Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a313a3a2f34382d3438203d3e20323632333031.roa
File:                     323830343a313832343a313a3a2f34382d3438203d3e20323632333031.roa (raw, json)
Hash identifier:          6EF5ESkrLR4h75hRlwOcO4zeBGen716TXvHrabzdpdw=
Subject key identifier:   51:EA:BB:19:7F:17:9C:48:7F:04:98:50:3D:2A:A1:0A:A5:C6:16:3A
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       0AFE9EC56335236FCC8F97729366CCB322A59BBB
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a313a3a2f34382d3438203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:29 +0000
ROA not before:           Fri 07 Aug 2026 14:01:29 +0000
ROA not after:            Fri 06 Aug 2027 14:06:29 +0000
asID:                     262301
IP address blocks:        2804:1824:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 15:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fe:9e:c5:63:35:23:6f:cc:8f:97:72:93:66:cc:b3:22:a5:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:29 2026 GMT
            Not After : Aug  6 14:06:29 2027 GMT
        Subject: CN=51EABB197F179C487F0498503D2AA10AA5C6163A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:ec:d7:10:e4:ba:7f:a9:40:d0:a2:be:e6:
                    47:9c:c6:10:47:fd:b3:ed:a4:f0:91:5a:f1:fb:49:
                    f9:5b:b4:70:b5:e3:c8:8d:50:b9:b0:9e:d5:e8:72:
                    8d:e2:35:c1:98:90:63:dd:86:fe:aa:a3:28:d5:af:
                    ad:4f:05:63:0b:5b:14:3b:62:37:da:61:01:1f:44:
                    2c:8d:3a:63:8b:a5:57:32:48:93:ac:cf:f3:d0:a8:
                    47:0a:b3:38:46:4f:3d:66:b9:a9:40:a2:b9:e9:2c:
                    de:15:2a:df:37:8b:cd:cd:40:72:a7:a5:43:92:25:
                    0a:16:5a:27:c2:a4:8f:97:6f:d4:58:97:3a:5d:b3:
                    03:f8:eb:0d:a1:40:d9:30:cb:fa:21:be:d0:9b:3c:
                    5c:c7:97:df:71:2a:cf:5f:67:81:7a:20:74:5e:50:
                    a5:86:a1:ed:6c:5a:7a:3f:be:a9:19:e7:04:16:eb:
                    71:6e:1d:e2:96:97:f6:6e:b3:76:12:cb:02:1d:61:
                    0b:05:05:08:16:93:60:1d:a8:b6:34:44:dd:08:0c:
                    f7:53:93:a6:79:07:77:42:eb:a3:89:1d:e0:97:2a:
                    47:96:af:e5:33:fd:e1:22:b2:2d:b1:7f:57:d1:b6:
                    a5:b8:32:b4:3c:5d:e6:89:52:ee:24:94:49:b4:bf:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EA:BB:19:7F:17:9C:48:7F:04:98:50:3D:2A:A1:0A:A5:C6:16:3A
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a313a3a2f34382d3438203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1824:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:57:6d:0a:4e:4f:e3:88:1d:d2:53:11:af:ec:01:0c:5b:
         10:4a:8c:20:eb:d3:e8:8d:94:64:2e:44:77:b2:65:06:81:19:
         b7:f0:dc:24:b9:63:77:ca:76:d7:ad:bd:27:32:e4:91:fa:8a:
         c7:b8:0f:7b:32:a3:77:21:b1:4f:4d:f6:fe:35:93:fb:b6:86:
         e0:5e:e6:94:3e:bc:65:64:dd:5f:bb:88:ed:7c:84:bd:bf:fc:
         96:22:3d:38:9d:f6:17:ff:7c:be:53:f0:91:df:73:6c:81:30:
         a4:a9:45:b2:1f:29:1d:ec:f9:f4:19:9f:4d:51:30:40:08:29:
         c9:b7:1a:73:52:95:94:5b:ce:bf:03:d3:8f:75:43:70:fa:a5:
         61:5e:bf:5a:ea:21:7e:8d:4e:08:5a:53:d8:55:6c:22:70:ac:
         8d:07:e8:8e:9a:5e:8d:99:c0:48:d5:27:31:4e:82:29:be:29:
         0a:cf:1f:35:9d:fd:18:99:a2:7d:0f:0f:a4:97:4f:4d:d5:41:
         3f:3e:4b:6b:d7:8a:eb:ef:19:f6:13:92:72:59:76:f2:0b:a1:
         23:fc:fb:0c:aa:61:ae:b8:b9:14:55:ec:fc:82:77:ba:c2:9b:
         67:46:af:0f:43:73:7e:de:5b:22:89:2e:88:34:b9:d6:95:14:
         1f:30:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:04 2026 by rpki-client