Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d3334203d3e203631373631.roa
File:                     323830343a313865343a3a2f33322d3334203d3e203631373631.roa (raw, json)
Hash identifier:          EOyx7PbBlQStYCf4FcATdLQfEgEQTrahZOqLALOkLOA=
Subject key identifier:   EB:3C:33:7E:A9:B8:8B:72:EE:2F:1B:36:24:6A:31:C2:90:C4:AD:B0
Certificate issuer:       /CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
Certificate serial:       5ED607B5FE26A11676359D10149E0AB7912FAECF
Authority key identifier: 2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d3334203d3e203631373631.roa
Signing time:             Mon 03 Aug 2026 20:09:05 +0000
ROA not before:           Mon 03 Aug 2026 20:04:05 +0000
ROA not after:            Mon 02 Aug 2027 20:09:05 +0000
asID:                     61761
IP address blocks:        2804:18e4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl
                          rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 19:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d6:07:b5:fe:26:a1:16:76:35:9d:10:14:9e:0a:b7:91:2f:ae:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F465B4D67B798728D086175292AF9A5CE3F28B9
        Validity
            Not Before: Aug  3 20:04:05 2026 GMT
            Not After : Aug  2 20:09:05 2027 GMT
        Subject: CN=EB3C337EA9B88B72EE2F1B36246A31C290C4ADB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b6:93:fe:7f:4d:c7:23:b2:a5:bb:67:53:dd:
                    da:2f:db:1e:a5:84:61:63:79:d6:75:42:7c:85:73:
                    70:fc:f7:0c:00:4e:07:f0:67:44:b1:db:2b:5f:53:
                    f2:9c:12:fd:c5:9b:90:89:6f:5b:e4:c2:8c:42:75:
                    c4:32:05:1f:f6:ae:53:e5:25:f5:55:8d:6f:a3:21:
                    76:4b:aa:57:95:1d:dd:9f:9c:58:34:87:63:8f:7d:
                    61:f1:1a:4f:d5:25:90:81:2c:18:f2:9a:02:f5:58:
                    43:7b:b8:48:be:4f:75:4b:30:ed:81:26:57:48:a3:
                    a9:39:e7:c7:df:a3:e7:34:24:1d:af:b3:a1:cd:42:
                    31:86:f0:b2:28:3e:9d:67:f3:ca:f4:b5:16:2a:ce:
                    c3:28:45:bd:63:3a:bc:7a:13:73:54:1b:86:63:c4:
                    16:93:7b:7a:ae:04:a2:e0:13:b6:e0:1c:c0:46:37:
                    a7:24:b5:00:79:27:5c:c1:7c:a2:81:1c:36:21:41:
                    6c:93:0b:cb:9f:aa:e9:82:e1:ed:67:d8:2d:76:94:
                    03:6d:b9:0b:ff:aa:9d:8a:e2:90:27:87:99:db:86:
                    5e:ec:79:15:94:e5:43:ca:ad:f7:85:f9:e6:8d:7b:
                    29:9a:33:62:ca:1a:eb:f0:82:1b:34:f2:77:f4:45:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:33:7E:A9:B8:8B:72:EE:2F:1B:36:24:6A:31:C2:90:C4:AD:B0
            X509v3 Authority Key Identifier:
                keyid:2F:46:5B:4D:67:B7:98:72:8D:08:61:75:29:2A:F9:A5:CE:3F:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/2F465B4D67B798728D086175292AF9A5CE3F28B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F465B4D67B798728D086175292AF9A5CE3F28B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoKn2e2gibQwrqQe5VdNYCvZXUv4tUfi6PHgMVtkt1ad/0/323830343a313865343a3a2f33322d3334203d3e203631373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:01:b4:4b:a1:07:d1:fc:45:d3:f5:0c:6a:e5:38:d4:9f:
         82:a8:8e:89:99:40:9e:6d:36:d4:18:16:a1:dd:71:74:28:2d:
         7b:18:9f:af:94:b1:29:d7:3f:54:70:46:d6:f2:75:f9:b7:02:
         26:73:b7:b9:77:d3:5f:8f:a1:eb:06:29:00:9f:d5:a3:85:18:
         b4:9c:00:02:be:f3:7f:bf:a8:36:c2:1a:ba:5b:bb:d1:07:be:
         8a:c3:93:fa:d2:29:5d:0a:ad:53:46:94:e3:0b:fc:5b:71:69:
         0f:4f:b0:58:26:3f:85:b2:8a:d7:ba:95:21:aa:8a:87:d1:e9:
         56:12:93:eb:d4:12:da:80:39:67:ab:17:cb:23:4f:a1:e9:97:
         f5:f1:5e:d6:bb:36:41:17:ba:7f:0a:09:54:ad:59:ff:8c:50:
         8b:7a:e6:58:f8:bc:63:57:5a:7c:da:f0:2a:ee:89:1c:a9:1f:
         68:f0:d8:0c:eb:2f:05:bf:71:ce:cc:b4:d1:3d:17:43:a6:d1:
         ef:03:0b:c5:ca:b8:ef:d7:1f:da:1a:c7:95:dc:84:97:a0:0c:
         a2:4e:81:10:6b:00:e8:a9:99:a7:57:de:25:2e:ab:24:8d:94:
         8d:09:6c:42:5c:b0:cc:4b:eb:79:31:bd:e4:80:90:78:b3:68:
         42:8b:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:56:19 2026 by rpki-client