Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
File:                     323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa (raw, json)
Hash identifier:          zhbHr/tyBdOnvU/3yIHW3eeAVV8H+j5pmLzC5/1CWvg=
Subject key identifier:   90:CE:63:2B:86:C5:B1:61:AC:5B:88:10:EC:15:B6:CE:58:43:84:F6
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       4AA0A305FBDE64E0096EB3888CD385A1B7E8C5C2
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa
Signing time:             Thu 06 Aug 2026 20:51:41 +0000
ROA not before:           Thu 06 Aug 2026 20:46:41 +0000
ROA not after:            Thu 05 Aug 2027 20:51:41 +0000
asID:                     265300
IP address blocks:        2804:2dbc:a800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:a3:05:fb:de:64:e0:09:6e:b3:88:8c:d3:85:a1:b7:e8:c5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug  6 20:46:41 2026 GMT
            Not After : Aug  5 20:51:41 2027 GMT
        Subject: CN=90CE632B86C5B161AC5B8810EC15B6CE584384F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:c6:cc:da:26:10:ea:03:16:65:31:f5:61:
                    b8:23:d3:97:a4:49:58:58:00:2a:9e:e3:3c:e6:fd:
                    5d:41:2c:dc:3a:a6:5a:e1:6d:0e:53:d0:b5:ed:d3:
                    29:ca:b9:2a:2c:be:94:c1:82:78:6a:cc:7a:a1:68:
                    97:b5:e8:e7:bc:74:88:9d:84:1f:3c:c6:ad:44:3b:
                    81:20:41:0c:d3:26:44:c3:de:42:8d:19:00:d0:b3:
                    1a:43:79:ee:f7:00:fa:9e:77:91:55:25:f8:b4:35:
                    cc:c3:2c:76:ac:ce:8b:2f:5f:b5:2f:93:e7:e4:f8:
                    8a:78:59:c8:6b:c2:4f:e1:38:a2:a6:28:d3:e6:9a:
                    b6:56:17:1a:12:3c:54:9d:a8:72:f4:ab:75:ea:f4:
                    2b:58:48:1b:a7:35:ef:b6:2c:af:f1:2a:99:24:e2:
                    f0:9d:90:c9:1e:1b:03:87:50:9a:9f:4e:58:89:31:
                    ac:a9:c9:22:e0:8e:85:3e:f0:f2:46:94:32:99:24:
                    d6:63:78:e1:e7:72:12:bd:48:f2:a8:0d:e0:b3:55:
                    48:fa:fe:bc:69:34:a1:32:54:dc:c1:d7:5a:3c:30:
                    40:79:f2:ea:3f:83:62:7f:03:f9:52:25:66:0c:df:
                    95:a5:c9:ac:5d:c5:14:4d:21:28:14:2b:33:31:13:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:63:2B:86:C5:B1:61:AC:5B:88:10:EC:15:B6:CE:58:43:84:F6
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a613830303a3a2f33382d3338203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:a800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c7:d7:ac:e3:25:10:9a:03:11:5f:66:a6:69:87:51:13:39:ff:
         dc:5d:d0:24:e7:87:e2:b8:ae:ec:0d:91:77:40:24:33:03:76:
         78:cf:89:85:fe:45:f2:6d:60:df:8d:7d:c5:1f:84:81:35:98:
         d1:a3:70:08:8d:46:d6:f2:b5:4c:fa:7c:2f:58:92:e3:03:00:
         15:d8:18:fd:a6:bf:bb:d7:70:fa:8e:06:e6:3e:7a:3b:53:ef:
         0e:16:cd:6a:74:2f:62:72:71:1e:bc:65:d0:a6:d2:0d:7a:3d:
         e7:fa:7b:68:fc:3b:e2:48:bd:13:f6:e7:4d:de:05:c0:f2:6c:
         2c:c1:c3:be:8d:df:a1:0e:cd:1c:f2:07:7f:3a:bf:d7:97:6c:
         b6:42:a2:b2:11:49:1c:2c:75:70:89:9e:6d:6b:17:b5:42:8c:
         1a:98:80:37:48:f2:b6:cc:4a:4b:5a:a8:b0:4e:a5:23:93:ca:
         a0:58:e1:9b:7c:dd:f8:df:2a:69:05:e0:41:4b:e6:38:12:d7:
         45:a9:5c:06:94:b1:29:6f:4b:5b:be:c3:97:9e:d2:01:66:37:
         6a:d3:fe:1f:aa:8c:f5:04:16:e9:ab:5d:3e:53:1b:0a:d3:6b:
         fa:16:90:bc:f8:a2:f2:53:94:4e:a6:6c:26:26:93:dd:ad:a5:
         2a:96:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:41:50 2026 by rpki-client