Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/323830313a38313a3238303a3a2f34382d3438203d3e20323735373932.roa
File:                     323830313a38313a3238303a3a2f34382d3438203d3e20323735373932.roa (raw, json)
Hash identifier:          wkLhoPkKsdXF9P9Si1aoRHA4DMNeQLmreGUy0w669pw=
Subject key identifier:   D8:6D:5B:FA:E8:9A:70:54:C9:D7:96:F4:4E:42:D7:4C:E5:06:C4:A9
Certificate issuer:       /CN=419DC989B6F029CDA367862EEF9D0E5CED54F948
Certificate serial:       341F1966F0C98592C41FAB2F7ABBE3BED28DEAFE
Authority key identifier: 41:9D:C9:89:B6:F0:29:CD:A3:67:86:2E:EF:9D:0E:5C:ED:54:F9:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/419DC989B6F029CDA367862EEF9D0E5CED54F948.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/323830313a38313a3238303a3a2f34382d3438203d3e20323735373932.roa
Signing time:             Fri 31 Jul 2026 14:17:25 +0000
ROA not before:           Fri 31 Jul 2026 14:12:25 +0000
ROA not after:            Fri 30 Jul 2027 14:17:25 +0000
asID:                     275792
IP address blocks:        2801:81:280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/419DC989B6F029CDA367862EEF9D0E5CED54F948.crl
                          rsync://rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/419DC989B6F029CDA367862EEF9D0E5CED54F948.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/419DC989B6F029CDA367862EEF9D0E5CED54F948.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1f:19:66:f0:c9:85:92:c4:1f:ab:2f:7a:bb:e3:be:d2:8d:ea:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419DC989B6F029CDA367862EEF9D0E5CED54F948
        Validity
            Not Before: Jul 31 14:12:25 2026 GMT
            Not After : Jul 30 14:17:25 2027 GMT
        Subject: CN=D86D5BFAE89A7054C9D796F44E42D74CE506C4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:7e:0c:f2:59:07:50:78:8f:da:30:85:19:
                    ce:e9:db:6d:57:d6:65:f7:1b:97:5d:63:56:31:e6:
                    8e:08:c5:49:ae:db:27:d2:66:28:b1:b4:11:17:0a:
                    d9:3f:4e:ac:88:3f:79:8b:50:6b:3b:a1:00:af:cb:
                    51:a1:d0:81:54:43:78:8d:d8:00:f3:a9:44:a9:db:
                    5f:59:bf:54:27:8c:90:28:a6:e1:06:96:b3:24:ac:
                    fd:74:55:08:0b:55:c3:65:c2:bc:da:ae:72:f3:0f:
                    c1:34:bb:5d:01:75:39:23:1f:d0:4c:62:e0:ad:e9:
                    f8:b0:af:f2:68:05:46:1d:2a:2f:a1:97:9e:f4:b5:
                    f5:48:6a:3c:cc:df:8e:e5:5a:f7:20:4a:85:fd:46:
                    bc:65:a8:61:32:cb:db:11:d2:a9:ad:b5:15:aa:c3:
                    f9:5f:66:01:da:7e:ce:ea:da:c4:06:28:35:52:93:
                    19:59:dd:da:51:df:46:a0:84:bb:a2:97:9f:f7:71:
                    79:a9:27:d1:cf:6e:51:e4:14:ea:f1:d2:cb:8d:0a:
                    43:d1:1b:66:65:f1:e5:cc:a5:6c:dd:22:f6:a5:bf:
                    49:d8:92:12:85:4f:f2:8d:50:0d:49:b4:c5:2e:e4:
                    7c:af:9f:bc:42:3a:96:1f:ab:e3:9c:d6:3c:f6:40:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6D:5B:FA:E8:9A:70:54:C9:D7:96:F4:4E:42:D7:4C:E5:06:C4:A9
            X509v3 Authority Key Identifier:
                keyid:41:9D:C9:89:B6:F0:29:CD:A3:67:86:2E:EF:9D:0E:5C:ED:54:F9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/419DC989B6F029CDA367862EEF9D0E5CED54F948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/419DC989B6F029CDA367862EEF9D0E5CED54F948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cu65CZgP9Ta3yEDnHTxfnxXEa3j9tBS28WW9muagbEy8/0/323830313a38313a3238303a3a2f34382d3438203d3e20323735373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:280::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:a6:ba:53:6c:87:c6:a6:04:a0:36:b9:07:ae:73:5a:b0:
         4e:20:37:e8:86:cf:fd:e5:28:3d:b5:a4:33:40:45:07:71:2f:
         8a:0c:00:bd:ff:26:d8:a2:99:6e:b8:a3:b2:fe:4c:01:3c:64:
         8e:55:27:44:99:9a:9e:99:22:45:fe:c0:5a:3f:71:ad:ef:61:
         ff:df:f1:e3:44:af:2c:44:e2:30:a5:c1:98:90:c6:34:40:4d:
         03:63:a0:dd:3c:4e:e8:dc:ed:08:07:28:5a:47:d3:00:25:fa:
         a8:13:ef:1d:35:40:ad:1e:f8:b2:64:ac:68:9f:5c:7d:0a:e8:
         ae:1a:28:65:29:01:96:50:b4:93:df:db:98:cf:4c:00:65:b4:
         8b:00:de:33:7a:fd:3c:a7:e1:83:c8:19:68:5e:2f:e0:90:ca:
         7e:6e:11:40:15:be:cf:55:1e:20:b6:72:11:4e:f2:da:e6:60:
         6c:18:3f:54:75:69:50:15:bc:b7:f0:db:41:e1:41:43:83:ce:
         a7:6e:52:d4:b3:f0:23:07:ca:7f:24:60:b6:de:36:9b:d4:16:
         00:87:ee:c0:56:0c:a9:1e:72:fc:2b:84:d8:25:2d:90:56:ad:
         ff:c7:e4:f2:d1:00:29:09:bb:70:6b:86:e7:db:2a:f4:fc:b0:
         54:e4:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:12:33 2026 by rpki-client