Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/323830343a373632343a3a2f33322d313238203d3e20323731303932.roa
File:                     323830343a373632343a3a2f33322d313238203d3e20323731303932.roa (raw, json)
Hash identifier:          I6wbSZAiiH3AdT1tMDsrluj6O6bkXNY0uuVHCd+woKE=
Subject key identifier:   97:24:7A:AE:4A:1F:97:7A:6F:97:93:CE:2B:52:99:51:C2:1F:EE:2D
Certificate issuer:       /CN=80504859A4E49CE6C05105CAA5E86ADC91464089
Certificate serial:       D516B9FFE5049E8418AD1BB7207FBDFF0112A8
Authority key identifier: 80:50:48:59:A4:E4:9C:E6:C0:51:05:CA:A5:E8:6A:DC:91:46:40:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80504859A4E49CE6C05105CAA5E86ADC91464089.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/323830343a373632343a3a2f33322d313238203d3e20323731303932.roa
Signing time:             Sat 08 Aug 2026 14:51:45 +0000
ROA not before:           Sat 08 Aug 2026 14:46:45 +0000
ROA not after:            Sat 07 Aug 2027 14:51:45 +0000
asID:                     271092
IP address blocks:        2804:7624::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/80504859A4E49CE6C05105CAA5E86ADC91464089.crl
                          rsync://rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/80504859A4E49CE6C05105CAA5E86ADC91464089.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80504859A4E49CE6C05105CAA5E86ADC91464089.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d5:16:b9:ff:e5:04:9e:84:18:ad:1b:b7:20:7f:bd:ff:01:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80504859A4E49CE6C05105CAA5E86ADC91464089
        Validity
            Not Before: Aug  8 14:46:45 2026 GMT
            Not After : Aug  7 14:51:45 2027 GMT
        Subject: CN=97247AAE4A1F977A6F9793CE2B529951C21FEE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:3b:56:5d:0c:ea:40:ed:cb:9d:65:83:b4:
                    6f:76:d7:ec:65:c2:26:0c:28:16:2a:13:06:cb:74:
                    68:7e:e0:c7:b6:c0:b0:11:c1:31:18:01:72:36:e7:
                    f6:da:f6:37:58:86:f6:28:3e:24:b7:95:d3:28:fb:
                    36:05:e5:4f:90:87:55:b0:3b:60:e0:42:7a:f3:ac:
                    09:4f:a1:f8:b4:13:ea:8a:b1:84:a2:fa:4f:d8:3e:
                    15:fa:c1:84:c7:ed:a6:f6:16:98:09:04:b1:ec:71:
                    d5:15:29:fa:ea:40:de:13:74:16:c5:84:27:eb:02:
                    14:ae:d0:43:3f:52:d1:6d:97:78:f3:85:6b:33:32:
                    54:67:c3:3a:3a:9c:eb:4d:7c:bd:ca:d5:02:37:06:
                    f6:34:e5:36:88:56:4b:97:34:8d:58:a4:ce:f4:59:
                    a3:93:e5:91:2e:ea:9e:e8:09:b3:21:ef:51:ba:7b:
                    8e:54:7d:bd:d4:ee:84:6d:37:c8:e5:06:cd:0e:e9:
                    62:76:47:a1:3d:5c:b0:5a:14:6d:c5:17:20:3a:ff:
                    35:4a:3b:8c:2a:b0:a2:8e:2b:22:09:5e:99:16:e2:
                    fe:2f:dd:95:09:49:a2:38:67:92:a8:02:a9:ab:48:
                    8d:36:51:06:a3:49:b4:74:68:e3:70:23:b9:16:09:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:7A:AE:4A:1F:97:7A:6F:97:93:CE:2B:52:99:51:C2:1F:EE:2D
            X509v3 Authority Key Identifier:
                keyid:80:50:48:59:A4:E4:9C:E6:C0:51:05:CA:A5:E8:6A:DC:91:46:40:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/80504859A4E49CE6C05105CAA5E86ADC91464089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80504859A4E49CE6C05105CAA5E86ADC91464089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/666srn2txxLSx3ZHxb1teGBxQkMDyWxGjTcE3j9AvTQQ/0/323830343a373632343a3a2f33322d313238203d3e20323731303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7624::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:05:0d:3e:7f:a9:72:96:cf:62:32:04:95:af:5d:1e:03:c8:
         ef:67:23:dc:ea:01:8b:31:33:47:16:f1:6a:8f:ae:48:e9:e3:
         b9:64:4c:60:61:c5:5e:30:d8:c8:a1:7c:91:68:30:d9:09:23:
         33:78:1e:99:69:82:9a:15:1b:d4:de:fc:45:d9:71:9a:a0:43:
         42:2f:03:87:6d:d1:2f:f4:06:c5:6f:95:93:48:12:dc:71:10:
         94:ec:84:85:17:57:39:c2:c6:1c:34:85:6d:d0:be:1e:3e:a4:
         8c:ed:eb:14:31:18:ab:37:0c:24:8a:fe:ae:94:d7:cf:56:0b:
         e9:2d:c3:02:46:a4:4c:63:91:12:dc:c5:4b:e8:14:a4:27:61:
         04:0f:51:8c:5f:ac:66:fd:b0:51:33:59:e6:b1:34:8d:1d:b2:
         e0:74:dd:54:ff:8e:64:b7:4b:30:4b:ee:7c:e0:94:71:20:42:
         7c:2f:5d:f7:7c:97:af:87:a5:86:0a:5f:cc:a1:ed:6a:40:3a:
         8e:4b:ce:ec:d8:c3:7b:3a:68:d7:59:cd:09:e0:48:11:f4:7e:
         d7:f5:cd:2e:4f:28:ae:ec:60:dd:8e:96:4a:76:23:81:8e:8c:
         32:1c:71:1d:55:28:d3:82:67:be:86:19:01:8b:f4:04:0a:1c:
         ae:aa:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:21:18 2026 by rpki-client