Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3438203d3e20323730373933.roa
File:                     323830343a373138303a3a2f33322d3438203d3e20323730373933.roa (raw, json)
Hash identifier:          /cnoHZgdUWTcaft/c1KLJ667UIUwF4Yh4h1C7lgkkhg=
Subject key identifier:   04:5F:DD:B4:DC:50:5B:13:BC:F3:6F:BE:FA:62:3F:C8:20:A9:BF:26
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       449CFF9FE6354C1E17746F5623838BA7E171F816
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3438203d3e20323730373933.roa
Signing time:             Tue 04 Aug 2026 17:29:50 +0000
ROA not before:           Tue 04 Aug 2026 17:24:50 +0000
ROA not after:            Tue 03 Aug 2027 17:29:50 +0000
asID:                     270793
IP address blocks:        2804:7180::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9c:ff:9f:e6:35:4c:1e:17:74:6f:56:23:83:8b:a7:e1:71:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Aug  4 17:24:50 2026 GMT
            Not After : Aug  3 17:29:50 2027 GMT
        Subject: CN=045FDDB4DC505B13BCF36FBEFA623FC820A9BF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:c3:09:52:5f:16:78:12:dc:6d:ca:2a:b7:
                    01:ed:30:e0:f8:15:d9:7a:85:51:75:68:92:5a:1f:
                    a3:12:c2:3b:4d:29:0e:1c:ae:9a:52:8e:c8:03:00:
                    bc:55:72:74:0e:a5:98:8c:03:37:e0:93:7b:e5:1c:
                    14:f7:67:5f:49:99:09:ca:6a:89:e4:26:a7:c2:08:
                    c3:ac:86:67:f5:a3:84:3b:c4:35:c5:3b:ae:a3:6b:
                    9c:ce:d6:d2:c7:11:8f:b5:7c:72:b8:df:79:80:dc:
                    4f:fb:e4:e0:30:4c:c5:72:4f:f7:25:ff:dd:34:6b:
                    5a:4f:24:e9:ac:f0:fa:5a:14:5b:30:06:df:ac:eb:
                    59:99:ee:a5:c7:65:a5:11:ce:09:a7:e6:ad:1b:32:
                    78:75:84:1b:8f:0f:2e:d4:8e:09:b1:ff:ba:94:db:
                    3f:64:43:ac:b0:5f:bf:fc:fb:29:4a:9c:95:05:cf:
                    77:86:3e:b9:e0:cc:17:0f:de:b2:57:43:60:ab:0a:
                    b7:91:c3:40:a6:48:5b:28:36:bd:84:2e:ee:e1:bc:
                    27:03:b7:75:f7:17:d1:10:7b:1a:49:a2:b0:3a:58:
                    59:33:6c:79:7e:b5:23:1b:3a:70:d8:1d:73:cb:b7:
                    4a:6c:0c:68:a6:4e:ec:e5:f5:ae:61:7a:c6:4f:f4:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:DD:B4:DC:50:5B:13:BC:F3:6F:BE:FA:62:3F:C8:20:A9:BF:26
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a3a2f33322d3438203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:68:7d:f1:17:98:ac:de:01:48:34:42:48:03:ba:53:4f:96:
         b5:e2:ed:dc:08:fe:a3:bb:1e:57:86:44:ee:9f:6c:db:c9:16:
         ae:57:24:bf:37:92:0a:eb:16:f6:88:d0:f0:05:8e:34:be:b5:
         28:86:10:b3:82:02:65:36:b0:4e:b7:2b:6f:70:83:20:1e:91:
         c3:2e:b6:b4:ae:8e:d8:f1:2d:df:9d:e5:99:1f:09:6f:a9:ac:
         de:30:23:49:07:af:7e:31:7b:20:4e:e9:57:ea:53:84:d9:8d:
         05:17:a2:d3:12:74:5e:cb:f8:dc:25:c9:4b:13:ca:96:93:a9:
         65:e1:b4:08:8c:2b:5e:6e:20:a3:f2:5b:72:5e:3e:83:98:42:
         36:e8:b9:ce:e7:5c:68:00:0f:89:f1:f3:32:b2:b2:02:35:6a:
         94:0e:e8:cd:bf:62:8b:7f:6d:84:b1:d9:b4:57:3d:4d:15:a7:
         06:a1:05:27:0c:bf:07:b5:ff:95:59:42:39:4f:55:0d:ca:53:
         87:de:fd:08:3c:f8:29:6a:97:5d:66:18:1c:df:a2:57:ae:e5:
         3b:7d:74:3b:3f:dd:00:85:47:5f:df:4a:a1:a3:c3:aa:38:56:
         59:6a:fe:fb:fa:53:30:fc:f7:56:78:8c:54:2a:a1:76:05:10:
         6b:4e:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:28 2026 by rpki-client