Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
File:                     323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (raw, json)
Hash identifier:          ZV+noFTPIQ+J/lIiAPeujpCr5ubJJ0yh9hPx9nnWckY=
Subject key identifier:   04:D8:17:D0:DE:3B:AF:85:45:D5:93:73:E8:BC:4C:DB:EC:B3:F4:6F
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       5D5B70DBAD6AE396F9F65E7735DD0F5A70A316EF
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
Signing time:             Thu 13 Aug 2026 20:51:05 +0000
ROA not before:           Thu 13 Aug 2026 20:46:05 +0000
ROA not after:            Thu 12 Aug 2027 20:51:05 +0000
asID:                     262403
IP address blocks:        2804:3e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5b:70:db:ad:6a:e3:96:f9:f6:5e:77:35:dd:0f:5a:70:a3:16:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Aug 13 20:46:05 2026 GMT
            Not After : Aug 12 20:51:05 2027 GMT
        Subject: CN=04D817D0DE3BAF8545D59373E8BC4CDBECB3F46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:bf:67:a0:15:86:c2:e5:ba:73:19:73:96:
                    08:86:56:00:f7:62:3a:c5:15:90:08:d8:ea:fd:16:
                    36:b2:18:a3:3d:c5:80:0d:69:61:ee:7c:33:56:12:
                    8d:9b:4a:cf:0e:77:37:62:a2:13:09:fc:16:85:37:
                    fb:ee:c8:21:88:a3:da:f5:c7:9a:b9:87:e7:6f:f0:
                    51:98:ea:56:20:b8:6f:11:11:46:30:e4:67:1e:13:
                    c1:92:87:6d:9f:7f:e7:3a:79:ac:61:ea:b5:27:40:
                    04:84:8d:ac:3d:8d:b4:4d:5f:fb:97:1c:84:f1:53:
                    9a:56:ab:4f:fd:6b:af:41:4a:ac:54:dc:2e:dd:a7:
                    27:b4:b1:ce:f8:d2:53:9d:5a:74:11:54:87:f9:c9:
                    53:8c:13:b8:a1:b4:b5:84:0b:f7:42:50:a6:85:7d:
                    9e:72:bf:e4:9a:23:13:3f:e2:ca:58:84:ef:27:01:
                    60:56:56:9d:15:6a:c3:d4:9f:fe:61:be:68:fa:6b:
                    0c:3c:62:e2:11:1b:c5:c7:76:ea:ba:30:aa:00:76:
                    65:c4:85:42:ed:73:4a:3b:c5:ed:ca:04:bf:52:e8:
                    73:b1:4e:f1:20:53:45:28:13:2f:9f:dc:21:80:ce:
                    ab:b6:76:57:0d:38:5d:62:4c:6c:69:c1:61:e3:ba:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:17:D0:DE:3B:AF:85:45:D5:93:73:E8:BC:4C:DB:EC:B3:F4:6F
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:13:0f:a9:d5:63:91:d2:a6:d3:7c:c0:ad:fb:8b:c7:33:
         27:ea:86:8d:f6:09:2e:17:0e:2f:01:23:85:4d:9f:78:5e:e3:
         fb:86:2b:e4:b6:b4:1a:21:2f:bd:bf:bf:1b:eb:db:f8:11:1d:
         63:35:bd:f6:82:43:33:48:3e:cc:3b:d5:f5:5f:0d:49:b2:ec:
         43:50:52:69:b3:4b:cc:4f:d0:57:4e:e8:c3:f1:93:a1:b4:40:
         a5:89:8a:c4:20:fd:c8:76:25:9f:6c:0e:6c:ae:58:ca:7f:73:
         7c:9d:f0:56:53:55:a4:f8:36:b4:fe:ef:33:83:86:c2:95:80:
         eb:f3:ec:bf:c6:2c:96:2f:98:b2:98:69:b5:96:5b:a1:0a:bd:
         7b:13:3c:3d:4e:a5:9c:5a:3c:e7:3f:2b:06:64:94:ed:57:2e:
         24:a5:59:63:ea:e5:fe:52:14:df:7a:a7:1d:b7:92:1f:47:7d:
         78:15:5c:c7:71:43:0e:1e:1d:ab:10:33:aa:36:14:1b:e1:21:
         5f:e7:7b:84:56:3e:aa:d3:15:6e:39:01:3f:aa:31:20:35:ad:
         60:de:69:86:95:43:b4:39:9f:6a:01:1b:6f:29:5f:cd:e2:4c:
         1a:d7:d9:2a:ca:ad:45:65:0a:4d:89:12:5c:53:1a:a4:a9:82:
         fb:53:ed:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:17:27 2026 by rpki-client