Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
File:                     323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa (raw, json)
Hash identifier:          fMVzVb/YQzgiiEV79Nd4IcdLP5PUH+Lv38RXnDeIGac=
Subject key identifier:   FF:CC:AD:D0:AD:CA:33:32:A9:C0:57:C6:17:51:A3:E9:E3:E3:EE:0F
Certificate issuer:       /CN=98F0C11185EDA57E4828F9C6391F20923CE4C20E
Certificate serial:       7D2831A6D2FF1093D92E6B6384CCCA627703CA0A
Authority key identifier: 98:F0:C1:11:85:ED:A5:7E:48:28:F9:C6:39:1F:20:92:3C:E4:C2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa
Signing time:             Wed 19 Aug 2026 14:38:27 +0000
ROA not before:           Wed 19 Aug 2026 14:33:27 +0000
ROA not after:            Wed 18 Aug 2027 14:38:27 +0000
asID:                     273339
IP address blocks:        2804:8d28:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.crl
                          rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Sep 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:28:31:a6:d2:ff:10:93:d9:2e:6b:63:84:cc:ca:62:77:03:ca:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F0C11185EDA57E4828F9C6391F20923CE4C20E
        Validity
            Not Before: Aug 19 14:33:27 2026 GMT
            Not After : Aug 18 14:38:27 2027 GMT
        Subject: CN=FFCCADD0ADCA3332A9C057C61751A3E9E3E3EE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:47:51:de:d0:81:bc:cd:f2:7c:9a:94:9d:
                    65:3a:48:56:cf:04:fd:5f:9c:2e:9a:93:da:f3:ff:
                    7e:1a:2c:20:d1:a8:6b:d0:00:c5:0f:f8:dc:7d:b8:
                    e3:22:04:67:20:2d:09:b3:18:b0:d9:3d:a3:de:a7:
                    00:66:05:75:d0:be:12:e7:a5:82:ac:c9:0b:cc:f0:
                    c7:5f:db:b0:da:13:76:de:08:09:fc:b5:28:e6:64:
                    fd:63:d5:2d:9b:68:90:a5:65:ea:3b:75:d8:5b:a9:
                    40:37:71:e1:4a:cb:01:83:bf:44:93:a9:ea:e5:70:
                    ca:be:a6:2f:0c:f9:52:51:9d:e2:e6:b7:b7:16:5f:
                    01:d0:c1:f8:d6:58:9d:c2:ed:df:65:5d:ce:ba:12:
                    59:8c:61:bc:71:58:43:55:c3:74:de:67:74:64:e6:
                    4d:ff:87:2b:6e:17:0f:f9:69:d6:80:03:f6:c2:e2:
                    f5:b5:11:73:3e:fe:39:93:a0:45:45:4c:c0:27:fb:
                    a0:b9:79:a9:b4:9f:cf:c5:20:b9:63:b5:8d:0c:cd:
                    6d:42:4d:c5:d1:c4:4a:ac:d5:01:16:78:a5:72:34:
                    be:64:77:ab:88:de:7b:d2:44:0f:86:ed:41:9d:d3:
                    11:b0:62:54:02:cd:6a:55:f3:36:22:fe:c0:16:fc:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CC:AD:D0:AD:CA:33:32:A9:C0:57:C6:17:51:A3:E9:E3:E3:EE:0F
            X509v3 Authority Key Identifier:
                keyid:98:F0:C1:11:85:ED:A5:7E:48:28:F9:C6:39:1F:20:92:3C:E4:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/98F0C11185EDA57E4828F9C6391F20923CE4C20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F0C11185EDA57E4828F9C6391F20923CE4C20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6trhLgajuvyuzNzevBo7Yfo1WumW6DJSWtarTxWQksHL/0/323830343a386432383a313a3a2f34382d3438203d3e20323733333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d28:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:e0:a7:56:e5:a7:fa:2e:64:24:4b:a5:27:62:e6:e8:e7:
         82:97:39:d2:64:7e:d6:69:73:c1:26:6b:50:df:0f:0d:4b:82:
         66:cf:fb:ce:92:29:1c:63:7b:53:85:ab:6a:c7:dc:53:44:92:
         10:1c:a1:fa:45:fa:5e:cd:1f:c0:00:0f:92:7b:b2:0a:d5:9f:
         d1:b2:42:6a:e2:90:a6:79:48:bf:36:7b:77:05:6a:51:b7:ff:
         ef:ab:ba:b7:8a:af:6e:77:c8:63:18:1c:c6:05:5b:9f:88:6a:
         32:0e:58:df:8e:3f:f5:b9:44:bc:e6:c8:2a:e0:ab:b4:27:a3:
         e8:d5:27:84:b0:07:49:f0:c3:65:34:ee:01:94:b8:9f:86:bc:
         29:0f:98:15:3f:71:54:a0:22:9a:02:d6:c3:ba:5f:10:ed:37:
         d8:bb:38:0d:51:97:76:61:bb:f4:3d:9a:0a:80:fb:6c:d2:8a:
         bb:cb:47:10:92:a5:5e:98:f7:09:7c:4b:7e:ed:ed:05:95:0c:
         80:6a:23:77:af:23:dc:64:8c:c6:09:9f:88:d1:cc:73:21:c1:
         6e:26:b9:1c:46:ec:b9:3a:b9:3a:a3:5f:30:a1:c4:01:3b:2f:
         a6:96:01:7b:a4:df:fa:5a:8f:43:cc:d4:1a:8b:7a:6d:19:43:
         69:e0:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:15:25 2026 by rpki-client