Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa
File:                     323830343a393461633a3a2f33322d313238203d3e20323734343733.roa (raw, json)
Hash identifier:          HvBRJ53V9UYptJdCV2Y/jLO3ph6Jx+N4GdO7+SM22pI=
Subject key identifier:   75:B3:D6:39:9B:21:D9:91:8C:DC:30:68:18:12:AC:A8:90:4D:D0:E1
Certificate issuer:       /CN=B7D297E891D0B38E9314260166E2A362DC625072
Certificate serial:       55AB2A28244488AEC0937AF1EBE18DF380848DBE
Authority key identifier: B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa
Signing time:             Sat 22 Aug 2026 14:56:59 +0000
ROA not before:           Sat 22 Aug 2026 14:51:59 +0000
ROA not after:            Sat 21 Aug 2027 14:56:59 +0000
asID:                     274473
IP address blocks:        2804:94ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl
                          rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ab:2a:28:24:44:88:ae:c0:93:7a:f1:eb:e1:8d:f3:80:84:8d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D297E891D0B38E9314260166E2A362DC625072
        Validity
            Not Before: Aug 22 14:51:59 2026 GMT
            Not After : Aug 21 14:56:59 2027 GMT
        Subject: CN=75B3D6399B21D9918CDC30681812ACA8904DD0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:b4:53:1f:04:85:23:ec:85:eb:5d:98:94:
                    0d:ad:58:43:6f:c0:7b:ee:23:62:97:d2:6e:af:48:
                    8a:9e:9a:b9:50:cc:4d:d7:41:3d:1d:c4:f8:65:84:
                    8d:f6:ce:7d:f4:5d:40:c6:0e:3c:ff:e7:b7:79:58:
                    05:2e:6d:f9:9c:9d:99:e1:4f:52:23:8a:1a:f2:71:
                    4a:47:e6:cf:7e:57:87:5f:0d:3d:35:db:ba:44:db:
                    9d:95:65:b3:40:23:c1:e7:85:71:66:ba:e7:6d:05:
                    5e:47:36:d5:c8:8e:67:8c:ce:81:d3:03:9e:9b:1a:
                    df:ca:7e:c3:46:ac:95:e3:38:19:ff:8b:07:6f:6e:
                    66:69:90:93:52:14:0d:7b:16:17:07:9b:6d:8c:a4:
                    1b:87:82:29:b5:e8:1c:80:19:be:a7:52:2e:4e:8a:
                    e2:97:b9:af:ac:39:35:30:5e:79:fc:71:5d:1a:e5:
                    33:dd:07:84:cb:9f:7d:99:df:1f:c8:58:74:81:da:
                    43:67:26:9e:d2:5b:f3:47:2c:5d:c5:95:c9:4c:d8:
                    62:b5:92:5b:9d:9c:ba:9c:e6:6c:9f:52:c0:04:f6:
                    89:87:d9:e9:35:ab:35:0d:94:9e:b8:3e:09:8c:e0:
                    2c:e9:19:2c:b7:2a:07:1e:28:09:39:6c:75:0c:ed:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:D6:39:9B:21:D9:91:8C:DC:30:68:18:12:AC:A8:90:4D:D0:E1
            X509v3 Authority Key Identifier:
                keyid:B7:D2:97:E8:91:D0:B3:8E:93:14:26:01:66:E2:A3:62:DC:62:50:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/B7D297E891D0B38E9314260166E2A362DC625072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D297E891D0B38E9314260166E2A362DC625072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6whNrTSpL4JYdYTf8e5w1ZfAN7RrFevju3To1TujkhPE/0/323830343a393461633a3a2f33322d313238203d3e20323734343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:94ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:03:cc:3f:c0:de:33:02:c7:46:b7:1b:6e:11:69:d9:e0:
         64:2e:3d:53:c0:9a:24:e6:d1:28:ae:af:cb:dd:f1:b0:e8:6a:
         27:4c:63:ff:5a:1e:4b:02:15:50:26:37:f1:69:04:1d:7a:37:
         7e:2b:06:df:a5:48:2c:79:fb:ba:88:b6:25:23:10:47:14:d7:
         2f:e4:73:c2:9f:86:cd:b8:50:70:6c:d4:ed:2e:a7:78:6f:1f:
         62:6d:61:0a:cd:b2:8f:e5:23:60:86:03:75:fd:fa:0e:74:3e:
         92:ba:d8:77:04:b1:00:a3:ab:b1:fd:94:12:c5:72:04:9a:4d:
         de:66:0c:d6:27:12:c5:4a:41:1c:20:b9:37:a4:da:c6:4b:88:
         ed:5f:87:99:eb:6a:c9:54:7f:46:dc:be:58:73:59:3e:36:88:
         5d:94:6b:d9:ba:1a:99:88:8f:0a:21:0e:3c:1f:c0:22:09:ae:
         e5:90:1c:bf:46:20:21:1a:b9:37:03:94:3b:99:1a:06:f7:6b:
         27:f0:64:86:10:4b:fa:e2:11:80:ac:ae:c6:94:6c:24:ec:42:
         35:13:ca:b5:1b:df:83:8e:43:a4:29:6f:35:f8:eb:34:ec:5b:
         8f:91:a2:77:c1:d3:68:03:9a:eb:08:cd:03:db:e1:42:a7:27:
         8d:70:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:05:26 2026 by rpki-client