Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d313238203d3e20323636323136.roa
File:                     323830343a336338303a3a2f33322d313238203d3e20323636323136.roa (raw, json)
Hash identifier:          JE9aWnYNeKc57FeQY97xKi+NnHtT5ZM5ID5s0dPwRy0=
Subject key identifier:   2D:12:99:96:5B:22:91:3A:5F:48:EE:F7:F9:57:0D:3E:0E:32:7A:90
Certificate issuer:       /CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
Certificate serial:       527F39DB62F71C8743D46F9A2612BA175B47444A
Authority key identifier: 8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d313238203d3e20323636323136.roa
Signing time:             Tue 19 May 2026 16:59:19 +0000
ROA not before:           Tue 19 May 2026 16:54:19 +0000
ROA not after:            Tue 18 May 2027 16:59:19 +0000
asID:                     266216
IP address blocks:        2804:3c80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl
                          rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 01:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7f:39:db:62:f7:1c:87:43:d4:6f:9a:26:12:ba:17:5b:47:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD
        Validity
            Not Before: May 19 16:54:19 2026 GMT
            Not After : May 18 16:59:19 2027 GMT
        Subject: CN=2D1299965B22913A5F48EEF7F9570D3E0E327A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:44:96:83:39:1f:01:bb:53:b5:d6:b1:5d:c0:
                    ad:fc:10:fd:5b:8a:9c:eb:8d:07:d5:5c:97:69:0d:
                    4b:83:0a:a6:cc:ca:a6:74:0f:38:18:99:0c:bf:7b:
                    8e:56:35:78:f1:ca:41:34:fa:d3:9f:56:b3:4a:3c:
                    47:bb:0c:f0:1a:4b:15:10:69:1b:62:e7:b1:2b:29:
                    c6:45:e5:e2:5c:3a:ff:d5:a8:0b:ae:8f:87:39:8c:
                    0c:fd:78:2b:e7:b6:91:ca:b3:ef:ba:a9:c7:6f:c2:
                    75:0d:59:a1:1f:ce:3b:83:a0:f2:f4:c6:3e:32:85:
                    2c:7d:1d:b5:15:01:b4:7a:0b:19:61:4e:fa:37:f6:
                    f7:63:8e:ce:ae:3f:e4:ec:b2:51:67:3b:7f:b3:08:
                    a8:b0:5f:bd:ab:ea:43:58:c5:ee:26:ef:35:81:82:
                    2a:cb:67:35:15:b6:6a:1e:9d:13:3a:12:1c:24:2a:
                    f2:e8:12:20:1b:6f:e0:6c:84:1a:cd:c5:59:c0:35:
                    b3:72:ad:eb:ac:99:eb:77:55:7a:fd:2a:ef:f0:ee:
                    16:4f:f0:4e:d3:52:06:85:d3:5e:44:8b:24:62:d7:
                    8b:c1:29:99:64:fb:e6:c5:27:78:64:3d:10:ba:f6:
                    79:c9:c1:07:50:09:af:0d:e0:82:b5:53:da:9f:d0:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:12:99:96:5B:22:91:3A:5F:48:EE:F7:F9:57:0D:3E:0E:32:7A:90
            X509v3 Authority Key Identifier:
                keyid:8D:E1:EB:F4:EE:33:44:5E:39:8B:F5:5C:7B:FB:B0:54:E8:54:6F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE1EBF4EE33445E398BF55C7BFBB054E8546FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nXd7ng5DAKV78tnHVxwJAqDLLLhwvYnTo7E8SFvT6rV/0/323830343a336338303a3a2f33322d313238203d3e20323636323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:6a:d2:e3:75:f4:58:00:20:d8:ca:bc:65:37:61:ae:cc:fa:
         ef:99:ab:ed:40:d0:9f:66:92:ed:6f:80:d0:49:ac:f7:e0:be:
         32:4e:de:c3:33:e4:7d:b0:6c:71:f1:f4:82:40:27:e8:01:3d:
         f7:c5:81:2d:1c:0d:75:4a:5a:7a:a7:d8:1e:0f:c2:32:d0:be:
         96:67:cc:b2:e5:3b:c3:93:06:39:37:d8:44:8e:b8:2f:38:c1:
         c0:01:73:6f:e1:d1:90:aa:47:bb:e0:7d:58:22:b3:8c:71:3b:
         3f:d4:40:05:1e:d6:60:dc:51:b3:d6:b5:59:df:45:92:e3:6e:
         ae:3e:75:01:0a:90:42:ea:6c:a1:6f:46:ca:d4:01:49:25:b0:
         af:34:20:03:d6:14:20:4c:fb:6b:bb:02:ed:4e:22:92:eb:9e:
         2b:0f:ac:49:f9:9c:ec:86:c9:3a:bb:bc:89:05:98:84:6d:66:
         21:2e:43:c3:11:bf:7a:66:a0:bc:62:b4:fe:10:8f:dd:c2:e9:
         f1:32:be:ed:c3:99:98:90:e9:50:8b:a7:05:09:de:e8:b0:29:
         23:25:89:5b:0e:54:46:97:0a:ec:34:c2:8f:68:5d:90:84:f0:
         74:7d:6e:b4:2e:44:a0:13:65:43:87:fb:54:4a:be:23:76:c2:
         e0:37:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:26:33 2026 by rpki-client