Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
File:                     323830343a326462633a3a2f33322d3332203d3e20323635333030.roa (raw, json)
Hash identifier:          UEnthRdGUUoSKbNDO68RScDvqbObdvSDEElEjY4eN1s=
Subject key identifier:   A7:44:45:ED:AE:9B:79:1B:CB:B9:0C:B5:FD:CC:1D:85:EC:7E:B9:F6
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       47C44E708C279CAC75182389DC30E4503FEEEEDC
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa
Signing time:             Mon 10 Aug 2026 22:04:59 +0000
ROA not before:           Mon 10 Aug 2026 21:59:59 +0000
ROA not after:            Mon 09 Aug 2027 22:04:59 +0000
asID:                     265300
IP address blocks:        2804:2dbc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c4:4e:70:8c:27:9c:ac:75:18:23:89:dc:30:e4:50:3f:ee:ee:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug 10 21:59:59 2026 GMT
            Not After : Aug  9 22:04:59 2027 GMT
        Subject: CN=A74445EDAE9B791BCBB90CB5FDCC1D85EC7EB9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:38:c1:c3:50:1a:3c:72:6e:79:80:bb:29:
                    86:8d:87:c3:d7:2b:a6:28:39:cf:2f:62:55:cb:80:
                    f9:6b:32:d9:b5:c9:d7:18:30:26:9c:0d:f9:70:1a:
                    42:48:df:ae:c8:4d:13:ac:1d:2c:ef:7c:0b:a8:bb:
                    fb:1d:6a:75:4b:b4:49:8f:29:63:b3:83:18:07:32:
                    c5:84:6d:4a:6e:da:fc:46:01:c7:d8:9f:ba:d7:0e:
                    da:d9:3b:19:7b:a7:e9:3c:86:f4:e6:4c:80:cb:25:
                    a6:73:52:f2:f4:36:50:94:a1:ca:f9:c7:ce:b6:89:
                    3d:73:b9:5e:80:fc:39:cc:f2:5b:c8:01:e6:db:b1:
                    fe:50:0a:6c:21:6c:de:3b:84:3d:a2:2c:a8:6e:d4:
                    98:c8:be:9f:1f:b4:db:d4:94:8a:ff:cb:4e:40:24:
                    71:7c:24:10:ee:03:4a:fa:0d:07:00:da:b3:08:ee:
                    01:c3:93:cd:ef:a7:01:cc:6f:aa:59:37:d5:f3:43:
                    7d:29:0c:d8:e1:a2:84:34:e1:a1:df:c2:7e:db:d2:
                    5d:d0:9e:89:e9:6e:73:bc:43:3a:be:65:0e:8f:e2:
                    dc:56:aa:52:0d:03:36:3a:b4:e7:fa:7d:8b:8c:09:
                    60:61:be:e3:5c:5f:9f:62:1b:d6:de:18:4f:3d:3e:
                    db:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:44:45:ED:AE:9B:79:1B:CB:B9:0C:B5:FD:CC:1D:85:EC:7E:B9:F6
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a3a2f33322d3332203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:44:0e:60:c9:28:e4:b0:dd:d3:f2:41:5d:ea:c0:4e:41:
         85:ca:f2:f6:42:a7:5a:4f:4b:5c:96:9b:d7:5a:cd:70:ff:54:
         ff:25:61:ea:9c:00:42:eb:23:d8:9b:ee:90:be:9f:2f:3d:c9:
         c0:6d:3e:13:da:af:3d:5e:4a:bc:b5:a4:f7:ec:18:a4:26:86:
         ee:70:45:3a:17:a1:fc:cc:c6:60:ce:d6:fd:28:02:05:42:8f:
         f1:3a:1f:b4:a1:8d:ad:9d:f4:a0:dd:ea:34:8a:1f:c5:de:f6:
         06:da:9d:8c:0c:66:27:e3:a0:f7:f1:cd:7a:06:0c:8a:14:ba:
         28:cc:ee:77:5b:12:1a:a7:d4:d6:61:56:7c:f9:ba:85:66:04:
         ff:57:7d:d9:c9:c4:08:68:70:9c:6e:ac:a6:72:59:a4:4f:d8:
         f8:dd:3f:2e:07:8a:4c:99:7e:94:9d:5a:dd:1c:88:de:e6:cb:
         20:2c:b3:11:f3:bf:d9:d2:d4:f2:3c:24:00:98:72:ab:12:4b:
         97:2f:02:0d:73:e3:7d:91:1c:42:e8:67:6c:f2:5e:18:80:2b:
         27:c0:12:12:02:b6:3e:64:4b:06:89:7c:b9:5f:6b:5d:e1:ec:
         54:40:7e:76:18:0a:17:79:92:07:1e:20:1b:25:a1:ee:f7:dc:
         e0:d3:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:44:40 2026 by rpki-client