Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a3a2f33322d313238203d3e20323637393537.roa
File:                     323830343a353563633a3a2f33322d313238203d3e20323637393537.roa (raw, json)
Hash identifier:          3RKRIgyTmYurqSCppXaBpFYmu/ypYnlzazx1p2c4ufs=
Subject key identifier:   B0:E9:3E:79:F2:82:74:0E:52:7B:B6:7C:F5:1E:03:57:BE:6A:79:4E
Certificate issuer:       /CN=9DF1D5C3A296E11034EB74E97DA44FE1819480D9
Certificate serial:       11A423C0F81D8AE5F8C886ACD1C90687EEBE6A2C
Authority key identifier: 9D:F1:D5:C3:A2:96:E1:10:34:EB:74:E9:7D:A4:4F:E1:81:94:80:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a3a2f33322d313238203d3e20323637393537.roa
Signing time:             Mon 03 Aug 2026 17:07:31 +0000
ROA not before:           Mon 03 Aug 2026 17:02:31 +0000
ROA not after:            Mon 02 Aug 2027 17:07:31 +0000
asID:                     267957
IP address blocks:        2804:55cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.crl
                          rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a4:23:c0:f8:1d:8a:e5:f8:c8:86:ac:d1:c9:06:87:ee:be:6a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DF1D5C3A296E11034EB74E97DA44FE1819480D9
        Validity
            Not Before: Aug  3 17:02:31 2026 GMT
            Not After : Aug  2 17:07:31 2027 GMT
        Subject: CN=B0E93E79F282740E527BB67CF51E0357BE6A794E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:73:31:83:97:44:48:47:f1:c6:ef:82:16:
                    58:3a:4b:03:fa:d3:4e:9c:d0:26:eb:8f:e4:a5:82:
                    18:74:5d:cf:55:1c:a9:86:8e:ef:f3:53:3f:83:a7:
                    9d:18:8d:0f:ac:cf:26:bc:05:07:e2:95:c1:e4:b9:
                    ec:e8:fb:98:55:88:59:4f:76:8c:b2:3a:4e:8e:a3:
                    51:89:e8:64:34:7e:c4:be:67:60:3d:ec:99:a1:6c:
                    1b:cd:ba:1d:e3:7e:61:aa:e9:35:23:a8:33:ae:a1:
                    40:a3:66:25:7f:a9:59:93:15:4f:23:4f:49:ef:eb:
                    aa:97:16:85:51:f2:10:b6:df:e2:9c:c4:c3:c8:4c:
                    50:85:c0:43:ef:3f:1a:2c:bf:25:f0:6a:8e:5e:13:
                    7e:c9:f1:16:1e:81:0b:ee:b1:65:44:49:ae:df:ab:
                    6a:1e:93:81:e0:0d:a9:ed:c2:59:3a:c0:5a:f7:1a:
                    b6:6e:2d:6c:c2:c6:67:3c:6c:00:4d:b5:54:52:e8:
                    ca:99:ce:44:b9:06:3e:17:62:dd:45:b6:0f:fd:41:
                    e4:63:19:84:c6:59:12:61:92:a9:bf:75:f0:bb:3e:
                    8e:50:dd:54:ba:36:3b:55:58:45:d1:de:22:dc:21:
                    b4:e3:f5:c4:01:9b:c3:9d:f2:ff:dd:da:29:5b:6a:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:3E:79:F2:82:74:0E:52:7B:B6:7C:F5:1E:03:57:BE:6A:79:4E
            X509v3 Authority Key Identifier:
                keyid:9D:F1:D5:C3:A2:96:E1:10:34:EB:74:E9:7D:A4:4F:E1:81:94:80:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DF1D5C3A296E11034EB74E97DA44FE1819480D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2EVMrt1NWZHKPbatdpcMcFhX9yStoozw6N66Gjqbq68/0/323830343a353563633a3a2f33322d313238203d3e20323637393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:55:b5:ca:4d:43:21:ff:37:14:23:aa:31:ef:3a:69:09:
         1e:86:de:d1:3b:44:b7:5d:52:69:ca:1c:4c:73:76:5c:d2:6c:
         93:b1:cc:9d:50:3b:9d:1c:48:a3:a6:a3:5d:84:5a:a9:7d:4f:
         6c:3a:c8:12:96:f9:e5:68:f0:61:ed:f4:45:e9:11:26:97:92:
         ff:c5:29:e1:7d:12:9e:c3:df:32:4c:41:a1:99:66:e8:55:95:
         29:8a:9e:b8:d3:df:f1:15:a0:e9:07:f4:67:c4:69:5e:11:4f:
         f4:cb:15:b6:b4:10:0c:eb:14:80:bb:da:cc:5e:15:14:c3:bb:
         bb:bd:ee:51:e2:c5:9f:3b:c0:52:c9:48:d5:fe:01:0c:bf:a1:
         fb:f4:4c:66:bd:7a:42:2c:8b:a8:8b:06:d7:51:2a:75:de:d3:
         27:c7:69:c3:3e:9c:44:e0:de:04:25:be:d2:06:a6:76:0d:0c:
         33:e1:3d:b7:b9:09:b4:ec:9d:9b:fb:9f:c3:85:71:6e:eb:c8:
         7d:bc:42:f9:3d:40:4a:fd:8b:b8:51:3f:56:22:f9:61:9d:38:
         fd:51:e0:69:4b:55:ef:3a:47:ea:eb:a6:28:54:a0:29:b5:25:
         a6:e0:c3:5e:55:ff:83:80:5f:c8:1b:fb:0c:88:6e:82:11:9e:
         92:37:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:24:32 2026 by rpki-client