Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a3a2f33322d313238203d3e20323635333335.roa
File:                     323830343a326534343a3a2f33322d313238203d3e20323635333335.roa (raw, json)
Hash identifier:          MHxbDY6j0eWXFGs3VzAdCbV/Bp1wJY1Wn+ljgTKwItw=
Subject key identifier:   0D:62:D0:59:22:A7:2A:AC:A8:29:39:1F:A9:23:A2:3F:DA:F4:2E:F2
Certificate issuer:       /CN=FA48B95BCB9391CBF2DD15A2213770689A9D0399
Certificate serial:       3ED5360C762B072F385C42183B18547C955097D3
Authority key identifier: FA:48:B9:5B:CB:93:91:CB:F2:DD:15:A2:21:37:70:68:9A:9D:03:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA48B95BCB9391CBF2DD15A2213770689A9D0399.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a3a2f33322d313238203d3e20323635333335.roa
Signing time:             Fri 19 Jun 2026 00:37:57 +0000
ROA not before:           Fri 19 Jun 2026 00:32:57 +0000
ROA not after:            Fri 18 Jun 2027 00:37:57 +0000
asID:                     265335
IP address blocks:        2804:2e44::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/FA48B95BCB9391CBF2DD15A2213770689A9D0399.crl
                          rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/FA48B95BCB9391CBF2DD15A2213770689A9D0399.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA48B95BCB9391CBF2DD15A2213770689A9D0399.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d5:36:0c:76:2b:07:2f:38:5c:42:18:3b:18:54:7c:95:50:97:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA48B95BCB9391CBF2DD15A2213770689A9D0399
        Validity
            Not Before: Jun 19 00:32:57 2026 GMT
            Not After : Jun 18 00:37:57 2027 GMT
        Subject: CN=0D62D05922A72AACA829391FA923A23FDAF42EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:e7:a6:6c:d8:f9:8e:5f:bf:1e:9e:9f:13:
                    f3:00:e1:62:8b:4f:b7:ae:52:6f:be:b5:2b:ba:a5:
                    27:d9:41:a2:82:72:b4:79:58:dc:c6:b8:45:76:d9:
                    9b:96:c7:33:34:f6:4c:c8:db:cc:9b:99:11:09:e5:
                    bf:bf:d9:2c:2a:75:ab:f3:7d:0e:f1:e5:f2:be:01:
                    c4:b4:ca:e4:09:28:25:f9:7d:eb:f0:8c:db:38:56:
                    0e:0d:4d:cc:a3:70:06:dc:b8:35:9e:be:9e:36:d2:
                    9c:f2:9f:6f:5d:ae:9a:6e:d3:9e:e8:94:0c:8a:77:
                    24:b1:62:78:cb:af:5b:9a:b6:ff:35:4b:7c:31:68:
                    cc:69:d7:b2:b6:5f:d9:04:52:28:e0:9d:cd:10:da:
                    d0:5f:c9:96:d4:9b:46:d8:27:e4:fd:94:58:75:51:
                    7b:99:71:a2:af:b9:8e:bf:0d:a6:fb:c8:d6:85:d2:
                    6d:a3:c9:bd:ee:2a:e4:9f:98:c1:8c:19:5b:25:be:
                    3c:b8:f2:1d:8e:12:4a:05:ca:08:9d:f5:c0:46:02:
                    76:64:14:37:eb:ac:b2:e6:89:27:f4:f6:4f:32:f4:
                    44:22:5c:63:da:0e:33:6a:bd:a6:74:67:7a:99:be:
                    e2:c1:1b:92:e7:91:3e:01:9e:03:dc:56:b6:0f:0b:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:D0:59:22:A7:2A:AC:A8:29:39:1F:A9:23:A2:3F:DA:F4:2E:F2
            X509v3 Authority Key Identifier:
                keyid:FA:48:B9:5B:CB:93:91:CB:F2:DD:15:A2:21:37:70:68:9A:9D:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/FA48B95BCB9391CBF2DD15A2213770689A9D0399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA48B95BCB9391CBF2DD15A2213770689A9D0399.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a3a2f33322d313238203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:bc:1c:eb:88:52:d3:56:45:0d:0d:12:c5:c1:2f:a1:ac:
         42:78:79:c9:fa:fd:16:46:23:25:33:e3:70:21:ee:73:fa:ab:
         02:e1:4b:c8:c4:a8:b7:2f:1d:22:6d:0f:4c:4e:48:ae:28:c9:
         07:94:09:d3:f7:3b:e7:a2:70:c9:49:5a:d0:50:28:bb:2e:11:
         23:ed:71:3e:72:84:76:d2:90:0b:96:a9:a6:8b:cd:2b:c1:99:
         6e:75:e5:22:1d:cd:76:e0:3a:28:73:ca:32:41:89:90:9a:8f:
         a9:d4:70:15:24:f2:ec:95:8a:a6:22:c3:80:96:e0:52:2c:4a:
         ed:b3:09:ee:d4:4a:2e:22:05:e2:d4:ad:c9:0e:35:b0:03:72:
         c7:0f:59:f5:22:84:62:d5:02:2c:ee:d5:2a:e7:35:af:85:1f:
         d0:3e:42:0f:ed:6f:06:78:0e:5e:df:11:1c:88:56:bf:58:be:
         54:12:53:a3:38:77:d4:65:2f:0b:22:ae:cd:a1:9e:c6:27:39:
         cd:9a:bc:1c:83:59:a2:08:64:41:5d:40:a5:f5:d7:f4:b8:68:
         94:72:2c:fa:ed:0f:38:55:3c:1c:cc:82:ad:a0:0f:f6:01:3d:
         7b:a6:83:dd:fd:e5:3d:fa:d2:a0:67:86:8a:0f:42:b9:ec:a6:
         76:a6:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:07:02 2026 by rpki-client