:e7:
                    3f:2f:0b:83:6f:1f:0b:df:35:8e:99:87:25:a0:03:
                    37:5f:34:8f:ea:1a:a0:32:8c:34:3f:95:fb:7e:ac:
                    65:bd:cb:4a:25:71:c1:48:a6:3f:77:11:8d:f0:2a:
                    6b:9a:3c:71:5b:03:5e:e0:f7:5c:34:d3:8f:cf:cd:
                    96:8f:08:79:d8:5d:13:71:b4:39:df:60:51:45:c5:
                    de:ee:e4:0b:c3:ed:72:91:bf:29:10:65:04:7b:5f:
                    e1:45:2e:9f:45:fa:cf:69:89:64:29:03:f9:c3:06:
                    bc:53:8d:1b:45:0e:88:c6:91:2e:16:33:e8:63:25:
                    de:c7:f4:d2:1b:34:c2:79:b0:96:32:46:5b:b2:bc:
                    9b:76:7b:ea:fa:eb:d6:7d:ad:93:d5:e4:59:59:65:
                    a5:cf:97:eb:03:f1:15:25:98:3d:2f:07:5f:93:14:
                    df:d1:59:20:2f:96:54:23:61:09:d0:bd:a2:d6:46:
                    ad:18:2a:e0:56:2b:8e:73:9e:c3:9d:b2:cb:14:3e:
                    7b:28:b4:ae:30:57:ba:77:01:ed:3e:75:7b:c7:2c:
                    38:c6:e0:14:2b:30:db:ac:92:4c:99:95:0e:31:a7:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9B:5D:14:6B:82:3B:5D:B0:66:9F:98:D2:69:CA:67:6F:BA:09:67
            X509v3 Authority Key Identifier:
                keyid:9C:CB:E5:D9:D8:D4:57:6C:DD:82:71:E1:1C:C1:31:E1:59:62:ED:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBE5D9D8D4576CDD8271E11CC131E15962EDCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57yZ76xc9xfvfc737toEobt2tr5hExZ1yCGCecN98w9n/0/323830343a316632633a3a2f33322d3434203d3e20323635343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:f1:54:1e:a1:5d:97:42:62:65:d6:a0:4e:a4:c8:65:64:
         d7:44:f7:fc:76:a1:42:3b:ae:fb:c4:fa:52:27:0a:f8:1b:f6:
         92:e0:33:9c:52:2b:9a:49:24:f0:a6:f9:aa:45:39:ce:cd:16:
         27:ba:9c:2d:ec:82:3e:f2:e4:cd:91:fa:74:99:fe:d4:14:c4:
         84:3e:12:8d:ff:eb:32:a3:50:a8:a3:3b:4f:79:a9:e3:da:d8:
         49:d1:52:62:a9:6e:a2:37:89:51:4c:74:1e:7f:74:11:b6:2f:
         61:21:54:ec:7e:0f:84:44:35:4d:ab:ae:4f:44:88:51:a5:34:
         07:49:aa:6e:05:3d:82:bf:38:01:65:30:15:4b:ef:c7:14:4e:
         80:01:ec:6f:9b:f7:59:fa:1b:c7:16:8d:f2:d8:6c:fb:83:49:
         ec:68:97:72:81:60:e8:a8:63:fb:2e:37:55:c5:51:fd:f1:67:
         81:42:ad:5a:1f:35:f0:10:cb:13:23:06:ef:d7:9c:cc:a7:54:
         35:0a:09:c7:41:ee:18:b2:51:71:52:68:99:c9:c9:d1:a4:40:
         c3:55:cb:59:a3:4b:ac:9e:95:10:f7:7e:e9:6c:2c:f7:c2:30:
         ae:7b:c4:bf:fc:32:1e:ac:50:f0:23:46:5b:b4:92:5e:fe:c4:
         d2:49:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:27:45 2026 by rpki-client