Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323430303a3a2f33392d3339203d3e20323636323936.roa
File:                     323830343a333539633a323430303a3a2f33392d3339203d3e20323636323936.roa (raw, json)
Hash identifier:          46fmphqvWkXXHtRgSQ3G/eEB0JG8ZSs+pZfvzYsj7HQ=
Subject key identifier:   5A:4B:9E:7F:3E:5A:F4:A4:06:16:01:C1:07:61:F9:E3:2D:70:22:08
Certificate issuer:       /CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
Certificate serial:       0EA348354277B8462D0A036EB5017AFF00F4D176
Authority key identifier: CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323430303a3a2f33392d3339203d3e20323636323936.roa
Signing time:             Mon 10 Aug 2026 13:27:28 +0000
ROA not before:           Mon 10 Aug 2026 13:22:28 +0000
ROA not after:            Mon 09 Aug 2027 13:27:28 +0000
asID:                     266296
IP address blocks:        2804:359c:2400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a3:48:35:42:77:b8:46:2d:0a:03:6e:b5:01:7a:ff:00:f4:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0
        Validity
            Not Before: Aug 10 13:22:28 2026 GMT
            Not After : Aug  9 13:27:28 2027 GMT
        Subject: CN=5A4B9E7F3E5AF4A4061601C10761F9E32D702208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:d8:41:1b:38:f4:80:d1:58:5c:6c:26:26:
                    bf:d8:06:c3:57:2c:c4:d0:26:5f:9f:d9:eb:1d:95:
                    ca:62:65:f6:5b:a1:b7:0b:7d:bc:5d:91:ea:b6:b5:
                    9f:b8:b7:a5:ff:68:a9:b6:56:fd:1b:81:72:d9:6b:
                    ec:d4:ec:80:f0:7d:c9:f6:05:7c:41:1a:2d:b6:cf:
                    67:36:47:e8:3b:7d:e3:63:80:40:67:ec:0f:b4:87:
                    3e:cf:94:ef:3b:f4:42:34:a7:ff:d9:2c:bd:25:2e:
                    ef:9f:d3:8b:64:bb:18:e3:aa:0f:c7:d8:ce:95:28:
                    8e:6d:20:2c:29:1e:dd:17:bd:6a:8a:07:60:fe:48:
                    e3:ba:7f:8b:77:ee:44:7b:52:37:cc:5c:49:b5:e1:
                    32:7b:cb:ca:87:97:86:c8:13:5e:79:84:23:3a:8c:
                    db:9a:79:22:6c:00:53:ba:06:98:83:77:79:81:54:
                    89:a7:9c:46:b5:13:d4:1c:f3:d2:56:7f:63:d4:8c:
                    33:9c:a8:4a:40:f6:91:42:8c:13:c3:9d:bb:c5:7b:
                    8d:35:5a:37:b3:61:59:9d:18:94:3f:61:00:b2:a4:
                    4d:94:9d:aa:9c:43:d4:21:1c:7e:11:7b:d0:f6:1e:
                    f3:0b:d1:61:b9:d3:9c:f9:0b:53:fe:3b:2d:8b:73:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4B:9E:7F:3E:5A:F4:A4:06:16:01:C1:07:61:F9:E3:2D:70:22:08
            X509v3 Authority Key Identifier:
                keyid:CC:D8:EE:E3:D8:BF:89:5C:5A:66:7B:14:D3:FE:EB:01:58:F3:EE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCD8EEE3D8BF895C5A667B14D3FEEB0158F3EED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/0/323830343a333539633a323430303a3a2f33392d3339203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:359c:2400::/39

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:7a:87:1e:f0:93:b8:e1:17:aa:34:bd:13:4a:ae:74:ec:
         5c:77:97:3a:d2:49:71:b7:02:9c:6c:dd:29:2c:be:e8:46:60:
         66:fc:c5:e0:87:b7:fb:4b:00:ba:c0:10:0f:94:e0:24:f0:48:
         f4:31:e3:2e:ff:6d:9a:55:4e:65:f5:97:e7:4e:e8:f9:f4:bc:
         0f:62:42:2c:92:96:08:dc:ac:f0:5c:ac:c2:c7:77:43:7a:e1:
         46:39:f5:27:5e:d0:0d:6d:ab:a9:85:4b:76:cb:c8:e2:c5:72:
         eb:34:21:59:63:b8:bd:f2:2a:4b:0e:4c:a9:93:b5:54:b8:70:
         1c:53:6c:1e:40:c8:2e:a0:f9:c8:1f:bf:f1:0b:36:44:8d:74:
         f2:b4:0c:0b:b0:91:c5:e5:88:89:ab:7b:1f:76:80:b8:ae:d0:
         03:05:2b:6e:ed:a3:4a:54:b0:5a:e2:c5:67:ec:2c:1f:91:66:
         48:a4:d6:2d:ef:f8:39:14:5a:53:0d:0a:88:2d:b0:87:20:44:
         a4:50:63:ff:ba:eb:a0:57:7b:c0:d1:c2:9e:7b:bd:13:2e:a0:
         40:86:4b:8e:40:f8:1f:84:ff:d3:54:56:b3:d6:30:17:68:ea:
         a1:b7:b6:af:67:c3:1b:bb:fc:35:90:01:85:39:c0:6e:60:e7:
         e9:19:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:00:28 2026 by rpki-client