Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a38313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a38313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          DeBIz8ZaCZeH60bOxVJGj75JDmHlD6lY+CeBpwVwSC0=
Subject key identifier:   22:CE:06:AA:33:D0:86:9D:E2:30:40:F2:2E:E9:60:60:E4:A0:DB:10
Certificate issuer:       /CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
Certificate serial:       297929F3C425A668BDCB64B9F243D7A09C20D20E
Authority key identifier: 1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a38313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Fri 07 Aug 2026 08:54:38 +0000
ROA not before:           Fri 07 Aug 2026 08:49:38 +0000
ROA not after:            Fri 06 Aug 2027 08:54:38 +0000
asID:                     269566
IP address blocks:        2804:6688:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:79:29:f3:c4:25:a6:68:bd:cb:64:b9:f2:43:d7:a0:9c:20:d2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F073C726C9199CA86BF0D4E073B3FAB548B1878
        Validity
            Not Before: Aug  7 08:49:38 2026 GMT
            Not After : Aug  6 08:54:38 2027 GMT
        Subject: CN=22CE06AA33D0869DE23040F22EE96060E4A0DB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:a4:f9:37:07:49:93:35:5f:de:8c:1d:c2:
                    e7:2f:5c:06:bf:a9:30:c4:16:8a:df:f6:6a:1e:12:
                    21:19:a5:ab:bb:ca:c5:7d:dd:8f:af:ac:e5:3e:8e:
                    3e:cb:12:6f:0f:49:69:24:ed:c7:46:4f:db:ac:0e:
                    27:51:8d:af:d4:d8:cc:e5:74:0b:b7:40:f1:c4:2a:
                    2c:d7:52:27:2e:f8:59:ab:db:9a:28:b2:57:68:ec:
                    51:32:05:de:0b:47:d0:e5:2a:11:94:c5:55:81:00:
                    9c:45:a7:18:aa:17:30:13:21:99:1b:f5:c9:3c:7a:
                    10:18:b0:c2:b6:8f:c1:c0:a7:53:43:c8:2c:b6:0e:
                    61:e3:af:de:bb:5d:71:b4:5c:1e:f0:9d:68:6e:5d:
                    b3:cb:6c:f0:6b:69:bc:6d:d6:22:e6:a3:15:03:10:
                    a6:5f:b1:59:2f:98:b4:14:75:6d:23:03:70:dd:63:
                    e0:ab:31:e5:ea:f3:da:ce:7d:35:72:55:8f:9e:6c:
                    75:3b:d1:ea:cd:9f:d5:c3:8a:c2:cf:5f:a2:ea:5d:
                    4a:57:c0:92:07:45:e0:f9:0f:3a:a6:d9:6f:9c:bd:
                    83:e8:63:a5:fa:15:53:cc:b0:7d:c8:07:dd:d2:c4:
                    e3:05:e4:3e:79:08:56:87:53:dc:bb:19:8e:9e:76:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CE:06:AA:33:D0:86:9D:E2:30:40:F2:2E:E9:60:60:E4:A0:DB:10
            X509v3 Authority Key Identifier:
                keyid:1F:07:3C:72:6C:91:99:CA:86:BF:0D:4E:07:3B:3F:AB:54:8B:18:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1F073C726C9199CA86BF0D4E073B3FAB548B1878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F073C726C9199CA86BF0D4E073B3FAB548B1878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a38313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:95:e3:cb:b0:c1:e2:ed:be:67:40:7a:52:b2:77:a8:21:a3:
         6b:eb:29:14:ee:87:7c:fb:c7:6d:86:f4:bb:d8:b3:54:f3:02:
         f8:7a:d7:93:97:97:94:bc:64:a1:81:84:02:c2:4d:e3:1f:43:
         67:67:e3:56:dd:7b:43:8b:10:42:80:4c:31:77:5e:28:5b:2f:
         f0:4f:22:4a:75:ef:7a:42:3e:8b:52:fb:5a:0c:af:7b:8c:91:
         3b:15:48:8f:94:fd:df:87:16:da:87:21:bf:aa:c4:6b:03:d3:
         b1:88:e1:e1:8e:10:1e:70:1f:62:9c:7c:69:84:52:eb:c4:cb:
         bd:5f:c6:d3:93:17:2c:ad:8c:e7:60:96:0a:f5:00:16:ba:7a:
         79:e0:04:cf:58:25:90:18:bc:40:39:ba:0a:56:fc:64:a2:25:
         4c:2c:34:a0:5a:44:e2:d1:0c:8d:61:fc:02:7c:db:f4:26:66:
         68:47:19:29:61:c4:37:89:aa:59:54:68:53:f1:6f:63:39:13:
         75:4d:69:48:e5:d6:89:f5:be:05:e3:0f:56:92:91:a5:4d:4e:
         73:15:14:67:63:24:d7:25:65:bc:c8:7b:74:c3:b6:b4:32:e0:
         9d:74:77:a0:2a:40:b1:e3:f9:b6:87:2b:0f:ca:3b:99:ce:de:
         f3:d0:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:09:45 2026 by rpki-client