Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653038303a3a2f34312d3431203d3e20323635333030.roa
File:                     323830343a326462633a653038303a3a2f34312d3431203d3e20323635333030.roa (raw, json)
Hash identifier:          LfOwNbdPcTD3aSQSyATQj0e1zWOoKle1LfIAX5rK8eg=
Subject key identifier:   F3:D9:F7:E7:FB:7F:1F:0F:77:3C:E2:85:90:0F:A4:3F:5A:61:FA:0E
Certificate issuer:       /CN=98FB017963B86A925F721F20ED568534305BBBBF
Certificate serial:       4AB922BEB15D0182AF298F1BE5DAED55EB27E62B
Authority key identifier: 98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653038303a3a2f34312d3431203d3e20323635333030.roa
Signing time:             Thu 06 Aug 2026 20:45:00 +0000
ROA not before:           Thu 06 Aug 2026 20:40:00 +0000
ROA not after:            Thu 05 Aug 2027 20:45:00 +0000
asID:                     265300
IP address blocks:        2804:2dbc:e080::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl
                          rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b9:22:be:b1:5d:01:82:af:29:8f:1b:e5:da:ed:55:eb:27:e6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FB017963B86A925F721F20ED568534305BBBBF
        Validity
            Not Before: Aug  6 20:40:00 2026 GMT
            Not After : Aug  5 20:45:00 2027 GMT
        Subject: CN=F3D9F7E7FB7F1F0F773CE285900FA43F5A61FA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:c2:37:65:d5:36:15:73:8e:42:9c:07:d4:
                    52:d3:2f:c2:b5:4e:0e:c1:66:95:67:c2:04:4a:c3:
                    c6:24:4f:6e:ec:3c:3b:27:44:2f:61:0e:14:bc:9f:
                    d3:09:17:11:7b:56:7f:aa:e3:43:c5:77:64:34:78:
                    4d:40:02:6e:7e:4c:70:91:34:cc:24:be:dc:8d:d8:
                    15:a7:c0:9b:14:cd:17:15:e4:7e:6d:af:11:b7:86:
                    49:98:e1:98:48:cc:10:7f:dc:79:9a:e0:17:10:6a:
                    60:21:1c:3b:9f:c1:73:ab:33:0a:e7:31:65:f7:a7:
                    ca:86:1f:4d:bf:a4:01:4b:08:51:2a:14:3d:ba:74:
                    9c:a2:98:d0:08:b2:ec:7c:ee:f7:27:9c:d6:3f:5e:
                    c6:9e:58:ed:87:aa:e5:46:43:a8:68:f9:62:c9:d7:
                    02:3c:dc:f3:b1:ee:38:c5:c4:dc:8f:05:e0:af:83:
                    ae:85:93:33:15:59:af:20:03:71:c8:41:43:45:79:
                    99:2a:ad:b7:0b:5b:94:9a:24:5e:d1:58:99:19:b3:
                    a3:3b:11:a9:f0:c1:d9:6e:04:de:2a:5e:65:dc:38:
                    32:59:e4:86:22:a9:0f:b7:19:78:55:fe:f5:92:ab:
                    ce:de:d8:2e:de:ad:c1:85:9a:49:17:94:05:d6:c6:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:F7:E7:FB:7F:1F:0F:77:3C:E2:85:90:0F:A4:3F:5A:61:FA:0E
            X509v3 Authority Key Identifier:
                keyid:98:FB:01:79:63:B8:6A:92:5F:72:1F:20:ED:56:85:34:30:5B:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/98FB017963B86A925F721F20ED568534305BBBBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98FB017963B86A925F721F20ED568534305BBBBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/323830343a326462633a653038303a3a2f34312d3431203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc:e080::/41

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:39:b7:6b:6c:dc:35:85:d3:f8:27:60:71:fa:24:4f:52:
         72:33:68:70:f4:ef:cf:fa:ed:a4:87:38:e7:b0:33:4f:c3:a9:
         b9:89:2f:16:66:6f:18:89:d7:47:4e:a7:58:e2:00:40:38:53:
         3e:c8:b1:43:0f:1b:43:dd:8f:b6:bd:3d:ae:3c:24:5b:f4:c6:
         78:22:05:6c:70:2b:48:f1:f3:4f:f8:89:93:fa:83:45:8b:28:
         cd:89:73:ea:88:d4:09:87:e1:f8:3e:7e:17:5b:62:4f:2c:3a:
         b3:c8:af:0c:19:1c:52:ea:5c:8d:01:9b:68:13:66:bd:6b:0e:
         55:3b:fe:09:e8:b7:73:b6:58:e6:e2:43:f1:f9:65:ef:64:aa:
         84:73:c7:67:df:1b:73:00:29:19:70:79:3e:49:d1:00:e3:31:
         ba:3f:e6:70:ec:d7:b1:e8:8a:3a:50:7e:32:57:00:a7:fa:fe:
         c3:f9:64:dd:e7:5c:a4:5e:62:c2:f5:be:b4:1c:c1:cb:0e:df:
         24:68:5f:cb:72:51:8c:a3:02:a6:0f:b5:ca:87:80:6d:5d:69:
         4f:42:2c:dc:ab:be:f1:0b:fc:f6:d3:10:ad:9c:6b:33:80:f1:
         37:b4:98:46:cf:3f:17:27:94:6a:74:f9:63:c2:01:44:bc:cc:
         2d:0d:56:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:14 2026 by rpki-client