Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/323830343a333238383a3a2f33322d313238203d3e203532383237.roa
File:                     323830343a333238383a3a2f33322d313238203d3e203532383237.roa (raw, json)
Hash identifier:          llTM3ut3XM/mNSGow8HoU0l+2p2gjZmykDeorjkZlF0=
Subject key identifier:   48:F7:08:E8:14:BC:E4:64:8A:CD:6C:49:36:49:B7:B7:9C:64:86:3A
Certificate issuer:       /CN=5A98F4FF217501200D2C8EBD339154643172DC4A
Certificate serial:       363F391F5DDCB2D9E369217E35A02BD9C4CAF1F7
Authority key identifier: 5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/323830343a333238383a3a2f33322d313238203d3e203532383237.roa
Signing time:             Wed 26 Aug 2026 19:41:50 +0000
ROA not before:           Wed 26 Aug 2026 19:36:50 +0000
ROA not after:            Wed 25 Aug 2027 19:41:50 +0000
asID:                     52827
IP address blocks:        2804:3288::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl
                          rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3f:39:1f:5d:dc:b2:d9:e3:69:21:7e:35:a0:2b:d9:c4:ca:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A98F4FF217501200D2C8EBD339154643172DC4A
        Validity
            Not Before: Aug 26 19:36:50 2026 GMT
            Not After : Aug 25 19:41:50 2027 GMT
        Subject: CN=48F708E814BCE4648ACD6C493649B7B79C64863A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:d6:c5:fe:e3:38:8a:04:ca:aa:ce:a9:67:
                    03:2c:7d:fd:63:42:b4:4e:c7:9e:10:d5:ea:d6:f6:
                    f7:11:98:cb:1c:f5:10:a2:3e:1e:b5:96:4f:62:57:
                    d9:a0:3e:1d:5b:d9:9a:43:e2:1f:b7:67:35:68:56:
                    8a:2a:8c:81:40:fa:6d:33:ef:c8:f9:d5:7b:d7:7a:
                    da:38:63:f7:06:b5:60:00:43:0a:b9:45:7a:4d:11:
                    31:6f:34:43:21:ba:29:15:65:fa:af:7a:5d:cb:7b:
                    bd:2e:52:b1:4f:a5:8b:e9:c3:bc:1b:79:58:dd:a5:
                    07:57:36:6f:6d:0f:46:9d:d1:18:29:cc:0b:ea:32:
                    ef:a8:00:4b:67:58:e5:00:d5:84:bf:23:b7:69:c4:
                    c4:a0:ab:7f:6e:fe:b9:ed:cf:d6:dc:64:31:e3:2e:
                    1f:a4:90:f7:2c:98:cb:eb:f3:a7:f3:e1:f2:f3:a4:
                    9e:fc:8e:73:19:c0:a0:c0:e4:5e:5b:8b:7a:c5:5d:
                    af:f4:f0:7e:e9:09:54:56:11:aa:66:b5:05:e1:c5:
                    72:d8:f5:00:ad:7e:4f:12:d1:9d:0f:f5:56:4d:94:
                    4e:8f:93:f6:ab:f9:8c:13:d3:6e:01:f7:64:2b:aa:
                    8b:7e:17:81:33:20:6c:29:9a:1d:df:bd:96:de:c6:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:08:E8:14:BC:E4:64:8A:CD:6C:49:36:49:B7:B7:9C:64:86:3A
            X509v3 Authority Key Identifier:
                keyid:5A:98:F4:FF:21:75:01:20:0D:2C:8E:BD:33:91:54:64:31:72:DC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/5A98F4FF217501200D2C8EBD339154643172DC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A98F4FF217501200D2C8EBD339154643172DC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b9qNCJMpBjkGoJuC3hgvZVpUyTVmd1SsLgbjnzomtd/0/323830343a333238383a3a2f33322d313238203d3e203532383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3288::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:78:25:39:bf:cc:35:48:ae:93:8b:cc:a0:36:f2:d7:e0:45:
         f2:3b:e6:51:96:e4:9e:4e:90:18:cb:02:a4:de:b9:60:42:5d:
         06:35:2d:b7:07:85:c3:d0:5d:0f:37:cb:b3:8f:23:f2:50:5d:
         cf:0c:f5:39:57:82:52:7f:ae:91:45:4a:c5:e1:51:97:74:f7:
         8f:de:6d:20:79:3a:2d:24:c3:26:86:46:6c:ee:be:e0:da:e0:
         df:1e:c1:1d:b1:a7:48:23:1e:bc:b2:ab:7c:bd:6b:d9:b2:91:
         2c:bc:6e:9a:76:fd:01:f0:e1:00:01:7c:84:fb:8b:fb:61:bb:
         6b:92:9a:ca:7f:d4:8b:ed:68:4d:c6:18:60:4d:22:90:1b:02:
         25:3a:4b:3a:fc:a4:5a:6f:d8:2e:f4:42:ce:72:83:89:34:09:
         fd:9e:1b:2b:09:af:17:7b:26:67:44:e6:24:2c:9c:e1:5c:bc:
         6f:05:fb:ab:14:a0:aa:21:79:90:80:eb:b9:a0:07:4b:2d:a4:
         a8:80:95:5d:81:ef:82:82:68:71:aa:0b:2d:e9:2a:72:12:ea:
         8a:b8:36:d7:c3:b4:86:02:04:88:75:24:9d:1d:1c:e9:56:1f:
         e5:6a:7b:f9:4f:fe:d6:ec:be:a6:a4:08:6a:72:af:f8:53:84:
         12:b4:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:59:52 2026 by rpki-client