Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (raw, json)
Hash identifier:          0VIA7v/1ddcMsWjXAKcMvpy/eSHmteB+tRIsW0ONVNU=
Subject key identifier:   09:6E:E2:3B:A2:AF:AD:DC:82:AA:14:08:8E:F1:17:88:9E:AD:2F:12
Certificate issuer:       /CN=110CFCA1F8F2A8621F20395652D3E20D51D39216
Certificate serial:       416BA6133BB56582AAB76214CB06E6B046F6D051
Authority key identifier: 11:0C:FC:A1:F8:F2:A8:62:1F:20:39:56:52:D3:E2:0D:51:D3:92:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110CFCA1F8F2A8621F20395652D3E20D51D39216.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
Signing time:             Wed 29 Jul 2026 17:25:03 +0000
ROA not before:           Wed 29 Jul 2026 17:20:03 +0000
ROA not after:            Wed 28 Jul 2027 17:25:03 +0000
asID:                     265038
IP address blocks:        2804:31cc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/110CFCA1F8F2A8621F20395652D3E20D51D39216.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/110CFCA1F8F2A8621F20395652D3E20D51D39216.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110CFCA1F8F2A8621F20395652D3E20D51D39216.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 08 Aug 2026 20:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:a6:13:3b:b5:65:82:aa:b7:62:14:cb:06:e6:b0:46:f6:d0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110CFCA1F8F2A8621F20395652D3E20D51D39216
        Validity
            Not Before: Jul 29 17:20:03 2026 GMT
            Not After : Jul 28 17:25:03 2027 GMT
        Subject: CN=096EE23BA2AFADDC82AA14088EF117889EAD2F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:b7:18:fe:13:e4:ff:6b:93:f9:cd:bc:96:
                    84:a3:00:5e:ac:ae:8f:8e:1f:f2:4f:79:a0:df:24:
                    21:ac:a0:64:87:d4:95:b5:8f:11:a5:3f:bd:e2:35:
                    5b:d6:5d:32:38:f6:25:b0:b9:dd:06:73:2d:61:ee:
                    57:14:57:8b:b4:94:25:17:97:73:2a:03:e0:8f:88:
                    99:4c:74:d4:cd:6e:94:a2:e6:76:4a:08:91:5d:94:
                    b1:36:75:a8:6f:ba:16:34:48:4e:72:15:72:4d:c3:
                    72:81:8d:d7:ba:51:10:6f:46:6e:14:14:90:43:a2:
                    98:17:b6:47:1d:6f:da:38:f9:84:a8:6a:e2:8a:fd:
                    a1:6e:bb:76:79:58:5d:87:91:99:71:e2:dc:2e:fd:
                    60:d6:ba:89:4a:c6:8c:68:e0:8c:bc:7f:2a:92:7f:
                    d0:03:aa:4c:b5:11:83:98:0f:26:5e:19:99:cf:b4:
                    62:e0:60:d9:85:9c:80:3a:1a:0b:96:a5:93:2e:0a:
                    64:84:53:0c:ac:2e:bb:7f:71:bb:b5:80:4f:6c:03:
                    ce:49:e8:d0:56:30:a9:6c:20:83:d1:7c:51:a8:57:
                    92:c9:40:a3:20:02:43:4e:e7:1b:3b:89:f5:b9:d0:
                    ab:22:75:30:d7:0c:12:b3:c1:eb:5b:5f:80:9f:e4:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6E:E2:3B:A2:AF:AD:DC:82:AA:14:08:8E:F1:17:88:9E:AD:2F:12
            X509v3 Authority Key Identifier:
                keyid:11:0C:FC:A1:F8:F2:A8:62:1F:20:39:56:52:D3:E2:0D:51:D3:92:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/110CFCA1F8F2A8621F20395652D3E20D51D39216.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110CFCA1F8F2A8621F20395652D3E20D51D39216.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:a5:a0:a3:a2:ee:cb:1f:4a:64:3b:4b:77:12:b0:be:a6:
         4d:a4:af:66:2f:88:50:cb:df:50:b3:e5:01:14:43:9a:41:64:
         54:b7:6d:85:37:9d:cb:a0:00:40:66:e8:a6:d6:62:51:40:75:
         85:15:b7:38:60:1f:bf:d4:e9:94:34:71:71:02:fd:df:84:ad:
         91:a8:8e:4b:2b:51:5f:0b:14:56:24:23:00:96:a9:1c:f7:c0:
         32:d0:9d:55:ce:7b:44:a2:e4:0f:cd:65:05:4a:8c:2b:e5:35:
         4d:c4:15:a4:b2:0d:6c:e9:33:6c:db:e3:7a:24:82:4e:57:7d:
         be:29:52:7f:18:6e:8c:8d:23:af:bc:02:4b:0f:97:5e:d0:0b:
         da:4f:bf:ab:62:1b:23:9f:d3:98:b0:32:7f:e4:73:a0:93:e7:
         8a:c8:05:78:53:78:93:c2:6c:4a:ce:4e:c7:c0:be:c5:b9:2b:
         86:38:2c:e7:89:63:b6:3f:80:b9:b3:2d:c2:e7:cd:2c:c8:4a:
         18:eb:75:b6:22:56:50:a8:81:a9:88:7c:e7:89:18:a9:28:b8:
         e7:f3:61:05:f5:4f:b5:bf:42:1a:6b:91:12:5b:ca:f4:8a:ec:
         91:5e:f8:44:74:bc:c9:0f:df:ee:c6:6b:a8:fe:cc:a0:cf:2a:
         24:9f:88:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:20:24 2026 by rpki-client