Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636303434.roa
File:                     323830343a343639343a3a2f33322d3438203d3e20323636303434.roa (raw, json)
Hash identifier:          g/zcEw4Gr2q48mD2rQ6jU+jMpog9D5YYXXIMabKkdeE=
Subject key identifier:   E7:4C:F1:36:5A:C4:AB:87:5C:1B:23:79:7E:28:89:04:F4:56:A4:46
Certificate issuer:       /CN=F4E8326758C25B3EC9DB8F538ABF484174DD0A9E
Certificate serial:       213D4EF1AB86A7D9304BC7C629019ED18C0E39F6
Authority key identifier: F4:E8:32:67:58:C2:5B:3E:C9:DB:8F:53:8A:BF:48:41:74:DD:0A:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636303434.roa
Signing time:             Wed 05 Aug 2026 16:59:35 +0000
ROA not before:           Wed 05 Aug 2026 16:54:35 +0000
ROA not after:            Wed 04 Aug 2027 16:59:35 +0000
asID:                     266044
IP address blocks:        2804:4694::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.crl
                          rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:4e:f1:ab:86:a7:d9:30:4b:c7:c6:29:01:9e:d1:8c:0e:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4E8326758C25B3EC9DB8F538ABF484174DD0A9E
        Validity
            Not Before: Aug  5 16:54:35 2026 GMT
            Not After : Aug  4 16:59:35 2027 GMT
        Subject: CN=E74CF1365AC4AB875C1B23797E288904F456A446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:b0:06:10:27:09:f3:0f:9c:e7:20:3f:04:
                    eb:59:04:3b:27:f6:ef:e8:01:8e:0e:9d:92:ad:52:
                    73:77:c7:86:76:95:62:aa:1c:4b:d0:13:5b:f9:08:
                    e4:7d:22:a7:1e:5f:51:2a:3a:1a:e6:e0:31:fd:e8:
                    b1:12:31:4b:2c:05:11:c3:20:a6:01:7d:41:d1:44:
                    99:fb:06:57:c1:0e:bb:86:17:5a:e0:fd:09:f5:59:
                    bc:8d:54:af:5b:a8:d2:f3:6b:c1:59:6a:f4:da:b4:
                    20:a5:c6:0b:a8:5e:e3:7d:08:ff:3e:9a:e8:13:c0:
                    a0:c1:f4:fa:f6:a7:8f:6e:bb:b3:f4:8a:e5:40:ae:
                    c4:16:0f:14:41:00:02:a3:7c:13:46:c1:eb:2e:4b:
                    d4:6f:56:d0:d9:0e:a7:40:b3:5e:d6:42:c1:19:19:
                    da:c8:3b:a7:31:c4:c3:07:65:ec:02:3b:01:2f:df:
                    08:24:26:94:e8:1d:c1:54:ef:bb:15:7d:27:14:5b:
                    ef:ce:8a:14:d9:86:5e:98:02:2a:ea:90:69:72:c3:
                    b5:f0:9e:9c:a1:a7:71:96:b1:c6:cd:28:aa:93:9c:
                    44:1e:c7:b8:05:4f:77:43:db:3a:de:0f:63:a8:e8:
                    e0:6b:7e:15:bc:cc:bb:49:ac:cb:28:d7:2e:2c:c1:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4C:F1:36:5A:C4:AB:87:5C:1B:23:79:7E:28:89:04:F4:56:A4:46
            X509v3 Authority Key Identifier:
                keyid:F4:E8:32:67:58:C2:5B:3E:C9:DB:8F:53:8A:BF:48:41:74:DD:0A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4E8326758C25B3EC9DB8F538ABF484174DD0A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/0/323830343a343639343a3a2f33322d3438203d3e20323636303434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4694::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:9d:02:88:0b:ed:58:be:0e:07:63:34:6b:02:b3:97:7e:
         29:af:cb:f2:ac:4b:09:7f:80:77:20:02:d8:7a:4c:be:55:87:
         aa:77:63:00:35:e5:a6:a2:fc:ea:8d:0d:1d:be:49:8d:5c:5c:
         ea:60:49:00:e1:27:af:8e:3f:2e:e7:29:de:fc:2c:07:65:fa:
         e7:52:94:eb:9e:09:d3:a1:85:c3:29:bd:72:83:3f:5e:27:67:
         67:48:a4:3c:ea:41:70:28:7c:b1:5d:0b:a5:8f:0e:55:79:9c:
         5d:95:d5:5a:39:80:9f:78:86:9a:ad:f3:03:3a:13:df:d0:be:
         b4:9b:03:a8:ca:9d:ef:5b:d8:24:a2:d7:e3:ee:5f:c5:17:8c:
         0f:bc:45:cb:cd:51:5e:18:2f:a5:e8:64:11:c2:7b:5e:6f:84:
         72:9b:a2:84:c8:8f:8e:9d:21:99:1e:93:cc:55:f5:fd:b1:da:
         0a:b1:d6:75:a9:80:64:a3:81:e7:61:71:7f:d4:5a:3a:93:29:
         b4:54:8c:f9:dc:be:f9:36:f8:73:56:58:b8:77:e5:c1:e4:5d:
         85:8f:3c:6a:7a:3e:af:1c:31:1d:b0:65:99:b3:c6:bc:11:3b:
         d9:95:1b:b4:eb:6a:14:ac:2a:94:4c:9e:07:5d:48:73:fc:40:
         d1:e8:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:31:20 2026 by rpki-client