Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
File:                     323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (raw, json)
Hash identifier:          ZsoetVUNU7XDnhcJHGSkpMaciZ06XdcDcn0ypTdWzK0=
Subject key identifier:   EB:50:CE:5F:F6:AC:A8:F0:6E:49:12:C4:29:08:C9:AE:C8:5A:FC:F5
Certificate issuer:       /CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
Certificate serial:       5AEACE184AAB9391F36A65AB35B4CC335A35508B
Authority key identifier: 65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
Signing time:             Fri 14 Aug 2026 15:03:21 +0000
ROA not before:           Fri 14 Aug 2026 14:58:21 +0000
ROA not after:            Fri 13 Aug 2027 15:03:21 +0000
asID:                     270279
IP address blocks:        2804:6994::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ea:ce:18:4a:ab:93:91:f3:6a:65:ab:35:b4:cc:33:5a:35:50:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C5DECD45DA5A278A8447A49329E20A64919F2B
        Validity
            Not Before: Aug 14 14:58:21 2026 GMT
            Not After : Aug 13 15:03:21 2027 GMT
        Subject: CN=EB50CE5FF6ACA8F06E4912C42908C9AEC85AFCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:99:3f:ff:48:ce:c5:bc:37:b6:8a:1d:8b:
                    c3:58:15:43:ef:12:97:2d:e8:03:3f:5e:49:c6:d8:
                    f2:c7:95:11:ba:e2:dd:3a:55:a8:43:1a:a8:d7:65:
                    97:7e:6a:0a:d9:51:70:eb:c6:5b:33:7c:6d:be:10:
                    db:de:68:c7:9d:b4:6c:c5:fc:92:05:8f:69:2e:b8:
                    d5:11:8b:e1:39:86:22:5c:bd:8b:ed:4d:a4:00:88:
                    24:df:78:3c:97:4b:2e:7f:e9:c8:81:6d:b6:d1:00:
                    33:d9:b9:bf:fa:99:29:0a:9c:de:48:cc:2e:51:ed:
                    13:d8:8f:f5:28:a8:5c:cc:de:c6:49:51:7a:2a:e0:
                    ef:97:6d:12:a8:26:f8:09:a9:5b:d8:f6:d3:f7:6b:
                    16:dc:93:af:e4:7b:fc:68:85:24:2a:96:19:64:f7:
                    1a:11:e2:c6:50:52:56:3d:1c:85:66:4c:ae:d6:44:
                    e5:51:9a:53:60:93:78:8e:47:d6:ae:45:82:d5:bf:
                    e6:23:e5:60:b4:00:85:3f:11:17:e0:c7:a3:81:0f:
                    02:fd:40:8c:de:30:82:85:b6:ec:d7:e8:e6:f2:18:
                    08:64:3e:cc:9d:86:df:ac:e8:2b:c7:53:6f:12:9e:
                    b2:c2:cf:20:49:35:95:ac:78:b6:f5:1f:30:60:4c:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:50:CE:5F:F6:AC:A8:F0:6E:49:12:C4:29:08:C9:AE:C8:5A:FC:F5
            X509v3 Authority Key Identifier:
                keyid:65:C5:DE:CD:45:DA:5A:27:8A:84:47:A4:93:29:E2:0A:64:91:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/65C5DECD45DA5A278A8447A49329E20A64919F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65C5DECD45DA5A278A8447A49329E20A64919F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/0/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6994::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:71:ba:2f:cb:80:a7:d3:45:93:c4:ec:fd:58:a0:cf:49:
         a3:3e:40:16:63:79:3e:b4:80:bc:a1:d0:b5:79:09:de:f8:6d:
         ee:91:a3:e6:e2:96:d1:4e:ca:02:4f:3d:c3:8c:0b:5a:db:0f:
         48:01:27:13:b8:d2:e9:34:61:e2:b3:74:32:cf:a7:3c:7f:26:
         63:60:f5:41:34:53:ba:5b:3c:d9:fb:33:a6:45:f7:a7:4c:4b:
         4b:67:06:36:6d:df:6e:d5:9d:af:bc:62:ba:14:f1:d7:64:ea:
         75:84:be:3e:c0:d3:a7:9c:ed:e2:64:2b:32:d1:91:56:ea:31:
         5b:e4:94:28:fe:0c:1a:2f:81:08:e3:93:7a:2f:33:65:2b:3e:
         d1:2a:83:ab:81:d3:4a:4e:79:bf:ed:9c:fc:49:7d:78:da:30:
         80:d3:77:a5:56:a4:41:aa:57:d1:20:ca:d7:a7:e2:80:f8:f9:
         46:5f:3e:c1:1b:94:a9:a0:48:39:f4:41:e4:0b:07:99:f5:d1:
         51:44:26:82:47:5a:2d:16:2e:62:cd:7d:30:b0:64:01:34:a1:
         fb:e4:c8:05:87:c1:44:1c:40:33:d5:f1:d7:65:dc:c8:28:6f:
         c0:fa:12:31:f6:46:e4:59:32:da:2d:91:be:1d:41:90:c9:cf:
         d6:a1:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:19:17 2026 by rpki-client