Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a323038303a3a2f34312d3431203d3e20323635333030.roa
File:                     323830343a326462633a323038303a3a2f34312d3431203d3e20323635333030.roa (raw, json)
Hash identifier:          xpKbE6NNEll/qACCSeOc3NwwGdo2IDJU5smvs07PiJs=
Subject key identifier:   64:7C:45:2C:60:22:56:F0:46:8F:40:E2:5C:CB:24:61:CA:95:09:15
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       0A56DF4E465D1062C67C1AAD722E682A3CCF0025
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a323038303a3a2f34312d3431203d3e20323635333030.roa
Signing time:             Thu 06 Aug 2026 20:52:23 +0000
ROA not before:           Thu 06 Aug 2026 20:47:23 +0000
ROA not after:            Thu 05 Aug 2027 20:52:23 +0000
asID:                     265300
IP address blocks:        2804:2dbc:2080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:df:4e:46:5d:10:62:c6:7c:1a:ad:72:2e:68:2a:3c:cf:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug  6 20:47:23 2026 GMT
            Not After : Aug  5 20:52:23 2027 GMT
        Subject: CN=647C452C602256F0468F40E25CCB2461CA950915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:bd:09:63:85:e1:df:54:ed:38:44:87:42:
                    60:5e:d2:15:b4:8e:5a:05:25:9b:26:cc:f0:95:b3:
                    d0:3a:1d:ed:2b:e4:f1:2e:c3:6b:9c:1e:82:96:0d:
                    7f:4a:43:e8:c4:e2:e1:d4:06:85:a2:e2:84:28:b9:
                    1b:9a:8b:04:21:89:fb:15:65:aa:45:c8:6c:75:68:
                    ae:f7:df:72:20:a0:12:4f:ed:ba:23:19:0e:33:95:
                    5d:58:66:89:23:1a:17:ac:87:c6:1e:61:46:6f:26:
                    1f:61:cb:61:cc:2c:ac:57:f7:e7:3f:f0:37:9f:f9:
                    23:3c:be:ab:a5:20:c0:3e:73:04:6b:dc:af:e1:3f:
                    f1:6c:f9:9b:1b:c8:2d:ad:07:f2:f1:08:76:e7:bf:
                    3d:d9:07:5e:50:bd:a3:d2:c0:3f:8b:f0:80:38:f7:
                    e3:7a:28:86:ab:ec:98:71:a4:c0:ab:58:98:ef:50:
                    6c:50:39:d3:11:2a:4f:a0:ff:50:13:70:a7:d7:bd:
                    20:d6:e0:2a:49:ee:04:56:74:c4:7b:70:b2:59:98:
                    bc:9b:75:59:cf:c4:2c:18:5a:b7:00:ff:69:46:7a:
                    9e:c0:e5:7a:88:1b:4f:1b:0f:c0:f0:63:b3:4d:f4:
                    79:a9:8e:4f:7b:d9:54:0d:18:35:81:4c:c3:a0:89:
                    2a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:45:2C:60:22:56:F0:46:8F:40:E2:5C:CB:24:61:CA:95:09:15
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a323038303a3a2f34312d3431203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:2080::/41

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:55:09:1a:79:85:70:e0:7d:e6:b9:66:87:9d:50:dc:14:
         6c:d7:7d:a1:20:69:ea:c9:ff:a0:c2:6c:8a:ff:4a:ff:90:2c:
         5a:ed:35:c7:e6:af:25:09:cf:8e:ea:de:aa:09:a0:bb:9e:31:
         e1:14:e2:34:b2:37:2c:6d:63:19:b7:dd:38:39:3a:3d:3e:0d:
         09:31:85:f7:05:f0:e1:73:35:18:57:28:a9:dd:00:a3:f2:e3:
         5f:c7:f4:5c:32:28:63:a7:3f:28:31:ea:76:4d:40:89:0b:7f:
         ec:e5:c6:a1:44:4c:e6:69:f0:b2:83:01:ae:4c:a7:43:0c:a5:
         7b:ad:11:81:a5:12:5d:7b:17:f8:68:17:62:f4:86:57:b0:33:
         da:b0:2c:24:eb:be:4e:76:cb:47:b3:b5:42:18:2d:07:03:2b:
         ca:5a:84:ff:14:93:c0:52:56:ea:97:3a:f3:1e:30:7f:a6:ad:
         fd:db:d0:db:86:42:62:c1:4f:69:fe:a3:01:ae:15:cf:9f:07:
         a7:bd:cf:5a:40:8b:6a:b7:c9:be:83:c0:4b:3a:53:eb:aa:24:
         7a:7f:f0:44:49:29:66:0e:47:b8:e7:2d:dc:18:ea:14:aa:37:
         c7:8f:d9:fa:4c:43:7c:a5:4c:c8:5f:76:45:8b:af:c6:85:a6:
         4f:a4:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:14 2026 by rpki-client