Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa
File:                     323830343a323236343a3a2f33322d313238203d3e20323634303936.roa (raw, json)
Hash identifier:          kHKbCcAkDNKSSyQ9zJIXJDHLtM0BQMA66zz94RCYLFs=
Subject key identifier:   18:A8:5E:0E:D4:EB:8A:00:32:5F:0E:E4:90:6A:AE:FC:C3:4A:D4:DD
Certificate issuer:       /CN=1999AF3E0108475959EA491F7311F8F0DFE0CEFA
Certificate serial:       08794DD69349906E7E8F49A7D1F2007457A19DD4
Authority key identifier: 19:99:AF:3E:01:08:47:59:59:EA:49:1F:73:11:F8:F0:DF:E0:CE:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa
Signing time:             Wed 12 Aug 2026 13:16:44 +0000
ROA not before:           Wed 12 Aug 2026 13:11:44 +0000
ROA not after:            Wed 11 Aug 2027 13:16:44 +0000
asID:                     264096
IP address blocks:        2804:2264::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.crl
                          rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:79:4d:d6:93:49:90:6e:7e:8f:49:a7:d1:f2:00:74:57:a1:9d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1999AF3E0108475959EA491F7311F8F0DFE0CEFA
        Validity
            Not Before: Aug 12 13:11:44 2026 GMT
            Not After : Aug 11 13:16:44 2027 GMT
        Subject: CN=18A85E0ED4EB8A00325F0EE4906AAEFCC34AD4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f6:59:4a:6d:e3:05:7e:cd:ee:94:c8:4e:f8:
                    ef:3f:e9:71:a9:54:27:84:3b:ef:7e:30:a7:94:35:
                    72:14:52:a3:b2:55:3f:00:13:00:55:76:05:92:bc:
                    84:95:8f:da:d7:e4:5c:d6:86:db:92:82:6e:ba:21:
                    26:e0:07:df:20:90:fa:7a:4c:57:41:ac:50:a7:f6:
                    aa:bc:1c:b6:aa:c3:6d:5c:11:09:d8:f7:c8:71:bd:
                    e5:df:68:ca:2c:a8:b5:20:81:bf:e5:37:06:e0:a1:
                    9f:b9:f4:99:c1:ee:26:87:c4:a7:da:aa:6c:16:82:
                    60:46:41:19:5a:97:73:ce:90:09:ca:cc:7b:8f:b3:
                    ae:94:3c:35:70:f1:85:0e:5c:f0:aa:2a:7d:a9:0d:
                    0e:79:f4:17:ac:74:51:f1:fa:57:cf:dc:b2:52:d3:
                    c7:85:5a:1c:a1:6a:53:06:47:2c:22:cb:80:fc:07:
                    06:7e:c3:21:6f:71:8b:55:8f:9b:65:73:c4:13:f0:
                    89:5b:9b:5b:45:6e:18:45:00:5b:46:d7:16:29:d1:
                    ce:69:6e:be:33:fb:ea:4a:2e:38:45:1a:c3:00:d9:
                    5c:fa:13:8b:c5:81:cb:61:4d:8b:2b:88:69:ac:01:
                    d9:d1:f3:ad:9d:9f:cd:fb:f9:74:55:47:76:76:7c:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A8:5E:0E:D4:EB:8A:00:32:5F:0E:E4:90:6A:AE:FC:C3:4A:D4:DD
            X509v3 Authority Key Identifier:
                keyid:19:99:AF:3E:01:08:47:59:59:EA:49:1F:73:11:F8:F0:DF:E0:CE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1999AF3E0108475959EA491F7311F8F0DFE0CEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AL92XaeTQdgn7pZTkYBEhuRAE4LQ5XaeUiVzVdJdzGpt/0/323830343a323236343a3a2f33322d313238203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2264::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:9c:87:4a:b4:82:71:02:c7:74:ae:bc:50:47:96:37:4a:
         ef:9b:b2:b5:7b:4f:e9:bc:f6:96:79:99:e8:49:c6:ec:df:90:
         81:7f:be:d7:5e:61:75:11:42:93:b0:00:2c:e6:1d:9c:dd:c3:
         d3:b6:19:2e:ea:40:28:c7:03:32:37:8d:45:fd:cf:36:e4:2f:
         68:c0:2a:cc:36:ef:e6:74:45:e6:af:64:f3:2e:8d:79:b1:35:
         23:71:10:94:63:86:12:cd:98:fb:88:83:dc:13:09:5e:14:2a:
         26:64:e2:78:0d:67:4d:42:d8:38:0f:69:72:c8:cc:f5:8f:23:
         f4:42:1f:d7:ed:d7:0f:3c:d7:80:75:14:a7:94:a2:18:f3:c1:
         f5:8c:a7:9a:fb:38:38:52:57:cf:c9:4c:1b:4b:42:7f:46:45:
         70:15:74:ae:16:c6:05:9d:7e:43:13:ac:04:27:26:d6:24:ce:
         4d:d3:d1:9b:64:ba:c3:54:8d:e9:71:1f:a7:80:84:48:6b:9b:
         a0:86:c5:c0:7e:c6:6b:48:88:06:c8:f0:85:a4:66:ab:35:31:
         e4:ae:6e:20:41:88:3d:9c:b7:05:93:d1:bc:b1:87:a6:cd:05:
         55:fa:50:37:46:33:02:50:36:68:e2:b3:e8:a6:a2:6e:46:57:
         1a:82:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:23:32 2026 by rpki-client