Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/323830343a34383a3a2f33322d313238203d3e203533303531.roa
File:                     323830343a34383a3a2f33322d313238203d3e203533303531.roa (raw, json)
Hash identifier:          C+CBa5rvH3OejTyL8iymrvDlOfM1feUO8bbpEhdMfnQ=
Subject key identifier:   9B:28:80:2E:AC:48:84:1D:2A:E3:4D:39:31:55:0F:9B:7D:64:10:2D
Certificate issuer:       /CN=22FA20F42F9104E17D3D6537BD5683F008769B64
Certificate serial:       481C33ACC56986F4D8530501235234624AC254EC
Authority key identifier: 22:FA:20:F4:2F:91:04:E1:7D:3D:65:37:BD:56:83:F0:08:76:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA20F42F9104E17D3D6537BD5683F008769B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/323830343a34383a3a2f33322d313238203d3e203533303531.roa
Signing time:             Mon 10 Aug 2026 19:34:15 +0000
ROA not before:           Mon 10 Aug 2026 19:29:15 +0000
ROA not after:            Mon 09 Aug 2027 19:34:15 +0000
asID:                     53051
IP address blocks:        2804:48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/22FA20F42F9104E17D3D6537BD5683F008769B64.crl
                          rsync://rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/22FA20F42F9104E17D3D6537BD5683F008769B64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA20F42F9104E17D3D6537BD5683F008769B64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 06:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1c:33:ac:c5:69:86:f4:d8:53:05:01:23:52:34:62:4a:c2:54:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22FA20F42F9104E17D3D6537BD5683F008769B64
        Validity
            Not Before: Aug 10 19:29:15 2026 GMT
            Not After : Aug  9 19:34:15 2027 GMT
        Subject: CN=9B28802EAC48841D2AE34D3931550F9B7D64102D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:e7:07:7e:8d:29:f1:c7:d1:45:a0:77:38:
                    19:1c:b2:90:d0:89:e3:45:f4:29:2d:2b:e2:b3:dd:
                    f7:88:2c:1a:26:5d:13:66:32:36:16:e1:da:aa:9c:
                    fc:dc:59:40:f5:d8:a8:91:a9:89:3d:b5:83:01:de:
                    ba:ac:48:46:55:27:90:4d:fa:36:2e:37:41:ae:c8:
                    13:e9:79:56:09:4d:48:ba:91:54:b4:26:36:1e:15:
                    6b:12:5d:c6:73:fb:71:cd:62:51:52:e1:87:3e:75:
                    be:5b:4a:8f:56:7b:90:9c:00:e9:67:bc:e9:78:8e:
                    14:ed:8d:29:c2:69:1c:3c:f3:16:85:ef:0a:1e:5c:
                    37:d4:56:61:21:74:5a:bd:a3:e5:00:de:a4:56:e7:
                    c3:53:14:75:42:31:7e:84:a2:f5:3a:0d:9a:cc:dc:
                    bf:2e:39:f8:bd:5e:b8:c9:7a:c3:6e:ef:a3:fc:00:
                    55:12:50:de:e5:41:10:e8:65:57:cd:66:a9:cf:fd:
                    b2:0e:06:b3:61:73:36:b6:b7:2b:78:1e:0d:07:3c:
                    ee:73:07:25:a8:eb:0d:68:36:9d:98:c9:81:3e:ab:
                    56:26:4f:75:45:2d:25:ac:9b:8e:5d:3a:f7:81:99:
                    7f:ae:f5:31:0a:2f:58:85:6a:f2:02:dd:ba:a1:32:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:28:80:2E:AC:48:84:1D:2A:E3:4D:39:31:55:0F:9B:7D:64:10:2D
            X509v3 Authority Key Identifier:
                keyid:22:FA:20:F4:2F:91:04:E1:7D:3D:65:37:BD:56:83:F0:08:76:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/22FA20F42F9104E17D3D6537BD5683F008769B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22FA20F42F9104E17D3D6537BD5683F008769B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWuHiEcSoS1S6YEqkXpGqUimZMHAwn5HkweafX3f52r6/0/323830343a34383a3a2f33322d313238203d3e203533303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:6b:90:09:06:1b:dd:24:32:62:44:ad:98:2f:27:4b:ff:db:
         81:66:2f:8d:03:90:23:4e:7b:3c:1f:08:b5:8e:17:82:1d:8c:
         ea:6a:91:91:43:90:ec:17:c5:35:35:44:9f:4d:a0:03:2a:d7:
         04:08:7a:fc:38:02:ae:75:e8:35:26:02:63:9d:fc:73:12:1f:
         15:5f:24:1d:c6:16:ae:ed:9b:fa:25:ee:aa:1c:0e:b3:23:4a:
         30:0d:d3:77:ca:25:2a:e3:4a:9b:08:d7:d4:38:f5:eb:0b:e4:
         09:75:13:f5:30:c2:e5:18:ee:de:26:c3:e9:2a:86:94:47:34:
         20:9e:c8:bb:2f:9f:e2:ea:6c:2e:a3:74:64:82:8d:b7:ce:95:
         10:48:1a:99:3c:73:5b:41:3c:75:91:7e:92:ec:83:e8:ff:3d:
         91:4e:83:53:34:ae:be:00:bd:eb:55:7c:9a:41:d9:63:91:56:
         f7:e3:9d:d5:97:72:5d:51:32:a9:c5:de:a5:6d:c5:6b:3c:92:
         3b:68:9f:84:68:2c:25:50:35:df:42:2f:8e:aa:71:04:34:79:
         c0:9b:9e:ba:5c:d2:4f:92:d2:aa:64:aa:14:25:1b:8f:21:d0:
         a1:49:f2:d5:38:e3:81:20:81:cb:60:ae:cf:82:41:ce:bb:79:
         eb:5f:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:19:45 2026 by rpki-client