Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3438203d3e20323632383939.roa
File:                     323830343a353534633a3a2f33322d3438203d3e20323632383939.roa (raw, json)
Hash identifier:          mNZy1wFxmxiRY8KOBPdQUYpJpDd986ShPe8loSwMEtU=
Subject key identifier:   6E:C2:B1:17:97:54:47:7E:0C:ED:BD:B2:A0:83:BB:C9:93:8A:CF:8B
Certificate issuer:       /CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
Certificate serial:       4E53D5521BFF77DDC7C4763AF5CAD49B5861FF7D
Authority key identifier: 9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3438203d3e20323632383939.roa
Signing time:             Thu 30 Jul 2026 14:54:59 +0000
ROA not before:           Thu 30 Jul 2026 14:49:59 +0000
ROA not after:            Thu 29 Jul 2027 14:54:59 +0000
asID:                     262899
IP address blocks:        2804:554c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 15:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:53:d5:52:1b:ff:77:dd:c7:c4:76:3a:f5:ca:d4:9b:58:61:ff:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C658C6E5D9BF80C0D505E4AF772FC926FC28C56
        Validity
            Not Before: Jul 30 14:49:59 2026 GMT
            Not After : Jul 29 14:54:59 2027 GMT
        Subject: CN=6EC2B1179754477E0CEDBDB2A083BBC9938ACF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:fd:ea:24:c2:de:62:ac:04:fc:87:10:25:
                    18:de:9b:df:d8:bd:f9:ed:50:18:05:da:d7:07:2c:
                    6f:ed:db:33:56:f4:06:57:2b:9a:ee:02:9c:df:ca:
                    96:04:fd:a5:4c:db:b1:0e:a2:25:23:7a:ba:7a:e3:
                    86:52:a9:ce:f2:90:c8:49:4a:fd:0a:ba:c7:cb:fe:
                    f1:78:0f:8e:99:2d:a9:5c:06:d3:16:68:7c:0f:df:
                    e6:31:d3:cd:f0:e4:13:f5:e1:e3:8a:49:0c:c6:85:
                    a4:7e:f1:95:e2:09:84:b0:2b:27:50:66:24:67:a1:
                    2b:43:8e:6d:00:6b:6a:28:4b:bc:90:2e:ad:db:96:
                    1b:2c:3f:7f:e0:87:f2:6e:57:18:c0:22:18:9b:44:
                    11:02:07:5e:52:e8:cf:ed:0a:4e:2e:1e:43:90:ec:
                    a3:b6:b0:19:a1:97:26:b7:4b:36:2d:54:c6:b8:ee:
                    2d:b7:79:6a:95:47:fe:04:fe:78:33:df:59:cf:05:
                    b5:4a:d7:79:4f:ff:93:da:ed:d5:7e:0f:0d:ee:22:
                    d7:5d:90:ed:a6:28:94:77:96:8d:e1:23:0c:e4:2b:
                    9c:e1:5f:43:9a:30:82:01:87:13:2c:d3:08:be:fa:
                    f2:a7:d5:4c:0e:86:1b:97:94:26:ec:ab:70:a4:4f:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C2:B1:17:97:54:47:7E:0C:ED:BD:B2:A0:83:BB:C9:93:8A:CF:8B
            X509v3 Authority Key Identifier:
                keyid:9C:65:8C:6E:5D:9B:F8:0C:0D:50:5E:4A:F7:72:FC:92:6F:C2:8C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C658C6E5D9BF80C0D505E4AF772FC926FC28C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3438203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554c::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:b8:7b:bd:b1:15:7d:b3:c5:21:90:5b:68:e1:36:af:02:
         1f:4d:7d:9c:b6:d9:6e:a2:2d:eb:67:37:3a:87:e9:93:57:04:
         af:fd:ee:df:bd:10:71:43:94:57:5b:a3:50:39:0f:e2:0a:37:
         a3:fa:f1:58:d6:6b:46:04:60:08:6e:9b:10:e9:ef:c4:1b:38:
         a7:a4:c3:0e:f6:11:5f:72:46:99:fd:35:4c:02:dd:84:de:a3:
         87:f4:ed:1c:fc:fd:45:4f:98:c7:1a:4b:76:99:db:6d:01:29:
         0c:a8:93:6d:e5:52:c2:d2:ea:fe:c9:e0:67:ec:16:65:eb:db:
         8e:c1:13:98:16:5e:a9:0e:2b:28:35:ef:8d:73:6f:fa:c3:78:
         df:6d:5c:8f:99:b7:43:30:14:41:6f:1e:ab:66:a3:cd:4e:f0:
         ae:8c:6f:12:a5:38:cc:9e:31:67:ab:eb:e3:91:34:e5:c2:e8:
         86:26:2e:8b:25:ee:7c:70:ec:9e:7b:f1:e6:c2:0b:84:c7:9d:
         e4:8c:a6:e9:5a:03:12:7b:bf:a8:a7:8f:b8:77:02:7f:bc:15:
         8a:c4:af:ee:3e:07:2c:23:97:69:b8:7d:57:21:55:2f:64:e5:
         69:59:1d:91:a7:da:8b:59:d9:e5:e7:d8:73:f0:ea:9d:67:35:
         33:ae:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:17:51 2026 by rpki-client