Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
File:                     323830343a353363343a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier:          1z0N6WW/cAfFyPVXJuUh9hyDqMKDcH8htNQLhLNd9f8=
Subject key identifier:   4E:A2:87:24:33:4B:23:95:05:22:C4:7C:EB:9B:3A:DC:06:FC:8B:43
Certificate issuer:       /CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
Certificate serial:       39B159A87C0700319D0D881FE14899999E840F22
Authority key identifier: 82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa
Signing time:             Fri 14 Aug 2026 16:33:11 +0000
ROA not before:           Fri 14 Aug 2026 16:28:11 +0000
ROA not after:            Fri 13 Aug 2027 16:33:11 +0000
asID:                     268605
IP address blocks:        2804:53c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl
                          rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 07:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b1:59:a8:7c:07:00:31:9d:0d:88:1f:e1:48:99:99:9e:84:0f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82A12D87E7C80E5652B34EDF692F12EB79642AC3
        Validity
            Not Before: Aug 14 16:28:11 2026 GMT
            Not After : Aug 13 16:33:11 2027 GMT
        Subject: CN=4EA28724334B23950522C47CEB9B3ADC06FC8B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:da:54:66:29:83:9e:b4:1c:11:ab:d1:00:7f:
                    06:7f:c8:e0:c9:83:53:58:7f:7c:45:65:8a:c1:6b:
                    18:42:c5:fd:a9:d8:f6:52:04:cf:73:ab:c0:ff:ce:
                    bf:19:c1:a4:29:4b:35:ad:02:55:1d:5f:1e:69:21:
                    f9:b8:d1:7b:1d:87:d9:75:7c:45:63:b5:e5:78:c8:
                    70:ea:ba:a4:d5:72:f3:b3:d7:76:fa:68:3a:28:c4:
                    ff:a8:7f:6d:3f:bc:86:bd:34:18:ce:f3:00:4d:b3:
                    96:bb:cc:c9:26:97:2a:f7:01:2b:bc:7b:a2:77:8a:
                    2e:f6:3d:5c:67:14:fa:80:f9:11:d5:14:5c:40:99:
                    cd:66:10:93:df:2e:f2:72:aa:8c:c4:86:b7:c3:c9:
                    17:dd:99:f9:e7:f6:4d:dc:a7:bf:50:97:6b:7b:5e:
                    3f:6f:87:84:f7:b0:78:a6:3e:d2:72:e2:23:b5:e1:
                    37:4a:4e:c7:59:b8:0b:6a:e5:c8:c6:2f:2e:39:ec:
                    12:ea:d7:f6:4b:7e:2a:9f:a9:dc:89:be:84:5a:e8:
                    25:4b:07:7c:9a:3a:c3:97:71:1c:fd:30:96:17:f5:
                    83:a0:9e:22:f2:94:74:ce:08:80:4d:3a:1f:3a:fc:
                    1e:8e:7c:37:67:f2:8c:99:53:cc:3c:71:fe:65:04:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:87:24:33:4B:23:95:05:22:C4:7C:EB:9B:3A:DC:06:FC:8B:43
            X509v3 Authority Key Identifier:
                keyid:82:A1:2D:87:E7:C8:0E:56:52:B3:4E:DF:69:2F:12:EB:79:64:2A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/82A12D87E7C80E5652B34EDF692F12EB79642AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82A12D87E7C80E5652B34EDF692F12EB79642AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82cEUCBB8ckWrEibmuLhAj3bEbRdJWvPnEzzGpLS4r3W/0/323830343a353363343a3a2f33322d313238203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:50:e9:f9:e2:7a:c2:07:a7:80:d7:b2:a5:a9:2e:9c:50:
         78:87:cc:12:c0:11:4d:7d:db:4d:e4:b7:38:f6:6d:36:b5:c6:
         5a:c1:84:3c:da:68:44:86:45:e7:d3:f0:1f:ce:8c:bf:0d:87:
         1d:ae:62:92:4a:85:a8:48:13:60:a9:01:53:c1:db:38:f2:b1:
         c2:46:4a:ca:24:39:c3:e3:32:2f:90:34:a5:93:66:85:5a:5a:
         35:73:d2:7a:20:46:34:7b:e5:8a:5e:ba:dc:27:10:78:73:34:
         cc:aa:39:12:13:3d:04:f9:bd:91:fd:14:f6:d9:15:8e:50:26:
         d7:15:f6:a4:c6:28:a5:a3:c9:22:ff:d4:59:53:46:12:54:73:
         0a:97:51:6f:84:48:e4:1d:ed:1b:69:f6:ff:e0:d3:9b:34:51:
         9c:4b:d0:7b:09:5c:40:ef:6d:84:ce:71:cc:b3:c6:16:b2:f0:
         f3:53:eb:5e:e3:1f:42:0b:2b:06:c2:8c:c0:0e:fa:e6:b0:c0:
         9c:e4:5d:d5:aa:49:f4:ff:9f:fc:a4:36:f7:3f:a3:d7:b2:90:
         5e:ac:06:14:99:ab:ff:e1:e4:a2:93:cd:9f:58:4c:5c:6b:cb:
         3b:50:14:b2:20:cb:7f:1c:81:07:b0:81:40:7d:c5:86:a9:25:
         4b:8b:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:45:36 2026 by rpki-client