Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a383030303a3a2f33332d3333203d3e20323733373039.roa
File:                     323830343a386231303a383030303a3a2f33332d3333203d3e20323733373039.roa (raw, json)
Hash identifier:          UxKZCOMo0fWOEcwLEfCCqaNnJBySgrBL5gcrV5yELA4=
Subject key identifier:   B3:5F:5A:E9:C1:BC:B3:97:1F:4D:FF:29:E3:AF:DA:9C:1E:81:DA:3C
Certificate issuer:       /CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
Certificate serial:       59624C2346C740C7828E6CBED30F2B7F6895DDEA
Authority key identifier: 15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a383030303a3a2f33332d3333203d3e20323733373039.roa
Signing time:             Thu 13 Aug 2026 23:57:47 +0000
ROA not before:           Thu 13 Aug 2026 23:52:47 +0000
ROA not after:            Thu 12 Aug 2027 23:57:47 +0000
asID:                     273709
IP address blocks:        2804:8b10:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl
                          rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:4c:23:46:c7:40:c7:82:8e:6c:be:d3:0f:2b:7f:68:95:dd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ECBBC6CA09DABDA13646561F388D1E4024A25B
        Validity
            Not Before: Aug 13 23:52:47 2026 GMT
            Not After : Aug 12 23:57:47 2027 GMT
        Subject: CN=B35F5AE9C1BCB3971F4DFF29E3AFDA9C1E81DA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:75:e5:04:81:2c:3d:2f:52:e9:06:43:8b:
                    f2:66:ce:5c:13:1e:b6:f0:3f:39:73:9b:1f:38:10:
                    ab:0d:77:60:21:79:5a:a7:6f:0f:d5:31:dc:75:a9:
                    62:88:55:30:49:a3:a1:c3:e5:61:2b:25:8e:1b:ce:
                    5b:34:8e:ef:35:14:c0:43:b6:3a:17:f8:70:b2:31:
                    e6:a5:d6:9f:e5:00:e6:49:8d:51:41:53:56:75:e3:
                    45:eb:c0:bb:c2:81:61:50:23:a4:9c:4f:ad:a6:93:
                    f8:cf:48:15:93:63:61:29:66:fe:b1:60:93:1b:0c:
                    46:08:e0:08:dd:7f:04:cd:3a:47:f9:24:64:69:41:
                    e4:9f:79:2f:48:14:d2:19:d8:dc:b6:45:b4:1d:cf:
                    6a:be:16:69:a1:28:2a:c3:56:d1:00:23:84:0b:c9:
                    68:67:5f:c8:e5:57:22:95:c0:48:13:5b:11:60:92:
                    c8:19:24:57:68:67:a0:c8:0f:1c:3e:1d:a6:e2:b1:
                    81:47:d8:d5:fe:92:20:79:56:69:d5:dc:7e:79:5a:
                    f5:85:00:61:9d:c1:85:d1:a1:12:99:0f:1a:16:ec:
                    36:11:67:6d:c8:d1:c2:1a:cd:cb:56:f6:a1:b7:63:
                    37:5e:7a:5d:40:9e:be:12:91:af:dd:0e:89:d3:ea:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:5A:E9:C1:BC:B3:97:1F:4D:FF:29:E3:AF:DA:9C:1E:81:DA:3C
            X509v3 Authority Key Identifier:
                keyid:15:EC:BB:C6:CA:09:DA:BD:A1:36:46:56:1F:38:8D:1E:40:24:A2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/15ECBBC6CA09DABDA13646561F388D1E4024A25B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15ECBBC6CA09DABDA13646561F388D1E4024A25B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pBz1Jp78MwRFyKmJSNC1LAW3fsnDqB6fVaKTKNeAUTs/0/323830343a386231303a383030303a3a2f33332d3333203d3e20323733373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b10:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         74:73:a7:a9:f7:01:4a:ca:36:64:19:bc:1f:69:fc:00:e3:1e:
         6c:dd:31:d2:c7:14:e7:48:30:16:4e:c5:f8:02:71:2c:42:fb:
         80:0a:66:10:46:78:65:7c:c7:91:07:d4:6f:a2:b7:40:db:82:
         bb:ec:fd:1d:a1:bb:2b:37:4e:c9:be:ea:c1:d9:84:4d:78:62:
         6c:fd:eb:bf:b8:8b:33:1d:82:88:3a:d9:8f:8a:1e:98:75:5f:
         b3:34:54:c4:03:c5:f4:f6:54:f0:35:b9:83:d3:7e:82:c4:24:
         c7:d1:b0:5a:48:49:7a:83:aa:a3:2c:a1:a0:07:a6:e0:d9:74:
         c9:66:64:56:24:14:36:15:01:0b:99:d1:cc:e1:75:ec:58:12:
         d1:39:e0:4d:76:c3:19:e4:6c:5d:65:8d:10:ce:ce:e6:b5:8b:
         aa:6a:9d:5e:e5:5d:38:0c:a9:3b:a6:60:62:5e:18:b6:c7:22:
         e3:15:5b:f6:2d:4a:20:e0:9f:5e:43:19:61:b6:85:21:7c:8b:
         f5:58:94:6a:94:71:ef:35:46:2d:4c:39:58:c7:3d:82:f9:ae:
         10:04:62:40:f6:88:00:cb:cc:23:bc:c3:fa:ee:c0:da:88:87:
         8d:1f:f2:43:65:34:f5:b7:34:cc:89:c1:d7:0d:6d:60:45:cb:
         00:cf:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:15 2026 by rpki-client