Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f34382d3438203d3e203238313339.roa
File:                     323830343a3939343a3a2f34382d3438203d3e203238313339.roa (raw, json)
Hash identifier:          6rqUi+Qw+4v26I/9+zzV9ydCXA9mLDj03TJKeZO81vA=
Subject key identifier:   03:D4:FF:3F:CF:23:E8:66:0A:E9:5E:9E:C5:71:FD:A7:A4:03:30:D3
Certificate issuer:       /CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
Certificate serial:       253A42018921F7211ED1322A913A8224B4D8E492
Authority key identifier: 8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f34382d3438203d3e203238313339.roa
Signing time:             Fri 14 Aug 2026 18:26:07 +0000
ROA not before:           Fri 14 Aug 2026 18:21:07 +0000
ROA not after:            Fri 13 Aug 2027 18:26:07 +0000
asID:                     28139
IP address blocks:        2804:994::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl
                          rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3a:42:01:89:21:f7:21:1e:d1:32:2a:91:3a:82:24:b4:d8:e4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCB7831617AC9209CC97DB36614C6B05759A03B
        Validity
            Not Before: Aug 14 18:21:07 2026 GMT
            Not After : Aug 13 18:26:07 2027 GMT
        Subject: CN=03D4FF3FCF23E8660AE95E9EC571FDA7A40330D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:2d:b9:28:52:64:00:b5:25:0f:db:d3:6e:
                    da:66:de:2c:a0:7d:21:8f:cd:08:c6:c4:ef:7a:2c:
                    82:70:8e:5e:ba:ff:62:7b:03:9e:14:53:6e:76:e5:
                    10:e3:cb:0e:b9:e7:f1:73:07:31:82:e2:a8:0a:ca:
                    a1:17:8e:4f:b4:66:1d:4a:3a:d7:f7:6e:7f:85:a1:
                    59:1e:04:94:f7:57:c0:c1:6f:d0:f7:52:3f:4f:a1:
                    1b:98:62:3d:fb:19:7d:a2:0d:bb:e0:74:ef:e5:50:
                    8c:17:83:57:ca:0d:cc:12:ff:dc:62:06:46:01:84:
                    85:e0:55:0c:d3:5c:50:4b:8d:5d:54:9f:37:9c:ac:
                    c9:44:4d:52:3c:ae:f5:78:4e:26:78:ef:80:89:fb:
                    af:5c:43:00:fe:75:02:07:37:78:b6:60:a6:d0:ee:
                    d2:ae:2b:93:8d:3a:fe:8b:55:d7:2b:29:57:dd:9e:
                    0c:67:81:c2:13:c9:71:b4:66:ec:2e:0d:d8:80:41:
                    f6:3c:aa:f6:19:9c:4f:d9:98:0a:c4:2e:7d:4d:8d:
                    24:f9:1c:63:7e:24:08:c2:4d:c2:2f:db:cc:fc:06:
                    27:07:b7:e2:1c:df:0b:28:49:5f:51:97:fc:bd:56:
                    6d:48:79:5b:f9:47:5d:eb:5e:00:c1:a7:b8:30:7a:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:FF:3F:CF:23:E8:66:0A:E9:5E:9E:C5:71:FD:A7:A4:03:30:D3
            X509v3 Authority Key Identifier:
                keyid:8D:CB:78:31:61:7A:C9:20:9C:C9:7D:B3:66:14:C6:B0:57:59:A0:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/8DCB7831617AC9209CC97DB36614C6B05759A03B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCB7831617AC9209CC97DB36614C6B05759A03B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/323830343a3939343a3a2f34382d3438203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:994::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:0e:f1:97:8b:49:91:44:35:f7:f3:45:b4:50:19:86:41:
         07:80:52:3c:9a:88:22:12:8f:5d:da:60:9d:6b:06:0c:78:18:
         3f:99:2a:77:95:0e:49:6f:75:cd:57:75:17:e7:e6:28:dc:3f:
         4f:44:19:94:b3:91:f8:d8:7f:ba:d7:40:b2:f3:be:f2:48:9c:
         59:f5:8c:e3:1e:2a:32:dc:ab:9d:b7:a8:e9:1b:6d:d1:ea:ab:
         de:34:45:16:22:63:9c:b0:07:6f:3b:dc:21:92:7d:70:d3:c3:
         59:9f:e3:1c:b1:d3:a0:fc:5b:e2:84:ea:a5:7a:1c:e1:70:52:
         4a:c3:6a:52:12:3c:6b:f1:ea:e5:8a:f9:61:3a:0e:77:bd:e0:
         16:69:65:f4:e6:db:89:03:28:37:f0:cb:48:8c:a4:74:d2:43:
         b1:57:d1:40:e6:20:97:2f:16:9b:66:01:07:ae:fe:f2:fb:90:
         41:6e:30:92:ed:86:fb:b2:69:27:b1:d0:cd:33:e6:a8:10:2e:
         ab:44:05:57:36:2c:8a:0a:56:65:a6:67:a4:2d:9c:85:d8:13:
         51:ed:18:85:05:8b:82:93:16:aa:64:66:dd:5b:d7:96:fa:6c:
         3b:58:d9:ed:9c:95:d6:4e:09:50:2c:0d:47:60:16:3c:24:e2:
         1d:bd:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:29:22 2026 by rpki-client