Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3330313a3a2f34382d3438203d3e20323730393732.roa
File:                     323830343a373434633a3330313a3a2f34382d3438203d3e20323730393732.roa (raw, json)
Hash identifier:          8WSeiMTTqwEgq9f21v75pknXPnaOODgCvgxGU/yJ/To=
Subject key identifier:   E5:56:59:73:F6:6C:93:25:FB:58:8E:D0:33:E8:93:9E:78:55:DC:D6
Certificate issuer:       /CN=2662749C84F025E92226E07D99E4597D9B83350D
Certificate serial:       048390EF41FF57F7D24008CA98442E47A52A433E
Authority key identifier: 26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3330313a3a2f34382d3438203d3e20323730393732.roa
Signing time:             Tue 11 Aug 2026 03:56:41 +0000
ROA not before:           Tue 11 Aug 2026 03:51:41 +0000
ROA not after:            Tue 10 Aug 2027 03:56:41 +0000
asID:                     270972
IP address blocks:        2804:744c:301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:83:90:ef:41:ff:57:f7:d2:40:08:ca:98:44:2e:47:a5:2a:43:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662749C84F025E92226E07D99E4597D9B83350D
        Validity
            Not Before: Aug 11 03:51:41 2026 GMT
            Not After : Aug 10 03:56:41 2027 GMT
        Subject: CN=E5565973F66C9325FB588ED033E8939E7855DCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:80:fc:80:00:18:e9:8f:b6:2a:8a:be:e9:
                    76:52:fd:e7:19:31:ed:50:d1:b4:d4:c8:42:4e:e3:
                    44:92:ea:7f:96:b8:4c:2e:5d:81:da:98:83:01:b7:
                    3c:f9:28:a7:0b:4f:a3:2f:35:39:6b:58:9f:bc:7c:
                    9b:ab:06:76:ff:8b:c2:2d:38:19:55:86:e0:95:37:
                    3e:c4:3a:4f:a4:aa:76:48:8b:59:b1:1f:c3:c2:64:
                    f3:02:c6:47:c3:1e:06:04:eb:78:a9:00:22:af:f0:
                    15:a4:7e:a7:d0:16:d4:54:a9:e7:b0:06:c9:c6:d3:
                    90:35:96:e9:74:a0:3f:e6:c1:95:c8:63:d4:bd:50:
                    74:80:65:c5:c3:d1:3d:dd:4e:2d:70:d9:e2:a1:de:
                    a8:f9:4b:cf:8c:8a:bc:12:2e:3b:08:71:cb:2f:ef:
                    5c:91:d6:96:bc:82:2d:bd:41:da:76:83:80:9b:f1:
                    50:f9:fc:7f:80:1e:56:e0:74:7c:ef:1c:71:bd:76:
                    5b:f1:74:cb:19:68:19:3b:be:88:06:7c:41:3e:ad:
                    0e:88:9d:d4:04:a3:42:e5:98:ba:da:d1:21:37:cf:
                    a8:53:33:44:bf:09:ba:90:63:c9:24:31:5f:67:98:
                    18:39:e5:8f:16:c5:f8:4d:3b:8d:f0:b5:e2:cc:73:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:56:59:73:F6:6C:93:25:FB:58:8E:D0:33:E8:93:9E:78:55:DC:D6
            X509v3 Authority Key Identifier:
                keyid:26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3330313a3a2f34382d3438203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:744c:301::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:07:07:db:15:d8:1a:5d:cd:79:4d:a1:0f:7c:ae:48:09:
         97:b5:71:04:66:9f:ab:d8:36:70:97:9c:c4:8c:01:56:f4:df:
         89:01:44:23:c2:e5:d1:0a:fd:21:12:b0:01:fa:62:3a:90:93:
         d0:95:dd:9c:c1:3c:fe:71:54:e9:b1:7d:8b:2e:2a:dc:6f:2c:
         f0:6e:bd:d8:43:d1:9b:4c:f7:b1:69:e5:13:81:2f:33:88:43:
         d6:9b:f2:85:12:70:08:16:3b:36:02:7e:f8:d0:2a:34:9e:db:
         39:e8:51:6c:f7:91:c2:75:22:0c:09:8e:96:33:f1:0d:49:28:
         e6:3d:a2:65:8a:48:81:73:92:41:59:a5:8a:ed:9b:a7:61:d0:
         3f:2f:b0:36:c1:fb:3f:b0:40:67:9b:07:c7:d3:4c:da:74:ce:
         b5:35:02:f2:9e:11:7c:26:67:c4:7a:34:ff:b2:27:4b:60:6d:
         66:81:29:07:0e:c3:a5:50:b4:73:ce:25:2f:5f:a5:a1:30:86:
         72:a2:ab:be:61:0b:4b:ed:06:e0:d0:38:30:0c:2f:a1:8e:d4:
         bf:72:2a:61:46:6d:bb:c2:1c:ac:7b:e1:32:b8:40:72:76:60:
         14:86:ad:40:60:3f:0c:a6:5b:00:4c:f2:5a:94:dd:6c:f4:a1:
         3c:67:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 03:21:41 2026 by rpki-client