Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33342d3334203d3e20323636303232.roa
File:                     323830343a333934343a3a2f33342d3334203d3e20323636303232.roa (raw, json)
Hash identifier:          IKY/7a7MGHx6IS1poxMvVpHA/uTDidYnbZZ3kulX8go=
Subject key identifier:   B0:AC:18:D1:70:0A:4A:EE:FE:40:06:89:78:9B:58:58:38:DD:97:9F
Certificate issuer:       /CN=90705F919BBE46351F72D4F40C331818D517C16A
Certificate serial:       1E1292BA5390F757858D14DA260954F2E1792AA9
Authority key identifier: 90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33342d3334203d3e20323636303232.roa
Signing time:             Fri 21 Aug 2026 13:29:00 +0000
ROA not before:           Fri 21 Aug 2026 13:24:00 +0000
ROA not after:            Fri 20 Aug 2027 13:29:00 +0000
asID:                     266022
IP address blocks:        2804:3944::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl
                          rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:12:92:ba:53:90:f7:57:85:8d:14:da:26:09:54:f2:e1:79:2a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90705F919BBE46351F72D4F40C331818D517C16A
        Validity
            Not Before: Aug 21 13:24:00 2026 GMT
            Not After : Aug 20 13:29:00 2027 GMT
        Subject: CN=B0AC18D1700A4AEEFE400689789B585838DD979F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:e4:8d:56:99:69:16:c2:44:43:d0:70:67:
                    86:0c:63:1e:78:b3:00:cd:6c:1c:8c:63:ca:cb:41:
                    ab:4c:50:3d:7c:a0:44:41:9c:ab:31:1a:67:d1:f3:
                    e6:b8:80:4b:b0:50:2b:b2:79:f6:96:d8:01:5e:c2:
                    71:b5:93:9a:85:89:8a:20:29:00:3e:2e:10:54:19:
                    dd:f7:df:d8:59:9e:9b:6e:bc:41:14:b9:30:9d:3f:
                    f0:89:f2:31:bd:c4:46:7a:dd:51:a7:44:a6:32:08:
                    17:9c:9c:3d:40:01:2f:ac:32:9e:e5:56:0d:12:dc:
                    1b:b5:de:01:ae:c5:b3:b6:56:6b:44:b8:3a:55:f9:
                    35:05:b4:00:35:b0:3d:ca:42:45:60:b3:d0:53:90:
                    bf:b8:1f:08:84:ac:53:05:3d:40:88:f2:fe:60:bf:
                    9e:bc:ef:a9:69:19:46:06:4b:ed:bc:2e:3f:0e:82:
                    a8:d0:f6:05:0c:c2:61:e3:a3:87:30:00:b2:0b:d0:
                    28:e8:7e:cc:14:eb:9b:1c:74:58:75:c3:87:ef:91:
                    6f:be:1a:79:dc:0d:b2:ef:fd:87:9c:73:07:76:61:
                    6e:89:d6:40:bb:de:19:92:93:ea:d9:c9:98:ca:33:
                    c7:34:c2:fb:e1:f6:43:b9:15:cd:08:1c:67:db:e0:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:18:D1:70:0A:4A:EE:FE:40:06:89:78:9B:58:58:38:DD:97:9F
            X509v3 Authority Key Identifier:
                keyid:90:70:5F:91:9B:BE:46:35:1F:72:D4:F4:0C:33:18:18:D5:17:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/90705F919BBE46351F72D4F40C331818D517C16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90705F919BBE46351F72D4F40C331818D517C16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bw8F5EocdsCkcN4YfKBPkYJtNz4UFDpFLrytzVi7geun/0/323830343a333934343a3a2f33342d3334203d3e20323636303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3944::/34

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:58:3d:1e:c9:cb:38:db:95:e0:b9:d9:8e:58:70:8b:b7:
         63:c9:90:4f:95:78:0e:41:c2:bc:6c:29:66:56:da:fc:50:58:
         89:4b:50:35:f8:88:85:b8:ed:85:b2:3b:af:27:c5:ff:9d:4d:
         46:4e:7c:bd:dd:ee:58:33:cb:52:82:9a:c6:44:56:58:c8:9c:
         6d:7d:36:01:a7:5c:1d:40:b1:bd:8c:d3:a9:05:88:49:51:aa:
         22:63:9c:d1:50:03:55:6d:6c:9e:66:d0:fa:94:8c:ef:b9:9b:
         91:bf:58:98:5f:f2:91:03:88:06:aa:9f:86:af:1d:c2:71:1b:
         8a:34:e8:f0:2d:72:cf:b3:21:6a:95:bf:7f:b8:ef:3e:dd:e9:
         de:db:2a:41:6c:79:11:57:3a:4a:28:0d:94:01:5d:db:fb:89:
         11:8d:e8:92:71:89:a3:4c:43:4f:22:33:a7:fd:88:aa:b9:e3:
         84:b2:90:c4:d3:59:4e:70:7e:8a:7a:c6:9b:22:ac:bb:3c:99:
         45:5f:33:e8:62:ef:6f:cf:f0:a3:9a:f2:18:89:30:de:e7:e0:
         c1:46:2c:48:04:75:7c:34:72:6b:39:51:e6:7b:e3:8f:ce:77:
         c0:0f:66:56:d3:2d:09:0b:fe:82:03:c8:6a:ae:cb:c0:6a:ab:
         80:40:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:49:39 2026 by rpki-client