Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/323830343a393965343a3a2f33322d3438203d3e20323735383131.roa
File:                     323830343a393965343a3a2f33322d3438203d3e20323735383131.roa (raw, json)
Hash identifier:          Nzw4xcrYmcntUiJJ1q57HKQPtKG0Dc5iJ9bp2TTVw6I=
Subject key identifier:   48:29:B5:64:1A:14:DE:D7:D3:9F:B4:F0:2F:AD:82:C3:CA:C8:9C:77
Certificate issuer:       /CN=A2AD844B9233981027FBA1FD6891CA95AC2451E8
Certificate serial:       3D5E544786AF289B0383B9AD42234B95FC30B54D
Authority key identifier: A2:AD:84:4B:92:33:98:10:27:FB:A1:FD:68:91:CA:95:AC:24:51:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2AD844B9233981027FBA1FD6891CA95AC2451E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/323830343a393965343a3a2f33322d3438203d3e20323735383131.roa
Signing time:             Mon 03 Aug 2026 17:08:06 +0000
ROA not before:           Mon 03 Aug 2026 17:03:06 +0000
ROA not after:            Mon 02 Aug 2027 17:08:06 +0000
asID:                     275811
IP address blocks:        2804:99e4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/A2AD844B9233981027FBA1FD6891CA95AC2451E8.crl
                          rsync://rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/A2AD844B9233981027FBA1FD6891CA95AC2451E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2AD844B9233981027FBA1FD6891CA95AC2451E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:54:47:86:af:28:9b:03:83:b9:ad:42:23:4b:95:fc:30:b5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2AD844B9233981027FBA1FD6891CA95AC2451E8
        Validity
            Not Before: Aug  3 17:03:06 2026 GMT
            Not After : Aug  2 17:08:06 2027 GMT
        Subject: CN=4829B5641A14DED7D39FB4F02FAD82C3CAC89C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:de:1c:b8:bd:0d:ee:49:50:1f:c5:ce:90:
                    67:a0:79:8b:4f:1a:08:1b:c4:ac:2c:51:0b:1c:38:
                    97:80:1c:bb:eb:a0:b5:96:76:82:c0:08:be:a2:24:
                    ac:28:ca:13:9b:50:45:7f:8e:4d:80:08:97:fa:e3:
                    68:bc:d2:e1:cd:a4:33:81:f8:40:9c:e0:9b:8e:ee:
                    cc:05:12:76:78:85:06:da:cf:c8:1f:b0:11:da:e9:
                    11:32:fe:a9:e2:a7:58:5a:24:a6:df:ed:84:3a:af:
                    d8:67:c9:9b:40:f6:63:d8:f9:dc:f6:79:42:41:34:
                    54:a1:1e:df:46:fd:04:67:31:3e:50:d5:bd:b8:fb:
                    39:91:34:16:84:e1:79:2a:81:b5:7b:b2:72:13:1d:
                    eb:b7:5b:70:c3:3b:b6:c6:c2:f6:43:57:4e:41:4d:
                    48:d1:01:b1:ca:83:79:95:18:7b:94:fe:f0:bc:f3:
                    43:17:78:49:be:ef:0f:56:58:c2:1e:f6:d4:ba:05:
                    5c:25:f1:76:ea:36:59:9b:5d:c3:92:15:3c:bd:39:
                    28:5d:ab:1b:9e:c6:ce:20:c1:4f:da:d3:5d:8f:9f:
                    27:ae:3d:1c:4d:23:2d:78:5c:c2:33:4f:42:84:87:
                    79:02:ad:69:46:f6:de:ca:1d:12:a0:04:65:b6:cf:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:B5:64:1A:14:DE:D7:D3:9F:B4:F0:2F:AD:82:C3:CA:C8:9C:77
            X509v3 Authority Key Identifier:
                keyid:A2:AD:84:4B:92:33:98:10:27:FB:A1:FD:68:91:CA:95:AC:24:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/A2AD844B9233981027FBA1FD6891CA95AC2451E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2AD844B9233981027FBA1FD6891CA95AC2451E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXDLuWGXgUm3kUtzmp9Ypod316npNd2KY98Rfxbu5Bft/0/323830343a393965343a3a2f33322d3438203d3e20323735383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:99e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:ef:16:dc:3b:dd:02:e2:5f:2d:ff:4b:d0:d9:e4:1d:cf:
         7c:bf:4e:d7:30:86:9c:ce:64:73:a4:21:e9:ad:7c:3b:21:10:
         4b:05:30:0a:fe:68:40:a5:9c:93:6d:b6:1b:10:b9:31:f6:85:
         94:f1:54:8e:bc:e1:14:29:9a:76:cb:03:dc:6a:d3:76:6d:6f:
         73:da:d1:0c:f5:28:cc:c5:e6:a8:08:f8:15:61:8f:54:43:06:
         70:67:0a:03:bc:cc:7e:87:09:1b:e3:52:04:22:5b:f2:e9:c0:
         79:83:d8:23:d3:34:ec:8d:01:c3:a8:f0:05:52:e3:7e:48:3e:
         9d:52:b0:11:cf:f0:24:ac:e7:54:c0:d0:c2:20:f9:b6:7e:12:
         e1:97:2e:72:79:78:eb:c4:a9:99:6e:97:95:ea:22:74:f8:9a:
         c0:01:41:16:93:de:4c:5e:f8:76:9b:f7:14:8d:a3:b6:a4:23:
         a7:4f:87:7d:5f:4d:31:6a:d9:02:7e:9a:32:6a:51:30:3f:2c:
         8a:28:9a:07:7f:94:85:0c:fa:0e:56:e4:5b:27:47:88:3f:21:
         e3:28:18:21:16:20:f4:7c:fa:4a:92:5b:c0:a8:02:4c:e2:4b:
         9d:ce:fb:34:f8:49:1b:0a:72:22:b1:3a:8e:2c:5e:4e:33:9a:
         68:17:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:51:25 2026 by rpki-client