Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3430303a3a2f34302d3430203d3e20323730393732.roa
File:                     323830343a373434633a3430303a3a2f34302d3430203d3e20323730393732.roa (raw, json)
Hash identifier:          G88FzuvDCF0ymgQTACDKbokKah68jRC7B/8mR5t/g34=
Subject key identifier:   D1:C8:F9:AA:92:9A:BE:53:1C:67:86:7D:52:9D:48:22:AB:85:4B:58
Certificate issuer:       /CN=2662749C84F025E92226E07D99E4597D9B83350D
Certificate serial:       44326942F987D35F71F924B68092D02C097F5A1F
Authority key identifier: 26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3430303a3a2f34302d3430203d3e20323730393732.roa
Signing time:             Tue 11 Aug 2026 03:56:41 +0000
ROA not before:           Tue 11 Aug 2026 03:51:41 +0000
ROA not after:            Tue 10 Aug 2027 03:56:41 +0000
asID:                     270972
IP address blocks:        2804:744c:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:32:69:42:f9:87:d3:5f:71:f9:24:b6:80:92:d0:2c:09:7f:5a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662749C84F025E92226E07D99E4597D9B83350D
        Validity
            Not Before: Aug 11 03:51:41 2026 GMT
            Not After : Aug 10 03:56:41 2027 GMT
        Subject: CN=D1C8F9AA929ABE531C67867D529D4822AB854B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:72:74:72:b9:a5:ce:02:48:e4:f4:04:38:
                    26:e7:01:7c:8e:7c:18:18:06:ae:71:87:65:c9:5c:
                    df:d1:77:2d:3f:1c:6f:97:98:08:32:b6:39:5f:33:
                    91:5e:48:c8:a8:e3:80:95:73:50:6f:81:39:0e:3f:
                    d4:24:a1:7e:52:ce:b2:db:32:21:0a:5f:5a:5b:78:
                    11:48:91:e1:0e:11:c5:71:11:9e:43:e3:bc:3e:a5:
                    f3:81:cb:2e:df:2f:56:02:69:bd:c3:44:28:27:3d:
                    60:83:8a:1d:1e:03:fa:a8:2b:14:e7:a3:69:7c:4e:
                    bd:ce:91:2f:d9:9a:58:70:35:c1:e2:04:fa:85:7f:
                    1e:19:bf:9f:38:f3:5e:0b:1c:89:8c:27:6a:f4:9b:
                    3e:17:c4:46:12:b8:25:ed:c4:b0:3d:35:2f:a4:d0:
                    3a:3c:65:d9:5d:cd:fb:fd:92:2a:dd:79:94:06:98:
                    45:ed:d2:d1:e1:47:95:e7:90:d4:70:75:70:f4:2d:
                    ec:a8:65:fe:b8:3e:34:52:62:84:39:1c:4f:b3:65:
                    a9:3a:69:e0:b8:be:a6:f0:98:99:a6:84:57:92:e5:
                    34:19:2e:de:4c:2a:e4:24:35:5e:80:28:38:cb:93:
                    3e:77:07:eb:b9:a5:42:85:86:07:62:f6:4e:fc:03:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C8:F9:AA:92:9A:BE:53:1C:67:86:7D:52:9D:48:22:AB:85:4B:58
            X509v3 Authority Key Identifier:
                keyid:26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3430303a3a2f34302d3430203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:744c:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:ba:f8:f6:80:73:4c:97:e3:84:e7:38:1c:45:20:76:f4:
         f0:af:66:6b:cf:a1:a8:79:37:9e:c4:27:a7:c6:5f:2b:b5:0b:
         11:6a:69:ed:39:a7:1c:3c:60:ce:93:06:73:ea:f8:21:f9:75:
         f4:42:6d:72:87:eb:cd:31:80:03:e7:66:b0:25:70:81:c6:85:
         40:8d:98:49:d7:b6:65:b2:d5:76:89:bb:32:1b:7f:f0:41:e2:
         fc:8e:3c:a2:e5:c2:e3:28:61:fd:4d:6c:c4:b7:02:70:a6:10:
         21:1f:68:ed:14:c5:01:4b:ec:c5:f2:a7:71:12:76:4e:d8:f5:
         b0:0b:28:9c:d9:0d:c4:80:cf:4c:30:00:f8:c3:09:25:a0:53:
         d7:71:7e:ed:78:0b:10:a8:34:38:87:46:76:7d:09:e3:36:5b:
         60:3f:45:b5:02:19:3b:c4:60:91:18:88:98:56:42:a7:1f:67:
         89:65:cb:7b:53:df:21:c5:86:f0:22:f0:5a:40:13:a3:ab:e3:
         d3:34:88:86:53:69:96:c8:92:72:c9:22:e0:f3:7f:cc:e3:0f:
         7e:9b:28:9e:2d:b4:c2:d7:ce:4d:94:a7:31:f7:af:5e:fd:21:
         53:43:42:fa:af:64:24:1e:55:16:34:99:4e:9e:7b:26:83:2c:
         fc:c6:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:57:12 2026 by rpki-client