Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33322d313238203d3e20323634333230.roa
File:                     323830343a323630633a3a2f33322d313238203d3e20323634333230.roa (raw, json)
Hash identifier:          ya/ynSeifJ0xH1VrsxY/P13jqsrWId1bKknPTRBIO+Q=
Subject key identifier:   14:FE:34:62:8A:71:B4:8C:8C:1C:69:F9:B9:47:EA:88:50:68:B2:64
Certificate issuer:       /CN=C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27
Certificate serial:       094AA44FCC818B9C39EA0C0810F557A50CE0339C
Authority key identifier: C5:AE:7C:0D:6A:16:CF:FF:60:7A:B7:D7:A4:17:7C:39:3A:B5:AD:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33322d313238203d3e20323634333230.roa
Signing time:             Wed 05 Aug 2026 13:58:17 +0000
ROA not before:           Wed 05 Aug 2026 13:53:17 +0000
ROA not after:            Wed 04 Aug 2027 13:58:17 +0000
asID:                     264320
IP address blocks:        2804:260c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.crl
                          rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 16:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4a:a4:4f:cc:81:8b:9c:39:ea:0c:08:10:f5:57:a5:0c:e0:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27
        Validity
            Not Before: Aug  5 13:53:17 2026 GMT
            Not After : Aug  4 13:58:17 2027 GMT
        Subject: CN=14FE34628A71B48C8C1C69F9B947EA885068B264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:be:2e:dd:22:c6:0e:0d:d1:d1:42:7b:72:
                    45:cb:e4:91:6f:84:fa:1c:4f:eb:40:fd:13:72:33:
                    24:39:13:69:4c:c2:ad:45:1d:83:7f:ce:45:3e:4d:
                    e9:f6:39:26:77:9f:ad:29:73:60:25:ce:4a:22:a5:
                    22:c1:f3:87:e5:b0:c5:79:54:c7:66:ce:0b:8c:37:
                    2f:16:b5:2e:a7:d5:3f:42:cd:e0:81:2c:bc:88:4d:
                    06:85:47:55:f7:8b:3c:d9:82:f0:45:77:6e:64:63:
                    82:0e:49:7a:a2:a9:38:b0:7f:cd:02:28:c7:ef:12:
                    78:d4:09:5f:8e:12:bb:3a:66:ea:1b:76:e0:ba:b5:
                    ac:49:a0:12:3c:19:ba:77:37:d5:0e:66:12:c2:04:
                    61:7b:8a:b8:11:49:34:dd:51:38:9b:eb:32:19:fb:
                    b4:b6:2d:dc:c7:4d:74:91:e5:9b:74:67:ea:2c:e2:
                    b1:df:c9:29:f4:d4:42:14:8c:1d:46:ee:49:86:99:
                    c5:19:41:5a:e8:74:9e:ca:08:eb:4a:c4:2d:51:06:
                    64:6f:e0:f3:cf:5c:35:05:af:4b:d2:e0:75:db:39:
                    b5:5e:93:3d:b2:c5:e3:c2:77:cc:19:08:b0:61:7d:
                    23:85:da:a6:0b:fa:ba:7a:91:38:5f:d9:79:1b:1b:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:34:62:8A:71:B4:8C:8C:1C:69:F9:B9:47:EA:88:50:68:B2:64
            X509v3 Authority Key Identifier:
                keyid:C5:AE:7C:0D:6A:16:CF:FF:60:7A:B7:D7:A4:17:7C:39:3A:B5:AD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5AE7C0D6A16CFFF607AB7D7A4177C393AB5AD27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/323830343a323630633a3a2f33322d313238203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:260c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:1b:48:8f:5d:66:e1:e3:62:ba:9c:25:fe:23:ae:0b:56:53:
         95:9b:04:d1:43:e4:06:23:24:b3:b0:75:dd:89:c8:5d:3d:ec:
         14:e2:2e:98:20:33:14:5b:af:f6:37:1f:92:36:ea:bd:7c:51:
         0c:a2:70:ef:e7:08:20:13:20:c8:13:0a:0e:de:49:4f:24:15:
         57:8c:52:65:b3:dc:8c:ed:be:90:12:e8:a1:21:07:a1:a1:c4:
         19:e3:6d:2e:12:da:48:31:a9:39:e2:4d:68:f5:ba:07:3b:ee:
         21:a4:ca:6c:8d:30:0a:99:00:df:11:09:1f:d3:0e:d0:75:6e:
         4e:db:be:b6:df:27:37:f6:57:59:0b:db:65:7a:42:10:96:94:
         cd:da:17:3a:1b:e5:f2:93:cc:65:68:c3:10:aa:ac:bd:9a:d8:
         d3:f5:f4:18:f4:21:26:e2:62:d6:37:4e:4c:bb:1a:28:38:74:
         7f:54:03:b0:e2:e3:ba:3f:ff:13:7b:53:20:3a:87:e1:e6:18:
         54:19:08:fb:92:8a:2f:94:5b:61:0f:57:d7:87:d4:93:04:fa:
         28:d4:ef:e3:7a:db:fa:86:e3:f5:70:35:a5:6b:16:16:c7:56:
         7d:a0:f0:dc:0a:e5:a2:a9:e9:04:35:0c:70:08:74:cc:da:2c:
         4b:c8:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:43:11 2026 by rpki-client