Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33342d3334203d3e20323731373436.roa
File:                     323830343a383035633a3a2f33342d3334203d3e20323731373436.roa (raw, json)
Hash identifier:          /HDu9myr6WWvmMh6ZDWkfRdJKvzS2AtZ1REdKL+5GFc=
Subject key identifier:   DA:E2:C5:40:98:FE:B5:29:8B:87:98:43:2E:62:95:0E:A6:C2:5A:0B
Certificate issuer:       /CN=FCE7810B8638C26CEDEAC714278EC18F08B633CE
Certificate serial:       2F2F00FE4CC1AEB39F05B20D9772067F2F7EBF72
Authority key identifier: FC:E7:81:0B:86:38:C2:6C:ED:EA:C7:14:27:8E:C1:8F:08:B6:33:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33342d3334203d3e20323731373436.roa
Signing time:             Tue 28 Jul 2026 19:29:56 +0000
ROA not before:           Tue 28 Jul 2026 19:24:56 +0000
ROA not after:            Tue 27 Jul 2027 19:29:56 +0000
asID:                     271746
IP address blocks:        2804:805c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.crl
                          rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 22:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2f:00:fe:4c:c1:ae:b3:9f:05:b2:0d:97:72:06:7f:2f:7e:bf:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE7810B8638C26CEDEAC714278EC18F08B633CE
        Validity
            Not Before: Jul 28 19:24:56 2026 GMT
            Not After : Jul 27 19:29:56 2027 GMT
        Subject: CN=DAE2C54098FEB5298B8798432E62950EA6C25A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9e:40:47:69:44:c0:07:93:95:f9:d9:10:48:
                    d7:8c:81:fb:5f:5d:fb:de:74:eb:e1:2b:db:ea:e4:
                    c9:02:48:0a:7d:6c:e7:0d:62:55:fc:7c:35:99:bd:
                    ea:38:a3:4a:a1:b5:8a:4c:48:a3:b9:a8:16:2e:f7:
                    f7:39:11:1d:a8:b7:75:7f:ba:17:72:66:cc:d7:90:
                    20:4f:76:c3:cb:be:42:06:42:18:b2:6b:b3:ba:a5:
                    2e:76:cd:5e:c2:de:7e:35:53:1c:aa:4f:05:24:10:
                    5c:a0:b0:4e:25:ad:1f:d7:af:64:20:a7:24:3f:09:
                    d3:cf:18:9d:39:10:ae:69:3e:1f:60:2f:17:46:e2:
                    35:84:9a:d3:17:27:da:49:44:f6:37:15:56:e7:39:
                    64:cd:7d:73:a3:50:e5:a6:5a:1d:50:45:d9:f2:fb:
                    d1:20:75:35:48:ed:9c:aa:be:f3:35:ad:1f:e2:4d:
                    ac:b2:ab:f9:91:5f:4d:2a:7e:b1:7d:d4:bd:98:f8:
                    d5:3c:2b:61:7e:df:68:de:f3:43:ac:62:3b:d0:b7:
                    f6:43:c9:7e:16:bb:79:97:bf:c9:d2:5f:d5:86:1f:
                    1b:11:7b:d2:c6:37:fa:fe:db:e8:f2:a8:cc:76:98:
                    6e:3b:e5:57:27:0b:c9:9c:c6:10:22:b1:f1:92:39:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:C5:40:98:FE:B5:29:8B:87:98:43:2E:62:95:0E:A6:C2:5A:0B
            X509v3 Authority Key Identifier:
                keyid:FC:E7:81:0B:86:38:C2:6C:ED:EA:C7:14:27:8E:C1:8F:08:B6:33:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/FCE7810B8638C26CEDEAC714278EC18F08B633CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE7810B8638C26CEDEAC714278EC18F08B633CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75gsSjBMePGuDZFLM76tVEGhCDJ3KNXiKcC8TYQpb4ig/0/323830343a383035633a3a2f33342d3334203d3e20323731373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:805c::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:a2:d1:36:a9:0c:6d:05:46:56:9a:15:d7:45:52:b9:60:86:
         56:ec:f2:d8:0d:98:78:46:44:85:ac:b8:78:9c:17:c7:70:dd:
         2d:e6:23:c5:f1:49:0a:5f:28:63:af:25:ca:be:c4:74:5e:cd:
         8f:37:1d:66:93:ac:47:00:3f:28:61:27:3e:95:1a:c5:17:11:
         c0:43:99:32:e5:c7:d3:d2:d2:cd:0f:af:7d:20:92:08:d5:63:
         5b:18:bf:dd:7a:37:ac:06:f1:aa:49:d0:d1:1b:ea:dc:b2:67:
         6a:94:f1:26:3b:81:a6:92:fd:8b:18:80:df:f8:52:24:67:d8:
         f2:a0:ad:c3:17:35:6b:4e:c1:65:25:f0:18:6c:f2:d9:ec:ab:
         8b:ba:81:3f:03:4a:27:4a:fe:25:22:66:bf:1f:85:67:9e:d2:
         a5:66:f9:01:b7:4d:42:63:60:17:e9:89:56:de:c4:ac:23:cf:
         26:1d:17:95:f2:6c:e6:7f:b4:dc:bb:5c:cb:cc:b9:9c:b5:0b:
         01:a5:a0:7f:2f:d1:45:27:33:6e:b2:a5:2c:dd:98:bf:35:10:
         e1:e7:ed:4a:ba:00:49:6a:d1:84:e3:17:5e:47:07:94:f9:60:
         6e:9a:ce:89:d6:c9:80:14:65:ba:20:52:11:9d:21:1f:dc:5c:
         9b:86:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:14:01 2026 by rpki-client