Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33332d3333203d3e20323731373436.roa
File:                     323830343a383035633a3a2f33332d3333203d3e20323731373436.roa (raw, json)
Hash identifier:          uiD90C9MVpFXQVJiRIuPqfzLjn0eBsEafea/mwkuke8=
Subject key identifier:   8E:9A:BF:86:8C:3D:D8:FF:9B:CA:66:E0:1B:DC:2F:0E:8C:8B:19:E4
Certificate issuer:       /CN=FCE7810B8638C26CEDEAC714278EC18F08B633CE
Certificate serial:       62432F267934C4A18DEB78EB7575943A1D0118DD
Authority key identifier: FC:E7:81:0B:86:38:C2:6C:ED:EA:C7:14:27:8E:C1:8F:08:B6:33:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33332d3333203d3e20323731373436.roa
Signing time:             Tue 28 Jul 2026 19:29:54 +0000
ROA not before:           Tue 28 Jul 2026 19:24:54 +0000
ROA not after:            Tue 27 Jul 2027 19:29:54 +0000
asID:                     271746
IP address blocks:        2804:805c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.crl
                          rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:43:2f:26:79:34:c4:a1:8d:eb:78:eb:75:75:94:3a:1d:01:18:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE7810B8638C26CEDEAC714278EC18F08B633CE
        Validity
            Not Before: Jul 28 19:24:54 2026 GMT
            Not After : Jul 27 19:29:54 2027 GMT
        Subject: CN=8E9ABF868C3DD8FF9BCA66E01BDC2F0E8C8B19E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:21:4c:89:10:1f:cd:37:ae:6e:18:0f:a1:
                    d3:ee:3c:93:c3:3c:e5:ba:a7:4d:59:d3:93:b9:d7:
                    d3:03:26:78:b8:0d:19:65:c5:b6:96:f5:f3:40:b9:
                    45:ad:c2:46:f4:6f:13:46:ff:92:a2:c0:0f:d6:17:
                    74:de:ec:b1:27:90:5f:c2:aa:90:e7:87:4a:43:86:
                    36:12:c8:9e:ad:bc:b4:94:50:f0:e5:f9:f6:0a:67:
                    7a:9b:8f:9d:0c:0a:2c:8f:be:1a:a1:94:e1:26:42:
                    0b:3e:67:74:44:3d:58:8e:76:af:37:a9:2d:e3:41:
                    80:60:0b:0c:21:d0:f3:58:52:27:74:5e:86:5b:3a:
                    65:bb:eb:3c:16:03:b2:d5:71:18:5d:59:78:dc:ac:
                    22:08:1c:3b:2c:af:ab:71:c3:c9:5d:95:4b:12:d6:
                    a4:97:17:60:8c:d6:83:50:93:e1:a9:36:23:87:93:
                    30:4b:77:e2:96:03:61:43:10:0e:b5:07:f6:30:d2:
                    72:47:0a:b0:8a:cc:d7:8b:8d:40:ba:9f:b0:c1:3b:
                    16:22:ff:49:02:36:ec:41:bd:2c:c3:b5:98:79:43:
                    57:97:a3:f8:18:e8:69:bf:5f:67:7e:90:85:07:9f:
                    2d:d6:50:44:bd:e7:02:5d:f2:6a:73:f0:d9:40:d7:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:BF:86:8C:3D:D8:FF:9B:CA:66:E0:1B:DC:2F:0E:8C:8B:19:E4
            X509v3 Authority Key Identifier:
                keyid:FC:E7:81:0B:86:38:C2:6C:ED:EA:C7:14:27:8E:C1:8F:08:B6:33:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33332d3333203d3e20323731373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:805c::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:22:ec:2b:97:54:c3:ce:a8:f3:95:7f:65:24:dd:2e:46:
         a6:06:21:41:82:4c:4e:f9:40:7f:2c:cb:e2:d0:7c:7e:90:33:
         d2:a1:76:5b:17:5e:eb:14:9d:15:8c:33:8d:c0:b8:7c:73:15:
         5a:77:c4:f4:a0:5d:6e:5f:ea:09:04:2f:eb:ae:5b:1d:24:a6:
         45:e3:0d:6e:71:ef:af:10:12:b6:70:7b:63:d5:f5:00:19:6c:
         3e:e5:7e:36:10:02:27:05:f2:52:15:8f:68:7d:e0:ba:2e:05:
         ab:44:c6:7e:34:f7:fb:97:58:6e:72:08:ac:b0:7e:8e:c9:eb:
         14:a5:fc:51:a0:00:48:ed:75:a0:92:98:5e:d5:a5:74:85:60:
         9c:69:b5:a9:50:62:28:99:a3:43:e3:a2:c2:35:75:58:9f:2e:
         16:17:a5:cf:4e:df:e3:97:f5:39:14:8f:f8:3c:9e:d4:5c:be:
         6f:d2:a9:b1:f8:20:c0:9f:c4:60:5d:e3:13:fe:8c:5e:1f:f4:
         b0:16:a0:eb:85:04:9e:fc:bf:9c:40:f1:72:7a:c6:82:ca:77:
         67:29:d0:75:cd:f8:78:ac:66:d7:b8:e9:74:b3:29:d3:b7:1d:
         74:c5:ab:75:4c:4f:9b:a2:20:56:03:90:67:94:0d:84:2b:48:
         6d:77:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:19:43 2026 by rpki-client