Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa
File:                     323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (raw, json)
Hash identifier:          bo+aj5XhXJpUPr1wBu9uypPERqmkzJTml2yxM+5RyJI=
Subject key identifier:   B8:B8:D3:51:6C:B4:70:30:A5:41:C2:E7:4F:3E:47:A6:32:B1:16:FB
Certificate issuer:       /CN=C37D443ACE2088B9542008EA9127A8D95802391D
Certificate serial:       7383D80CBB172D076C2F2310B04C8AD1B9F60E19
Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa
Signing time:             Mon 17 Aug 2026 18:08:24 +0000
ROA not before:           Mon 17 Aug 2026 18:03:24 +0000
ROA not after:            Mon 16 Aug 2027 18:08:24 +0000
asID:                     269103
IP address blocks:        2804:5f7c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl
                          rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 22:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:83:d8:0c:bb:17:2d:07:6c:2f:23:10:b0:4c:8a:d1:b9:f6:0e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D
        Validity
            Not Before: Aug 17 18:03:24 2026 GMT
            Not After : Aug 16 18:08:24 2027 GMT
        Subject: CN=B8B8D3516CB47030A541C2E74F3E47A632B116FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:6b:ba:77:f0:58:7c:e9:f9:d5:5d:8e:2d:
                    74:b3:82:34:b7:6e:22:cc:a1:dc:27:d6:00:4a:05:
                    76:df:6b:45:a1:b3:64:59:66:8e:bf:46:88:c9:8e:
                    39:e9:66:07:90:00:b1:ed:ea:52:3e:20:4f:b5:f7:
                    2e:d5:15:76:97:39:80:06:11:4f:d8:b4:14:6d:ab:
                    ec:36:e7:25:3b:6f:10:99:08:27:53:1f:c8:6a:3e:
                    cf:d7:cc:c7:21:c1:4f:c7:6e:9e:85:e1:1f:71:44:
                    b3:83:77:1a:78:40:4c:e9:e3:50:8d:b9:14:b8:bf:
                    4e:63:a2:06:14:d7:9c:94:39:d0:a3:5e:b9:ca:5f:
                    9d:72:28:81:94:69:cc:c0:f8:c0:88:10:73:e6:f7:
                    95:d0:5b:b5:00:63:29:38:42:8c:93:a4:31:51:02:
                    99:dd:c2:71:4d:9f:4e:f9:9c:62:5a:8f:83:26:96:
                    1e:3c:a5:54:ea:b7:f2:2f:eb:26:94:6d:91:b6:81:
                    56:f0:40:05:a3:78:ef:32:c5:c0:80:db:11:60:22:
                    10:d2:35:fc:51:82:da:b3:ce:ac:ed:f3:67:74:03:
                    17:f6:32:09:b5:a2:48:0b:97:17:91:c4:91:ef:a5:
                    77:58:7d:c4:b3:79:3e:e0:b6:6b:78:f7:22:f0:32:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B8:D3:51:6C:B4:70:30:A5:41:C2:E7:4F:3E:47:A6:32:B1:16:FB
            X509v3 Authority Key Identifier:
                keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/323830343a356637633a3a2f33322d313238203d3e20323639313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:40:0a:c0:35:2a:bc:ed:38:0c:0d:af:73:2c:3b:5c:8b:8f:
         47:89:9b:14:d5:b4:ca:3d:fa:86:4f:5a:47:b2:87:12:9f:4d:
         85:d8:2d:99:c7:7f:04:9a:c9:bb:53:db:c5:3a:89:2e:d1:c0:
         21:58:23:82:cc:8f:65:e5:c6:6f:41:12:94:36:78:cb:82:34:
         26:60:ff:a4:a9:a8:27:bf:7a:0f:cb:be:11:04:42:c2:ed:74:
         d1:1a:f5:60:85:9e:ac:1e:ba:77:c5:10:1f:fe:a8:d2:3a:51:
         77:55:84:9c:19:42:70:b5:42:8f:0c:63:18:aa:55:bf:d7:4a:
         d2:67:98:cc:1e:99:fe:88:7b:e4:7c:77:34:e0:0f:3f:ea:39:
         c7:15:0e:ed:42:4d:86:6f:9b:0b:fd:38:ef:ee:b2:a1:51:d8:
         63:10:bd:61:cb:1f:5b:34:31:36:7b:ac:06:11:85:d4:cd:5b:
         77:c6:05:aa:40:af:44:11:89:f1:d7:53:26:2c:69:59:8a:f5:
         3d:45:a2:1e:59:b4:83:cd:20:92:89:8b:90:9d:44:36:c9:b3:
         f9:d6:2f:85:89:8e:8d:25:36:d4:a5:05:c2:9a:ba:c5:44:f0:
         ee:20:da:f9:46:3c:c7:66:51:8a:db:46:b7:69:fc:69:ff:df:
         bc:ad:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:12:41 2026 by rpki-client