Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3332203d3e20323635323332.roa
File:                     323830343a326361343a3a2f33322d3332203d3e20323635323332.roa (raw, json)
Hash identifier:          FrdxLr+SWJZDajYSitrPMmJw7/qhl5PxVtdq59n41cU=
Subject key identifier:   8B:9C:9F:8F:A4:8A:0A:6F:78:81:19:FC:D3:C8:0D:C5:D4:EA:2C:2F
Certificate issuer:       /CN=F94C7199AB41496AEFC27C30365DF0A239117A73
Certificate serial:       64085CE5BE332EFE5CCC75FE3EBEB7AA74C43DD4
Authority key identifier: F9:4C:71:99:AB:41:49:6A:EF:C2:7C:30:36:5D:F0:A2:39:11:7A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3332203d3e20323635323332.roa
Signing time:             Fri 14 Aug 2026 12:57:49 +0000
ROA not before:           Fri 14 Aug 2026 12:52:49 +0000
ROA not after:            Fri 13 Aug 2027 12:57:49 +0000
asID:                     265232
IP address blocks:        2804:2ca4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.crl
                          rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 13:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:08:5c:e5:be:33:2e:fe:5c:cc:75:fe:3e:be:b7:aa:74:c4:3d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F94C7199AB41496AEFC27C30365DF0A239117A73
        Validity
            Not Before: Aug 14 12:52:49 2026 GMT
            Not After : Aug 13 12:57:49 2027 GMT
        Subject: CN=8B9C9F8FA48A0A6F788119FCD3C80DC5D4EA2C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:2f:26:9e:96:ab:31:5d:46:49:e5:c2:1b:
                    0d:e4:2e:7f:e6:40:0a:b4:57:a9:cd:2d:c5:70:95:
                    40:ae:6e:2b:86:0f:f4:58:15:f0:44:41:51:40:1f:
                    c0:a9:c5:fc:db:82:17:7b:71:ee:e9:d4:6b:90:d9:
                    96:22:26:d4:4b:ef:c8:d0:83:9b:5c:21:ce:91:58:
                    d7:ee:9c:ed:f2:0d:23:53:7b:2f:25:72:ed:f5:57:
                    e2:f1:7e:15:b8:16:b5:30:83:c8:6d:f4:0c:de:af:
                    b1:d4:6f:fc:87:8b:e1:ab:5d:6b:70:ff:b7:91:30:
                    42:5a:b9:1b:9c:84:82:35:07:e3:fe:50:7b:bd:50:
                    3b:fe:fd:05:c2:29:ff:8a:a5:a3:ca:15:98:cc:ec:
                    1d:72:55:54:3e:b4:92:48:1e:a6:d3:a3:4d:d7:9f:
                    67:44:94:81:63:4d:79:2f:bc:3e:66:2f:ff:db:6c:
                    0b:84:87:1a:bf:6f:0b:dd:a7:26:74:a2:6c:64:d5:
                    be:d1:fd:fc:68:e0:d2:02:00:27:48:0a:5e:44:dd:
                    08:85:fe:6d:ed:10:b7:95:7b:19:94:d0:f3:5f:9e:
                    c8:9f:3a:dd:98:2d:b7:c3:88:36:44:11:c7:14:9e:
                    11:e6:5f:ad:c6:8b:37:d6:c4:19:3e:cd:45:f5:e1:
                    8e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:9F:8F:A4:8A:0A:6F:78:81:19:FC:D3:C8:0D:C5:D4:EA:2C:2F
            X509v3 Authority Key Identifier:
                keyid:F9:4C:71:99:AB:41:49:6A:EF:C2:7C:30:36:5D:F0:A2:39:11:7A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/F94C7199AB41496AEFC27C30365DF0A239117A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F94C7199AB41496AEFC27C30365DF0A239117A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Jgh342HLdQM5GuTVj4ZkLRs53DrBqfEHD8Dx3CaedVo/0/323830343a326361343a3a2f33322d3332203d3e20323635323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:33:4f:08:8a:cc:fe:0c:54:7d:60:f4:c8:bf:51:b7:27:40:
         da:34:e2:64:de:8d:b5:30:84:83:42:dc:13:b1:1e:b3:11:6a:
         0f:a7:9c:c9:9f:44:fd:db:d3:57:a9:5c:4a:c2:70:93:95:17:
         1c:d3:0b:30:58:fd:36:4d:62:9b:6b:fa:16:c3:1f:83:00:d6:
         94:3e:92:28:de:9d:07:79:1a:6a:f8:36:88:af:22:d7:99:f4:
         fd:c0:d4:90:bb:fa:07:ab:1b:10:4b:ec:6d:97:45:19:58:19:
         32:78:52:47:bb:20:6b:81:ef:87:9a:d5:42:d6:64:c1:d3:3c:
         44:d9:23:17:9e:66:cc:f8:02:53:01:2f:47:90:87:17:14:7a:
         c7:9c:2a:7e:71:e8:e1:57:ad:81:a8:51:a8:2c:82:b1:b8:b6:
         e8:e6:04:66:b2:f5:f2:e9:a8:0c:d3:95:59:94:ab:81:50:72:
         83:28:45:e5:14:f6:b5:0b:10:0d:7f:69:75:b4:b0:94:1d:26:
         a3:90:e6:5c:3c:e0:9d:00:b3:3c:98:d2:ce:7c:21:e4:73:d2:
         0b:9c:77:11:e4:59:e4:4e:26:e1:16:7c:0f:6f:71:53:08:eb:
         83:2d:42:2d:53:d3:11:ca:31:6d:fa:2e:3b:0a:31:80:26:f0:
         ef:58:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:40:10 2026 by rpki-client