Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/323830343a333132383a3a2f33322d313238203d3e20323634393937.roa
File:                     323830343a333132383a3a2f33322d313238203d3e20323634393937.roa (raw, json)
Hash identifier:          p7EK9m6jLcXsJPD8Z5FMTwDJjhfRgDT6T1Ya2ipTgaQ=
Subject key identifier:   3A:B0:47:10:17:0C:10:51:9F:06:F4:30:8E:99:B5:37:71:8E:04:A4
Certificate issuer:       /CN=679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F
Certificate serial:       789653F87BB0EBE3C8B36E3EE60D4C2F4C47F2E4
Authority key identifier: 67:9A:CC:24:3D:2D:BF:E3:D5:F5:4F:D8:FE:F9:DD:1C:E6:64:E5:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/323830343a333132383a3a2f33322d313238203d3e20323634393937.roa
Signing time:             Thu 06 Aug 2026 10:52:04 +0000
ROA not before:           Thu 06 Aug 2026 10:47:04 +0000
ROA not after:            Thu 05 Aug 2027 10:52:04 +0000
asID:                     264997
IP address blocks:        2804:3128::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.crl
                          rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:96:53:f8:7b:b0:eb:e3:c8:b3:6e:3e:e6:0d:4c:2f:4c:47:f2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F
        Validity
            Not Before: Aug  6 10:47:04 2026 GMT
            Not After : Aug  5 10:52:04 2027 GMT
        Subject: CN=3AB04710170C10519F06F4308E99B537718E04A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:17:ec:35:86:ea:06:9f:08:f1:47:e5:b1:
                    e8:3e:7c:b8:60:ad:89:17:2d:2b:5c:60:34:7f:43:
                    3f:c2:f2:39:25:5f:44:b9:d8:b5:3c:d3:16:55:0c:
                    02:06:d9:dd:1e:a0:63:e6:44:63:40:6d:22:2c:c2:
                    4d:30:24:fa:56:52:c4:b9:dc:86:a1:81:5e:19:22:
                    f1:21:2b:b2:24:25:82:70:0a:f2:16:0e:86:84:97:
                    a7:dd:20:0e:02:1f:68:90:e1:d3:fe:f9:aa:a1:ad:
                    c9:33:ef:d5:01:f4:cd:0c:a4:47:28:e2:f8:56:93:
                    21:28:86:e9:c7:c2:58:32:32:ff:cb:96:7b:9a:fd:
                    8b:2a:46:5e:c5:60:ce:bc:2e:4a:56:e7:a1:ad:35:
                    d0:f3:d9:c1:1c:85:2d:64:e1:27:25:24:91:ad:6c:
                    f1:03:12:87:6b:60:53:6a:aa:7d:ca:cd:f6:e5:7d:
                    29:de:67:7b:1a:f7:50:07:2f:3a:42:19:64:53:a1:
                    35:78:80:a2:b4:5b:67:bf:ed:ca:33:eb:fb:54:a9:
                    0b:45:b6:9f:2e:16:48:d3:2e:e5:15:9f:1f:a2:66:
                    41:f5:97:97:33:5d:e1:97:22:22:02:c4:42:80:a0:
                    de:90:3c:45:05:3d:ef:d6:80:1c:21:67:e7:85:f2:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:47:10:17:0C:10:51:9F:06:F4:30:8E:99:B5:37:71:8E:04:A4
            X509v3 Authority Key Identifier:
                keyid:67:9A:CC:24:3D:2D:BF:E3:D5:F5:4F:D8:FE:F9:DD:1C:E6:64:E5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/679ACC243D2DBFE3D5F54FD8FEF9DD1CE664E57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiTM3waSQRuwdw4sDqvygGB2GD97bMXhuP4GsJ5eqZNW/0/323830343a333132383a3a2f33322d313238203d3e20323634393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3128::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:36:db:95:31:20:ae:08:29:98:51:77:05:a3:a1:e3:21:51:
         f8:d7:a5:7f:08:a0:e4:f5:22:96:c5:b2:f8:3b:cf:53:64:ed:
         15:9b:53:5d:82:df:8d:5b:59:2b:c7:05:3d:c8:90:dc:40:05:
         5a:99:1c:1a:80:2f:3f:23:7f:09:f1:34:5c:14:65:cc:ac:12:
         37:7d:74:7e:94:6b:cc:7c:cd:1a:c7:ee:9d:06:88:8b:42:88:
         ba:bf:6c:85:83:a3:4a:03:20:03:d5:b2:c9:6d:53:ab:15:52:
         9b:bf:29:76:ff:3a:15:c0:6a:21:29:71:b7:e1:4d:1e:6e:82:
         11:86:90:23:8b:22:75:ed:49:bc:62:a7:3c:5d:2e:d9:d2:11:
         a5:70:a8:e5:f7:3c:3e:15:08:6c:51:e6:98:51:56:f9:53:80:
         d0:3c:73:b1:11:34:be:e3:3f:3d:5d:d2:75:ed:b9:e1:42:d0:
         97:c3:da:68:63:40:86:c2:41:27:b5:69:ec:7e:1e:0e:00:fc:
         89:a3:4a:45:12:af:00:ea:d9:09:ec:96:7b:d3:95:be:f9:16:
         a4:19:16:aa:c7:32:ed:8c:af:ac:00:1d:61:7a:ec:6c:01:de:
         90:47:63:c3:23:d7:ff:e2:21:75:de:cf:69:74:17:36:42:c3:
         01:5f:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:42 2026 by rpki-client