Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33322d3332203d3e20323634303235.roa (raw, json)
Hash identifier:          7aPqH5HC4Ma+qiODv4jcNxdFopU28y3NRqaP6a0FHIA=
Subject key identifier:   93:6A:01:34:48:7A:43:3C:04:A9:57:F2:5A:13:1A:81:3A:E6:47:CD
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       205D3698603F6F4CA463A719A011C4E95F6F44F3
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:27 +0000
ROA not before:           Thu 30 Jul 2026 17:54:27 +0000
ROA not after:            Thu 29 Jul 2027 17:59:27 +0000
asID:                     264025
IP address blocks:        2804:299c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5d:36:98:60:3f:6f:4c:a4:63:a7:19:a0:11:c4:e9:5f:6f:44:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:27 2026 GMT
            Not After : Jul 29 17:59:27 2027 GMT
        Subject: CN=936A0134487A433C04A957F25A131A813AE647CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:27:8b:42:df:13:17:75:71:51:d8:57:21:
                    f3:c3:97:50:b9:37:f9:9e:83:46:26:ad:6a:cd:ef:
                    cf:d9:df:44:d0:11:8f:f7:8d:b1:87:8c:50:f9:a8:
                    82:b8:0b:80:c3:66:eb:a9:67:24:32:9e:c0:dc:71:
                    83:79:3c:1d:56:4c:e7:27:22:68:d9:ea:e2:42:69:
                    cd:cc:99:ea:c9:8b:18:09:ff:f5:ce:21:b8:bb:75:
                    ba:be:15:90:1f:66:de:0e:90:55:fa:bd:ca:b6:03:
                    1f:dd:de:e0:63:06:19:5b:5c:f5:2d:e0:75:28:61:
                    98:53:c4:8a:8d:4d:3d:aa:2b:6a:59:38:5b:13:52:
                    6d:68:e1:88:f1:36:e4:6c:3b:13:a4:e3:50:f8:9e:
                    a2:ad:d9:f9:ae:68:d8:6f:25:e1:44:59:9f:95:21:
                    20:90:a4:47:c5:36:94:2a:e7:c5:dd:7f:f5:36:87:
                    93:52:eb:9b:bf:36:c2:5a:0a:6f:36:92:7c:51:f0:
                    75:2d:ab:29:af:cd:13:1c:78:bb:80:00:52:45:64:
                    d9:1f:42:03:92:36:51:41:be:5d:60:e1:45:b5:68:
                    85:99:da:82:9c:fe:dd:89:36:b3:aa:0b:8f:cb:ca:
                    59:82:d0:74:4e:de:1f:12:df:05:6b:78:1a:35:41:
                    8f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:01:34:48:7A:43:3C:04:A9:57:F2:5A:13:1A:81:3A:E6:47:CD
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3332203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:73:cb:44:57:7a:6a:26:c3:29:92:51:08:26:25:61:12:
         15:4e:3b:9c:08:2d:01:5a:79:22:89:f2:63:a7:f2:0b:73:af:
         65:f4:bb:13:e0:e3:10:78:f3:08:8b:a2:28:66:3c:aa:17:06:
         e6:cd:5f:df:9a:41:d6:0b:42:d7:4d:83:be:21:ea:60:c1:ed:
         c7:10:dd:4b:96:f9:78:b7:87:26:07:8a:86:ad:ac:b6:fe:62:
         fd:7d:88:14:9d:b0:83:07:cd:1d:cf:65:8c:cd:7b:e4:e4:b0:
         87:0b:b5:ef:95:1d:7c:85:a2:ef:f0:81:36:4c:c6:b9:96:f2:
         7f:31:ea:7c:af:14:66:db:82:f0:37:d9:de:49:9f:cb:e6:dd:
         26:63:f3:fa:2c:a6:5a:36:61:18:f2:69:03:7c:98:3c:3f:c7:
         c4:56:8c:c0:15:ce:75:fe:33:ca:b4:cc:57:9a:73:89:df:d3:
         69:96:01:a0:e2:ac:9b:62:a6:83:3a:f7:52:14:43:ba:43:29:
         ed:80:10:91:99:46:d8:44:c8:65:ca:13:a8:b4:87:eb:c2:ad:
         29:7f:ff:2b:fd:e4:76:b2:c7:ff:d9:1e:67:ce:a7:2d:9d:a1:
         3e:62:7d:e5:74:f9:e1:6a:24:8a:70:f6:ac:bc:0d:41:b9:2e:
         e6:de:1b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:16:16 2026 by rpki-client