Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
File:                     323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa (raw, json)
Hash identifier:          MBWKKeD6R2TOShqPSkGi8HDzBfdrZHGCKXvTtLqNAPs=
Subject key identifier:   87:98:AF:56:86:6F:56:16:44:4E:3E:85:56:13:27:77:B0:78:11:68
Certificate issuer:       /CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
Certificate serial:       10385AEBF77583303782A8E12C7BD516E9F6BD63
Authority key identifier: 68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa
Signing time:             Mon 10 Aug 2026 19:08:11 +0000
ROA not before:           Mon 10 Aug 2026 19:03:11 +0000
ROA not after:            Mon 09 Aug 2027 19:08:11 +0000
asID:                     270285
IP address blocks:        2804:69b0:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:38:5a:eb:f7:75:83:30:37:82:a8:e1:2c:7b:d5:16:e9:f6:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2
        Validity
            Not Before: Aug 10 19:03:11 2026 GMT
            Not After : Aug  9 19:08:11 2027 GMT
        Subject: CN=8798AF56866F5616444E3E8556132777B0781168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b6:86:29:2f:99:63:0f:a7:b0:98:12:d4:53:
                    a8:f6:f1:ec:a5:ac:ea:79:8b:d3:44:94:ac:28:0f:
                    27:07:46:f8:f2:08:7d:80:c6:eb:16:ae:b3:d9:73:
                    ca:d9:11:9a:12:6b:49:84:d7:f3:f2:56:d2:14:68:
                    63:52:2f:65:a2:44:a0:88:b0:42:54:70:b3:7f:35:
                    e1:c5:b7:20:c0:b7:f5:c8:27:df:fb:58:a5:15:c2:
                    79:52:fd:52:2a:fd:4c:cc:c2:82:67:41:cb:27:fc:
                    4f:e2:14:29:79:42:f6:fe:95:f5:bf:c7:d8:a6:7b:
                    96:d6:c5:b1:9f:8c:02:5f:9f:2e:b0:52:19:9d:54:
                    ba:fb:c6:99:59:ed:b7:02:91:c7:cb:47:5d:b3:33:
                    f5:ad:f8:a0:1c:22:e5:cc:37:bd:14:df:29:51:d1:
                    e9:10:1f:23:07:89:97:4d:ce:61:ce:2e:5c:79:62:
                    03:bb:8a:e1:9b:62:f9:11:90:61:10:cc:cf:6d:15:
                    72:70:eb:54:bc:1d:a4:66:d8:76:ae:58:01:9a:5b:
                    6b:5a:d1:06:76:92:24:b9:96:aa:58:c3:48:7e:1a:
                    19:8b:6e:72:80:36:d3:7c:4b:d4:46:96:6d:0d:f0:
                    4b:8b:8d:96:23:7b:c7:35:2a:82:71:0f:58:4a:d7:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:AF:56:86:6F:56:16:44:4E:3E:85:56:13:27:77:B0:78:11:68
            X509v3 Authority Key Identifier:
                keyid:68:CA:3A:36:C8:EB:04:B3:67:B6:33:21:FE:5E:DE:87:F3:C8:D3:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68CA3A36C8EB04B367B63321FE5EDE87F3C8D3C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/323830343a363962303a34303a3a2f34342d3434203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:69b0:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:86:c2:37:8b:45:32:14:b1:69:93:1f:39:ed:7a:d6:79:34:
         58:18:9e:7a:83:f3:58:e3:78:73:4b:7c:5b:60:c1:47:47:91:
         76:0e:2b:c1:0a:96:04:d5:7f:77:e6:ed:f1:bf:3a:ee:c0:99:
         4e:ec:1b:4a:4a:e1:09:a7:0e:c8:1c:38:51:6d:74:25:19:27:
         a6:57:c5:9f:53:11:24:77:29:d9:20:d9:68:13:8e:cc:84:42:
         23:77:b4:9d:ea:17:a4:c8:2e:a8:08:d4:40:43:b6:22:4d:2a:
         57:95:c5:bd:1b:95:11:2c:cf:92:b3:3b:44:dc:17:50:dc:94:
         1c:9e:e7:0b:13:83:fb:d2:4c:a5:b0:86:6b:b6:9a:19:49:99:
         86:c8:6a:b0:41:d1:ea:45:11:59:8d:29:36:b8:14:6d:cd:e2:
         58:9b:9e:85:89:c6:b0:79:d6:16:9f:f6:56:97:6f:78:53:5c:
         e8:47:63:d3:5a:de:e2:7e:89:25:9c:b9:26:2a:02:03:6a:a5:
         86:75:91:f8:9a:50:e4:da:4b:13:05:96:14:9e:f8:ad:1f:8e:
         8b:b9:1f:d4:01:7d:27:d8:c9:77:e9:35:54:eb:9e:f5:5a:00:
         06:bf:c2:63:74:66:cc:4f:20:48:74:8e:62:e0:71:df:12:59:
         29:1f:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:20 2026 by rpki-client