Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa
File:                     323830343a3134303a3a2f33322d313238203d3e203533313338.roa (raw, json)
Hash identifier:          QwFTFqEhnBK+xtJr8ArBd85hm4d1M4Y8skuEVrY1cqM=
Subject key identifier:   2A:62:2D:FA:9E:A0:36:0E:93:85:E1:13:CC:3A:8F:5C:53:8F:2E:FB
Certificate issuer:       /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
Certificate serial:       266827358A1ED28DC7703433F8920E3996F84597
Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa
Signing time:             Fri 21 Aug 2026 13:58:40 +0000
ROA not before:           Fri 21 Aug 2026 13:53:40 +0000
ROA not after:            Fri 20 Aug 2027 13:58:40 +0000
asID:                     53138
IP address blocks:        2804:140::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl
                          rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:68:27:35:8a:1e:d2:8d:c7:70:34:33:f8:92:0e:39:96:f8:45:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977
        Validity
            Not Before: Aug 21 13:53:40 2026 GMT
            Not After : Aug 20 13:58:40 2027 GMT
        Subject: CN=2A622DFA9EA0360E9385E113CC3A8F5C538F2EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:a2:81:de:72:25:4a:b8:9b:9b:5c:18:b2:
                    d8:69:1b:4d:cb:fd:ae:ea:e8:8a:e6:7d:fe:20:bd:
                    25:2c:dc:de:e9:52:30:bd:d1:1c:53:8d:82:de:64:
                    69:6f:4f:12:a6:06:1f:08:79:ee:07:a8:1a:3c:6d:
                    7f:de:b2:29:bd:70:25:a6:24:ee:95:8b:b2:5a:fd:
                    1c:bf:03:c3:0a:fc:b2:bb:10:fc:b6:38:32:ea:9e:
                    24:d1:7e:64:37:57:0d:fe:fb:af:fa:98:dd:2f:51:
                    50:97:04:d6:27:bf:b1:fe:31:56:82:73:dd:00:69:
                    dc:87:f7:31:ee:82:39:9a:41:c5:87:c1:9e:83:33:
                    78:62:59:91:24:d4:30:2e:87:eb:30:f7:b8:9f:20:
                    55:ad:cb:e6:6c:de:89:c2:dd:01:4a:80:7b:de:bc:
                    87:a2:de:2e:a3:7f:b2:4b:98:e5:7e:98:1d:19:e2:
                    f8:53:4e:80:d0:b3:6b:fe:90:5b:88:3c:e2:29:df:
                    8c:b4:cc:24:2e:2b:84:bb:a2:e4:b6:b6:2d:49:9f:
                    cd:4c:28:ac:f6:10:77:80:cf:6d:79:27:6b:0f:31:
                    bf:27:f2:66:dc:21:7d:78:22:de:be:d4:f8:79:9a:
                    a3:ef:65:cf:10:f1:22:17:59:b9:ad:20:07:55:8a:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:62:2D:FA:9E:A0:36:0E:93:85:E1:13:CC:3A:8F:5C:53:8F:2E:FB
            X509v3 Authority Key Identifier:
                keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/323830343a3134303a3a2f33322d313238203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:140::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:6d:6d:55:1e:32:c9:af:a4:90:ec:17:96:bc:8d:69:1a:
         04:78:c8:74:f7:2e:6d:fc:63:63:3f:63:d3:64:d1:0b:a3:67:
         35:bf:30:8e:02:cd:62:6f:ed:52:7c:d3:51:ad:73:d1:3f:e2:
         32:99:8a:e7:57:e5:3a:49:bf:a0:65:7b:47:2f:5b:6d:85:bf:
         66:97:88:94:20:d8:2e:0a:19:8e:0b:4c:b4:79:10:3f:fb:be:
         28:6c:ec:f5:9f:4e:c8:33:7c:29:47:fc:df:ff:49:9a:2a:00:
         fd:f5:ec:5d:40:08:23:54:fe:a3:73:65:30:2c:4e:aa:25:63:
         20:0d:7f:64:94:b7:20:60:e8:1b:54:1b:d5:29:84:2d:b4:4b:
         98:50:74:a4:ea:58:00:32:47:33:b6:11:8e:3c:5b:97:8f:9c:
         f6:b4:5e:6b:7a:de:4e:ff:fc:23:4b:cd:79:2b:b6:fa:48:ff:
         5e:ff:0a:e4:ec:51:d4:b4:71:4d:4b:bb:81:31:40:1c:b0:9c:
         2f:e2:3f:94:0f:92:d4:ae:b5:00:81:53:da:89:20:2b:2c:8a:
         5e:6b:90:00:5b:a9:36:8d:44:93:aa:4a:f6:4a:58:b3:92:d3:
         bd:e7:7e:c7:1e:04:d6:ec:61:78:fc:71:d8:20:41:1b:08:7d:
         4a:ae:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:25:13 2026 by rpki-client