Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
File:                     323830343a323132383a3a2f33322d3332203d3e20323634353339.roa (raw, json)
Hash identifier:          kSikvZroGA/XryRqnSYXxBmwwi6PYGsy7UVQhL9xKuo=
Subject key identifier:   C0:0C:87:FE:FC:59:2E:40:29:78:22:22:D2:70:A6:0D:1F:5D:69:55
Certificate issuer:       /CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
Certificate serial:       1F2A6BA63E28017095DA98F5BB107DBD7D478725
Authority key identifier: 08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa
Signing time:             Mon 03 Aug 2026 16:54:46 +0000
ROA not before:           Mon 03 Aug 2026 16:49:46 +0000
ROA not after:            Mon 02 Aug 2027 16:54:46 +0000
asID:                     264539
IP address blocks:        2804:2128::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 15:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2a:6b:a6:3e:28:01:70:95:da:98:f5:bb:10:7d:bd:7d:47:87:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4
        Validity
            Not Before: Aug  3 16:49:46 2026 GMT
            Not After : Aug  2 16:54:46 2027 GMT
        Subject: CN=C00C87FEFC592E4029782222D270A60D1F5D6955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:24:82:60:2b:81:e0:93:96:cf:b0:13:0c:
                    e9:6a:f0:c8:74:32:21:37:10:2d:69:aa:f7:55:d1:
                    2a:1a:ba:fe:1a:59:23:a6:cc:f2:54:1d:06:e0:8c:
                    7c:3c:d4:ec:2c:b4:23:1a:66:5a:13:a9:e4:d6:52:
                    a9:64:57:95:fa:c1:35:a3:3d:3f:a4:e6:f8:f2:75:
                    39:60:14:4c:6a:d4:39:b1:b3:a9:bd:5d:b0:89:75:
                    59:97:f1:6d:04:8f:d4:33:2a:38:22:67:22:a0:bc:
                    6a:7c:49:55:02:84:52:80:64:99:33:16:e0:af:d6:
                    87:7d:1a:5b:38:d8:1b:49:9e:ea:ca:ff:c0:61:98:
                    be:e5:c3:7a:3b:29:11:d9:1e:b6:e7:78:56:0e:a9:
                    3c:37:fd:ee:26:86:a9:f5:4d:6b:87:85:f4:69:a7:
                    40:bf:2b:ba:c2:53:1e:8a:c5:f6:c0:8b:57:3a:27:
                    fa:b8:ea:4c:ba:11:f8:e1:08:64:b5:7b:7b:1d:1f:
                    cf:85:a5:fa:41:07:44:37:56:0d:c6:93:6d:d7:78:
                    c8:08:20:eb:bf:73:80:71:6e:0c:b3:d5:d6:7e:4a:
                    b2:5e:f5:e3:f5:a3:27:d3:fc:de:d3:3b:65:32:9e:
                    34:a4:a8:74:72:9d:c0:2e:ef:c7:b4:71:af:df:18:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0C:87:FE:FC:59:2E:40:29:78:22:22:D2:70:A6:0D:1F:5D:69:55
            X509v3 Authority Key Identifier:
                keyid:08:B1:D7:2F:42:6C:63:FA:24:93:BC:63:B6:A7:4B:4F:4B:4E:F6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B1D72F426C63FA2493BC63B6A74B4F4B4EF6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3332203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2128::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:e2:47:24:0f:79:42:81:a5:ff:b6:d4:15:55:ce:1a:a1:
         02:bd:69:75:f7:49:7a:4c:c0:32:46:90:7c:a1:2c:11:68:80:
         90:44:59:93:8b:ce:9c:6c:86:9a:30:52:b8:5a:4b:89:6a:1c:
         81:2a:7f:e8:c8:85:a1:52:5c:d4:48:8d:04:e8:89:ef:2f:31:
         43:83:c2:17:61:df:94:78:d2:80:28:90:9b:4b:a1:c5:ae:3d:
         3c:e0:8b:19:b4:c1:71:db:94:84:34:c2:c6:5a:3a:1b:b7:d9:
         0b:39:59:89:38:f4:3e:9f:3d:32:7d:f0:cc:90:bf:37:da:13:
         3e:51:6f:0e:38:9f:5f:a5:d3:ee:fc:2d:0d:3b:2a:77:2f:16:
         7f:f5:fa:06:1c:8b:ff:8a:3c:33:d9:f2:d3:bf:d1:41:ca:52:
         b8:66:72:b6:50:3e:2e:63:df:29:b8:3b:80:13:53:de:a9:4c:
         a2:62:ee:43:c9:90:83:45:95:f2:65:71:31:8e:fc:43:11:0e:
         bb:38:63:a1:68:48:33:50:69:8d:83:58:a1:de:05:55:8b:77:
         bd:7c:dd:e8:37:1c:46:5d:ce:eb:c7:04:e9:6e:51:97:77:34:
         25:fa:61:2a:96:f5:74:b2:33:63:d9:cc:4f:8b:70:7c:45:76:
         61:eb:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:00:24 2026 by rpki-client