Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/323830343a3130343a3a2f33322d3438203d3e20323632363835.roa
File:                     323830343a3130343a3a2f33322d3438203d3e20323632363835.roa (raw, json)
Hash identifier:          82QitICiZcHPSE5TkUz1cBAE0ly573V/O4aCwqe+U9o=
Subject key identifier:   22:7B:07:67:E5:FF:C2:3B:F8:69:73:C9:92:8C:BB:49:6C:B7:52:22
Certificate issuer:       /CN=D092506534967FD958F42A34B4B7FF755DACEA03
Certificate serial:       29E77387B5C57F38DC70ADDE3D68E015E8F4F629
Authority key identifier: D0:92:50:65:34:96:7F:D9:58:F4:2A:34:B4:B7:FF:75:5D:AC:EA:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/323830343a3130343a3a2f33322d3438203d3e20323632363835.roa
Signing time:             Tue 28 Jul 2026 19:48:06 +0000
ROA not before:           Tue 28 Jul 2026 19:43:06 +0000
ROA not after:            Tue 27 Jul 2027 19:48:06 +0000
asID:                     262685
IP address blocks:        2804:104::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.crl
                          rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:73:87:b5:c5:7f:38:dc:70:ad:de:3d:68:e0:15:e8:f4:f6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D092506534967FD958F42A34B4B7FF755DACEA03
        Validity
            Not Before: Jul 28 19:43:06 2026 GMT
            Not After : Jul 27 19:48:06 2027 GMT
        Subject: CN=227B0767E5FFC23BF86973C9928CBB496CB75222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:07:6e:68:59:69:25:04:f3:f1:77:9d:06:
                    32:42:07:85:f3:2a:41:b2:e3:8d:0a:c7:b5:73:8e:
                    8f:95:6a:d9:7f:4c:ec:e5:6f:fd:d5:55:9d:25:3c:
                    7d:01:3b:1a:a3:c5:44:cb:3d:34:3e:22:6d:7f:f6:
                    9f:8f:c6:14:fd:cd:42:32:6f:c2:0f:21:38:a8:93:
                    5a:65:4d:6d:41:09:ff:f7:f9:6d:6c:4a:06:ad:dc:
                    8b:02:15:52:3f:3e:a4:30:76:0d:df:49:e2:2c:32:
                    52:b9:58:f5:03:c0:58:e2:d4:02:1e:d8:d6:b3:35:
                    f8:b7:52:45:a7:bb:a2:d3:37:83:8f:bd:17:ab:9f:
                    bb:cd:0a:66:0b:99:72:df:7c:56:23:53:85:c4:df:
                    35:54:e5:8c:97:68:c5:36:18:30:81:64:14:cd:36:
                    ff:bd:ad:ea:ba:7d:b1:7c:e5:be:3e:2c:6a:e4:92:
                    ce:a1:d1:c1:91:fa:39:27:2a:6c:50:63:21:c3:aa:
                    30:cd:68:f3:7d:91:a6:60:0d:f3:b5:e8:e0:72:d7:
                    f1:70:af:7c:24:d7:b1:ad:67:3f:46:36:ec:dc:14:
                    27:bb:d1:1d:69:f2:3b:c6:cc:67:31:1c:27:92:a2:
                    af:ec:fa:3c:60:5d:19:5a:64:c6:74:0e:04:4c:3e:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:07:67:E5:FF:C2:3B:F8:69:73:C9:92:8C:BB:49:6C:B7:52:22
            X509v3 Authority Key Identifier:
                keyid:D0:92:50:65:34:96:7F:D9:58:F4:2A:34:B4:B7:FF:75:5D:AC:EA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/D092506534967FD958F42A34B4B7FF755DACEA03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D092506534967FD958F42A34B4B7FF755DACEA03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A452Xeq5C58ZTBPnVkoE4WZvHKmEVHKNCdyvWjHEQmvF/0/323830343a3130343a3a2f33322d3438203d3e20323632363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:104::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:0b:d8:c6:4b:6a:57:c9:35:f9:91:46:01:da:35:2d:fe:
         74:f6:1b:51:42:e6:da:60:5f:9a:39:88:61:9b:8b:5c:48:de:
         ed:fa:1c:0d:1c:04:6c:07:7d:83:62:99:3d:79:66:04:d8:ae:
         b8:19:e8:52:f2:0c:05:68:ab:2d:1c:2c:c0:a2:dd:b0:9c:ee:
         c5:b9:3a:f4:d9:86:71:86:7c:55:e9:43:36:9a:55:68:82:95:
         05:32:be:2a:30:c5:75:0f:26:a0:ee:ca:d7:ab:a1:7e:42:23:
         b2:8e:dd:7e:cf:c3:0e:fb:0d:16:0b:79:50:b0:d1:c6:ef:ec:
         15:7a:17:7e:72:6c:b5:31:a8:9e:2c:09:a0:53:b3:14:41:f7:
         85:e2:38:55:51:be:d6:25:eb:5f:fa:1e:a6:5b:b3:5c:f5:75:
         28:af:05:4b:75:b9:83:38:40:8a:11:c4:71:85:59:6d:3b:d7:
         08:f6:ac:1a:16:10:26:0f:d5:15:39:a1:04:f3:42:df:75:44:
         63:02:2f:51:15:7e:5f:a2:f0:47:49:57:75:34:5f:89:64:e7:
         0a:10:c3:a9:b9:06:2c:3d:8d:a3:4e:bc:40:39:62:4f:10:1e:
         00:cd:92:7d:dc:ca:7c:91:1a:26:dc:4e:6f:17:ed:dd:7b:e8:
         f4:58:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:33:31 2026 by rpki-client