Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a333a3a2f34382d3438203d3e20323632333031.roa
File:                     323830343a313832343a333a3a2f34382d3438203d3e20323632333031.roa (raw, json)
Hash identifier:          3S5WTxKgFONEHmuAPz0FeNlZymK9kBHXeetDBUurpuI=
Subject key identifier:   BC:FD:E2:DE:A7:97:D5:72:30:0B:17:2F:4D:DF:87:32:99:14:59:96
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       26A28B0A99EC81F97E2F71F8ADC3A2741B3FB804
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a333a3a2f34382d3438203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:30 +0000
ROA not before:           Fri 07 Aug 2026 14:01:30 +0000
ROA not after:            Fri 06 Aug 2027 14:06:30 +0000
asID:                     262301
IP address blocks:        2804:1824:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a2:8b:0a:99:ec:81:f9:7e:2f:71:f8:ad:c3:a2:74:1b:3f:b8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:30 2026 GMT
            Not After : Aug  6 14:06:30 2027 GMT
        Subject: CN=BCFDE2DEA797D572300B172F4DDF873299145996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:66:f3:82:ef:c3:75:e1:33:60:20:aa:28:
                    07:ac:25:c4:32:37:c7:5c:1a:ad:72:41:9a:d0:d2:
                    58:d1:fc:42:da:b8:e5:27:c0:cf:bc:a8:63:89:dd:
                    8b:e5:2a:94:80:04:e9:c3:38:13:d8:84:f8:a3:40:
                    ce:25:dd:38:7a:88:03:5d:f0:bb:81:3a:69:72:a6:
                    2e:e0:ae:41:b2:f4:d2:e8:36:44:b3:73:c6:37:e6:
                    70:71:0a:23:81:88:c5:4b:a5:8e:a8:2a:40:5d:85:
                    4f:02:42:09:3b:01:3c:cb:87:ee:df:45:b3:7e:6a:
                    99:5f:cc:f6:a4:a0:23:cf:4c:43:df:0f:f3:89:71:
                    99:f4:fb:89:f7:33:24:23:91:dc:e4:13:39:4c:a0:
                    38:f0:2d:4e:60:07:ba:64:f6:94:bb:61:d4:72:1f:
                    f9:24:a4:d5:b6:49:a1:b0:89:25:70:96:4e:47:d9:
                    82:9d:c6:3e:3b:16:9d:05:53:34:2e:53:0e:3a:a4:
                    d4:17:19:6c:9f:2b:de:da:5b:92:c9:7e:4b:3e:82:
                    bb:d2:43:bf:b6:01:ac:ac:30:9b:20:e7:16:4d:a3:
                    83:ad:36:1f:7b:90:ee:60:09:6b:87:ba:f0:dc:58:
                    d9:c9:07:62:34:03:ea:69:64:3e:eb:3f:94:01:ae:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:E2:DE:A7:97:D5:72:30:0B:17:2F:4D:DF:87:32:99:14:59:96
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a333a3a2f34382d3438203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1824:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:9e:48:09:45:b7:89:cd:9d:ca:61:89:c5:92:f5:a8:47:
         0e:3a:1d:c3:7e:b3:fa:76:55:2b:fb:82:80:9e:da:c1:95:06:
         96:7e:ec:99:88:f7:aa:ce:1f:b4:02:21:93:65:06:87:84:e9:
         28:9d:b4:02:e5:25:00:d4:dc:da:05:38:f4:7b:68:d5:6b:40:
         3c:c4:bc:41:84:49:f0:0c:a9:ba:22:a1:05:8d:e7:0b:56:10:
         61:ac:20:74:20:60:1b:0a:b5:fe:5c:8a:e5:bb:12:ab:7f:6b:
         2d:41:04:8e:a1:f4:9b:0c:32:76:5c:3f:49:bc:82:20:70:5f:
         df:92:2e:94:ed:41:99:97:72:2e:2f:8b:f7:05:99:66:97:72:
         5c:50:75:b4:6f:5e:97:ab:7a:0c:eb:25:9f:43:57:2f:89:a3:
         3f:db:a6:76:cf:bc:7d:28:1a:29:0d:3c:51:87:91:2c:04:ea:
         d5:83:b0:31:34:e6:c8:4b:32:ac:f2:7d:e3:25:1e:ec:76:56:
         06:a8:c6:d4:c8:e0:66:60:37:35:2f:ef:20:62:eb:89:59:34:
         a5:7d:10:b7:07:74:be:1a:c1:01:9e:27:b8:af:15:ef:70:a2:
         a1:0d:2a:3e:30:52:f2:6e:e4:29:6c:64:46:e4:dd:36:ec:73:
         58:32:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:26:55 2026 by rpki-client