Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/323830343a343465383a666330303a3a2f33382d3338203d3e20323637363630.roa
File:                     323830343a343465383a666330303a3a2f33382d3338203d3e20323637363630.roa (raw, json)
Hash identifier:          iT6zpuufSdCQb7MzoUGktLZWbDCRxMUQJ9gbQCo3WP8=
Subject key identifier:   A1:9E:2A:00:0F:B9:3A:B9:92:E9:04:9E:CE:61:3D:47:17:9E:68:37
Certificate issuer:       /CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
Certificate serial:       79AB07022A6F9AB8447B56F1C2F68DDCEE7B8F54
Authority key identifier: 45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/323830343a343465383a666330303a3a2f33382d3338203d3e20323637363630.roa
Signing time:             Tue 18 Aug 2026 13:10:38 +0000
ROA not before:           Tue 18 Aug 2026 13:05:38 +0000
ROA not after:            Tue 17 Aug 2027 13:10:38 +0000
asID:                     267660
IP address blocks:        2804:44e8:fc00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl
                          rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ab:07:02:2a:6f:9a:b8:44:7b:56:f1:c2:f6:8d:dc:ee:7b:8f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4523D40F44EEC4238DD87439303B3410CF5F1F1F
        Validity
            Not Before: Aug 18 13:05:38 2026 GMT
            Not After : Aug 17 13:10:38 2027 GMT
        Subject: CN=A19E2A000FB93AB992E9049ECE613D47179E6837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:77:30:13:b7:b3:f6:7a:f1:b6:8e:07:05:
                    a4:a1:9b:d6:02:4a:5c:ad:14:0b:35:03:d4:ac:b3:
                    c0:ee:8d:8c:b9:f5:8a:25:8c:2d:c1:72:0e:ac:d6:
                    54:3c:b2:66:b4:d3:86:3e:b8:11:6f:f7:9b:28:94:
                    61:df:17:59:91:cc:a0:c5:36:34:92:25:b5:3e:ef:
                    3c:41:ff:ea:51:68:5c:a2:03:a4:f1:c0:81:99:40:
                    da:0f:4e:a0:9a:21:b9:23:89:55:82:33:99:1a:4e:
                    09:53:71:5a:13:af:89:ed:4b:53:72:a7:04:30:f2:
                    82:0b:65:a9:e6:90:d9:43:dc:c3:45:f9:96:c4:2c:
                    46:76:bc:cc:66:4e:67:08:be:4b:c5:70:d2:94:6b:
                    f7:1a:7a:9f:5f:56:d1:f2:42:32:a3:43:2d:54:7a:
                    d8:d6:56:d5:26:a1:af:7f:16:4f:50:d7:85:3f:b9:
                    1b:75:fd:34:28:44:2a:ba:f4:5e:8c:00:8e:74:4f:
                    bb:68:be:16:56:47:cd:a1:31:4d:b9:9a:3b:cb:87:
                    82:69:2e:4a:11:84:87:7e:5a:0d:be:91:e0:9f:6d:
                    f0:b0:f1:0a:4b:68:a4:b5:9d:cf:8c:4e:44:95:6e:
                    56:75:f7:44:75:0c:81:e5:68:99:63:17:c8:c8:54:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9E:2A:00:0F:B9:3A:B9:92:E9:04:9E:CE:61:3D:47:17:9E:68:37
            X509v3 Authority Key Identifier:
                keyid:45:23:D4:0F:44:EE:C4:23:8D:D8:74:39:30:3B:34:10:CF:5F:1F:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/4523D40F44EEC4238DD87439303B3410CF5F1F1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4523D40F44EEC4238DD87439303B3410CF5F1F1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bm8btn3DhSpdyfBdZBotVrX2xKY94ySkMt39rxvDUpD1/0/323830343a343465383a666330303a3a2f33382d3338203d3e20323637363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44e8:fc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         6f:e4:94:b5:f3:87:f3:bc:d3:9d:43:81:93:1a:5d:8a:50:6f:
         e4:34:8c:ad:ea:b9:b5:4d:0d:10:88:f6:c7:41:5c:a5:7b:b1:
         58:e1:ae:f1:df:fe:fc:99:83:a2:3e:c0:b2:d7:ce:49:69:b2:
         bd:84:2d:f4:b4:d0:c2:be:28:42:cc:65:4f:78:91:1e:09:a2:
         b0:b7:74:91:f2:92:b6:4f:c4:92:3a:5c:d6:3c:89:db:55:6d:
         0f:e9:17:3a:97:6b:86:50:42:45:c6:8f:d8:75:cc:b7:80:c2:
         14:20:a7:3a:3a:b7:49:fb:89:06:94:cb:00:7a:44:3a:d3:c0:
         25:4f:e9:05:04:81:7a:b0:b5:73:29:2b:69:e5:03:5d:6e:b0:
         d9:58:39:9d:16:c4:99:ed:06:2e:75:fd:3a:4b:16:f9:98:95:
         4e:2e:cb:96:a3:8e:29:4b:cd:0f:8f:ae:82:df:23:13:b3:0d:
         71:d0:0a:fc:55:2c:ef:44:6c:a8:b2:84:11:d0:46:41:f2:24:
         48:3c:95:ab:fd:2d:66:81:1c:70:47:26:6c:f7:22:2a:41:b4:
         ab:a6:c5:0f:72:18:f8:f4:09:b1:30:91:96:ff:fc:25:9b:6e:
         8b:f0:f2:46:ba:7a:75:3d:17:84:7b:70:e2:37:72:79:c7:9a:
         c1:af:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:06 2026 by rpki-client