Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d313238203d3e20323636303633.roa
File:                     323830343a333966633a3a2f33322d313238203d3e20323636303633.roa (raw, json)
Hash identifier:          7ujwECH8M1P0jldGFBJe5nneCYiZPNzG87V4vQi3j2o=
Subject key identifier:   B3:04:C3:E0:B8:CC:AC:F3:53:7B:C0:43:1F:E8:F9:64:46:09:FC:B0
Certificate issuer:       /CN=8ABA949DA942DD78349D193155ECEDDD9FE466D0
Certificate serial:       7CE48D628B9261F8D860799437326BEFB5DC29B9
Authority key identifier: 8A:BA:94:9D:A9:42:DD:78:34:9D:19:31:55:EC:ED:DD:9F:E4:66:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABA949DA942DD78349D193155ECEDDD9FE466D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d313238203d3e20323636303633.roa
Signing time:             Tue 18 Aug 2026 13:32:56 +0000
ROA not before:           Tue 18 Aug 2026 13:27:56 +0000
ROA not after:            Tue 17 Aug 2027 13:32:56 +0000
asID:                     266063
IP address blocks:        2804:39fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/8ABA949DA942DD78349D193155ECEDDD9FE466D0.crl
                          rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/8ABA949DA942DD78349D193155ECEDDD9FE466D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABA949DA942DD78349D193155ECEDDD9FE466D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 03:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e4:8d:62:8b:92:61:f8:d8:60:79:94:37:32:6b:ef:b5:dc:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABA949DA942DD78349D193155ECEDDD9FE466D0
        Validity
            Not Before: Aug 18 13:27:56 2026 GMT
            Not After : Aug 17 13:32:56 2027 GMT
        Subject: CN=B304C3E0B8CCACF3537BC0431FE8F9644609FCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:71:07:e0:ff:0c:4e:2d:ad:48:d4:29:b4:5f:
                    29:50:de:94:6a:fa:1e:a6:30:95:59:69:0d:9b:b4:
                    79:4e:e4:d7:22:1e:d1:9b:a6:30:a2:08:84:26:92:
                    9a:2f:35:56:b9:1b:c8:a3:07:5d:cd:d9:6d:aa:09:
                    1b:8f:69:52:3a:d3:f3:eb:6e:38:dc:27:23:3f:77:
                    c6:67:eb:ce:5d:87:6b:a9:35:7c:de:ce:82:ee:d1:
                    a2:4b:65:b9:a7:f1:e1:a6:37:e3:a9:26:81:f9:d1:
                    6d:6a:a5:c1:e5:c0:14:f3:fb:81:1a:39:47:15:d8:
                    60:72:36:c9:ef:f0:4b:46:66:43:38:f1:72:96:79:
                    2a:e4:ec:87:08:cf:b9:74:94:6a:fe:e1:2c:14:74:
                    2c:ed:43:12:22:4a:cf:b3:a4:44:b8:21:e2:d2:8a:
                    ca:94:2f:f8:97:ba:98:dc:83:81:14:5a:2b:32:26:
                    bb:90:db:17:43:17:66:a8:64:a8:af:b5:f9:ee:ea:
                    90:ae:f6:d6:ed:23:19:d3:61:c3:40:08:2e:32:8d:
                    11:79:ba:e9:3e:9a:a5:d6:68:54:22:b5:7a:75:54:
                    0d:c4:86:2e:67:34:bf:1b:54:cf:5b:b7:41:43:a5:
                    2c:a1:c2:0b:06:d7:8e:41:52:93:03:c9:a2:1d:45:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:04:C3:E0:B8:CC:AC:F3:53:7B:C0:43:1F:E8:F9:64:46:09:FC:B0
            X509v3 Authority Key Identifier:
                keyid:8A:BA:94:9D:A9:42:DD:78:34:9D:19:31:55:EC:ED:DD:9F:E4:66:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/8ABA949DA942DD78349D193155ECEDDD9FE466D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABA949DA942DD78349D193155ECEDDD9FE466D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d313238203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:ff:f5:c6:bd:bc:db:36:1e:e5:1c:b0:b8:cf:4b:ee:2d:
         87:77:3e:29:ca:48:f2:c9:0b:08:ce:ce:68:8d:6f:ab:19:7b:
         60:37:d5:61:37:23:f7:64:42:1d:49:fc:18:64:bd:70:17:21:
         bf:44:a0:db:46:f5:9c:3b:b2:54:e3:f2:e6:ea:2a:37:11:ea:
         08:16:5c:26:35:4a:2d:dc:5f:cd:3a:dd:0c:23:2e:a1:fb:54:
         33:a3:31:bd:32:c9:97:ff:2b:62:ff:ab:b3:10:79:41:6b:ef:
         b0:db:65:cf:cd:f0:17:cb:e7:bd:dd:7b:4c:76:40:a8:86:22:
         63:70:ca:d1:b5:d0:2e:50:a7:1b:df:fc:12:d6:56:39:22:1a:
         df:be:ec:73:21:7a:46:aa:16:2d:3f:4f:50:99:ab:ac:72:d0:
         b6:f2:06:43:aa:01:ba:fb:92:12:2d:78:35:c3:3a:e6:6c:3c:
         a9:5f:72:69:0c:87:60:69:78:75:eb:52:c9:bd:32:f2:3c:b0:
         56:1f:e6:d2:a3:b1:03:2b:d0:bb:5a:f3:08:34:13:0e:d2:6d:
         6a:7f:37:cf:57:a2:c0:6a:85:b3:e4:66:6f:e9:69:9c:a0:a6:
         0a:ac:e3:c9:aa:67:f3:bd:fc:9c:f5:f1:64:cc:26:d5:1a:33:
         73:4a:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:40 2026 by rpki-client