Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa
File:                     323830343a356261343a3a2f33322d3332203d3e20323638383630.roa (raw, json)
Hash identifier:          Uic5NxDz589BqSETL7Nz4KB9NWYY0pvV+2muB8JvwkM=
Subject key identifier:   CA:AB:FE:64:ED:D4:D5:C6:54:57:71:A3:4E:07:12:84:4F:83:01:4D
Certificate issuer:       /CN=FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A
Certificate serial:       5569B403623905CC4FFDB842F5A53C6D351113D4
Authority key identifier: FD:06:A6:E2:1F:E7:9C:C2:0B:98:F8:87:0F:BA:44:A2:DB:5F:11:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa
Signing time:             Mon 03 Aug 2026 13:56:11 +0000
ROA not before:           Mon 03 Aug 2026 13:51:11 +0000
ROA not after:            Mon 02 Aug 2027 13:56:11 +0000
asID:                     268860
IP address blocks:        2804:5ba4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 01:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:69:b4:03:62:39:05:cc:4f:fd:b8:42:f5:a5:3c:6d:35:11:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A
        Validity
            Not Before: Aug  3 13:51:11 2026 GMT
            Not After : Aug  2 13:56:11 2027 GMT
        Subject: CN=CAABFE64EDD4D5C6545771A34E0712844F83014D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:26:d2:84:69:23:52:69:73:c7:2e:c0:f5:
                    ec:02:09:f9:51:f3:7c:c3:18:77:ea:8b:e0:86:a2:
                    04:2d:1d:fa:ef:51:26:a0:c0:1a:68:4a:27:7c:90:
                    e2:1a:ca:7f:45:de:2b:60:dc:79:1f:7e:a5:9e:6f:
                    bc:33:82:7a:a3:ef:b3:36:a3:5f:ec:f3:31:01:c7:
                    24:3c:c9:12:d4:7a:66:79:f9:be:5c:ec:8b:70:e7:
                    af:8d:87:80:1d:39:7e:4f:18:b1:3d:96:fd:fd:48:
                    12:32:4c:d9:8c:a8:c0:d7:c4:72:cd:c4:7a:21:3a:
                    c8:0c:bc:e8:5c:4b:cb:8c:41:ea:70:25:26:e2:5b:
                    c4:b8:75:bd:b9:62:4c:36:ac:2a:29:f2:e6:ae:ee:
                    14:28:6e:00:ec:4f:14:5c:b6:04:cc:85:54:b1:ce:
                    4b:cd:c8:75:b6:23:0b:c4:68:97:ac:dd:6c:da:2e:
                    66:f6:18:72:89:81:08:d1:d8:1e:e9:d0:d8:96:65:
                    02:e4:86:fe:73:6f:02:d6:4e:67:8f:52:6c:08:5e:
                    f0:03:b7:90:bc:56:b2:39:db:f8:98:a4:86:cb:09:
                    30:e5:d8:0b:bb:ec:a7:d0:80:09:f6:61:f7:e2:ad:
                    7e:86:e7:78:aa:6c:a7:88:1d:0e:ad:57:be:e9:db:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:FE:64:ED:D4:D5:C6:54:57:71:A3:4E:07:12:84:4F:83:01:4D
            X509v3 Authority Key Identifier:
                keyid:FD:06:A6:E2:1F:E7:9C:C2:0B:98:F8:87:0F:BA:44:A2:DB:5F:11:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD06A6E21FE79CC20B98F8870FBA44A2DB5F113A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f33322d3332203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:0e:3b:8e:f7:48:7b:44:f1:3f:50:6a:03:16:22:8b:b9:
         4e:81:51:26:ce:6c:3c:7d:99:17:07:0a:33:c1:c9:ba:9f:ae:
         bd:37:25:5d:97:c6:fa:1d:6d:96:db:85:ff:76:9c:32:7e:5d:
         e7:e5:df:a2:43:20:3d:8b:5b:d2:fb:9b:16:76:f1:c3:c6:b2:
         16:f6:10:5c:af:ab:e8:50:f6:5a:69:bf:0c:2e:84:e3:f2:37:
         1c:60:83:f6:47:03:8c:48:fa:7d:d8:60:ee:6b:aa:35:18:36:
         06:d5:4f:8c:26:b6:48:ff:80:e1:c4:2f:c7:aa:c1:bf:e5:2d:
         8b:12:92:7e:bf:f4:ef:2e:00:d0:a9:41:64:73:6d:5a:2a:fa:
         49:d2:66:a3:a9:f4:c9:e4:28:11:4b:42:e7:ad:49:b4:3b:67:
         77:d7:90:16:0f:79:35:39:e2:80:36:08:91:25:5f:d5:75:60:
         f3:dc:25:4d:22:e3:9d:f1:96:33:0a:71:56:e3:ad:a3:08:e4:
         ab:fc:e1:31:ba:7d:06:da:18:a7:19:dd:5d:1b:c5:73:34:50:
         5f:8a:fc:47:45:20:55:ca:c0:7e:da:91:c7:b5:79:c6:20:d7:
         a2:c1:c7:3a:a9:c0:96:a9:ee:ac:4a:e7:36:e4:dd:18:0d:ee:
         87:ec:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:50:57 2026 by rpki-client