Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          EC27mldaHbhBpqgURHYZZOGB8BM/AMEpnS/QcdraI8Q=
Subject key identifier:   20:ED:AF:21:0C:E3:3D:01:37:E9:AA:A2:89:74:FD:0E:57:97:6C:69
Certificate issuer:       /CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
Certificate serial:       4537C367F11A5421AD351E346FD4B9326E4B88C3
Authority key identifier: 0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Tue 18 Aug 2026 12:28:08 +0000
ROA not before:           Tue 18 Aug 2026 12:23:08 +0000
ROA not after:            Tue 17 Aug 2027 12:28:08 +0000
asID:                     272569
IP address blocks:        2804:8548:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:37:c3:67:f1:1a:54:21:ad:35:1e:34:6f:d4:b9:32:6e:4b:88:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
        Validity
            Not Before: Aug 18 12:23:08 2026 GMT
            Not After : Aug 17 12:28:08 2027 GMT
        Subject: CN=20EDAF210CE33D0137E9AAA28974FD0E57976C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:78:9d:4a:cc:af:94:4c:86:ed:5a:3c:ae:34:
                    f3:f2:6c:b2:87:9e:e0:e1:7f:ec:d8:50:cb:a9:24:
                    99:c9:53:d0:f3:cd:11:db:ba:78:3b:f0:86:7a:ec:
                    83:53:e6:e1:3b:82:c6:98:f8:7b:19:88:68:4a:3c:
                    18:6b:44:e2:2d:5d:56:96:36:e9:2b:a4:47:f3:8f:
                    f0:3c:b2:2d:b6:d7:8d:7c:0c:1f:ee:fc:a8:74:f7:
                    ed:b0:e6:f8:a1:14:84:5e:27:92:d2:d7:c2:57:60:
                    83:c8:61:22:04:14:34:fa:0f:b3:e5:a6:43:51:23:
                    16:89:d6:87:c2:53:df:4f:59:08:98:b4:f5:94:2a:
                    18:13:04:f5:f5:99:81:50:9f:f0:d0:ca:5d:47:a5:
                    b8:fc:bf:77:6a:39:6d:eb:3b:95:14:c4:34:08:ef:
                    b4:5f:89:a7:10:df:af:ff:95:71:9e:e8:76:30:b7:
                    05:ff:4c:b6:f4:ff:cb:a5:14:13:12:34:4f:43:ba:
                    e0:51:02:04:5d:cc:a2:eb:97:e4:f8:61:44:65:76:
                    d2:9b:99:b4:6e:eb:59:47:a4:67:b0:ac:df:d0:b1:
                    03:12:ec:15:7d:84:95:59:bd:dd:19:c0:4b:5d:73:
                    86:06:0a:12:1f:23:16:23:ad:79:7e:07:74:4d:5e:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:AF:21:0C:E3:3D:01:37:E9:AA:A2:89:74:FD:0E:57:97:6C:69
            X509v3 Authority Key Identifier:
                keyid:0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b2:47:9e:12:fe:46:c1:01:1e:72:5c:28:42:1c:26:01:18:de:
         f9:ba:96:f3:fa:9c:bb:2f:dc:3a:fe:08:22:1e:54:5e:d2:19:
         22:c8:8f:46:14:8c:31:3f:87:3b:9a:f5:49:df:69:7e:c5:32:
         78:b1:b3:d2:01:ed:97:29:7f:28:1b:45:03:87:33:f9:81:63:
         60:5f:da:00:f0:df:a2:bc:3f:e6:f3:87:96:bc:36:7e:8a:25:
         61:c1:57:58:36:39:3f:b3:6a:7d:9f:95:24:a9:bc:e2:b4:c5:
         b9:e9:ae:d1:96:09:c8:18:53:fc:73:44:85:a4:b4:78:65:3a:
         7b:25:d4:cf:79:94:d0:a5:b4:81:ab:01:f4:ec:d8:0e:85:f4:
         04:6f:77:bc:d4:02:aa:6b:97:c4:74:20:f1:08:19:cb:1c:af:
         df:61:2b:66:2f:eb:5e:c5:15:5a:d4:bd:c3:e6:e4:eb:9b:b6:
         94:c7:11:ef:2f:14:a1:1d:ee:60:da:f3:52:6e:bf:cd:4d:1d:
         ac:9d:71:55:ef:93:35:f5:d8:59:1c:3d:4b:c9:53:50:be:c8:
         8a:eb:7c:b7:20:8f:14:c9:ff:64:b6:b5:c4:7b:f3:cf:91:a6:
         a8:24:cb:35:84:f4:45:93:da:97:1e:73:ab:fc:4e:e0:30:7b:
         3b:6c:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:56:32 2026 by rpki-client