Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/323830343a313165343a3a2f33322d3634203d3e203532393435.roa
File:                     323830343a313165343a3a2f33322d3634203d3e203532393435.roa (raw, json)
Hash identifier:          Ommu78+1L+dgETOB/XTHKAfXSdjycNvmGx+29yVtYi0=
Subject key identifier:   7F:C9:CF:38:64:C7:2E:FA:15:8D:6E:A9:B3:94:6C:B9:93:6C:9F:1E
Certificate issuer:       /CN=C264FB166D810B0B079997649A78C2454ECCCB7F
Certificate serial:       70B3C4C2982E2A21AB7BA489CF039A396F78B58B
Authority key identifier: C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/323830343a313165343a3a2f33322d3634203d3e203532393435.roa
Signing time:             Fri 14 Aug 2026 20:29:27 +0000
ROA not before:           Fri 14 Aug 2026 20:24:27 +0000
ROA not after:            Fri 13 Aug 2027 20:29:27 +0000
asID:                     52945
IP address blocks:        2804:11e4::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl
                          rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b3:c4:c2:98:2e:2a:21:ab:7b:a4:89:cf:03:9a:39:6f:78:b5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C264FB166D810B0B079997649A78C2454ECCCB7F
        Validity
            Not Before: Aug 14 20:24:27 2026 GMT
            Not After : Aug 13 20:29:27 2027 GMT
        Subject: CN=7FC9CF3864C72EFA158D6EA9B3946CB9936C9F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:56:ec:7f:cc:3d:12:e0:80:a4:89:8d:68:
                    14:b0:25:28:f6:cc:2e:33:f0:17:36:23:8d:2e:22:
                    c5:2d:24:55:e4:1d:ef:19:4d:9c:66:09:36:c8:e9:
                    1e:6d:91:90:ea:13:63:68:00:f5:fc:08:2d:e4:44:
                    ce:71:74:bf:40:ba:d5:2d:70:83:a3:9c:6b:bc:2e:
                    dc:ba:00:d2:26:b3:5e:da:fd:ff:e7:42:6b:ac:16:
                    f6:8d:68:de:d4:37:9c:af:92:25:fc:dd:fc:10:06:
                    f7:fd:33:8b:53:d8:fe:2b:da:99:e1:c0:a2:95:0c:
                    19:c9:41:ed:68:e2:18:6b:a4:74:13:10:7f:bd:b6:
                    bc:c1:b3:49:dc:61:f5:c8:24:9c:0c:16:48:77:34:
                    45:cc:60:f5:4c:81:bb:d1:d0:e5:90:3d:92:ae:51:
                    e8:1b:d0:19:d9:f0:6f:7c:92:46:d3:1f:00:63:6a:
                    e0:18:91:ad:5c:76:3c:5e:96:97:79:4b:c4:5e:d7:
                    f1:39:2b:04:ad:f3:d1:99:6d:11:10:bf:6d:84:49:
                    e6:01:49:7b:13:86:86:f7:89:22:f4:8c:d4:c6:40:
                    06:b2:eb:48:1c:69:b1:66:81:40:17:ca:ec:a4:c6:
                    aa:bd:68:dc:47:e6:5e:ea:61:96:f0:8c:07:6b:23:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:CF:38:64:C7:2E:FA:15:8D:6E:A9:B3:94:6C:B9:93:6C:9F:1E
            X509v3 Authority Key Identifier:
                keyid:C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/323830343a313165343a3a2f33322d3634203d3e203532393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:78:f8:c8:0d:7a:61:a2:73:e7:f7:38:de:2c:80:6b:e1:b1:
         4b:ce:94:d2:b6:14:3c:8b:dd:03:90:77:0c:f2:63:78:81:d1:
         91:5d:5a:b3:35:6c:d2:be:88:7f:0c:dc:b1:98:8e:60:b2:ca:
         68:71:a6:dc:73:77:5d:76:1a:ba:0e:9e:f8:ae:84:b0:a9:67:
         71:ce:73:9f:a1:bb:61:33:f5:de:7f:eb:e1:3a:51:15:c3:e8:
         e6:9e:31:6e:12:7e:9e:79:86:98:58:12:a7:4f:41:d2:eb:32:
         58:88:07:6c:92:28:24:30:4f:d1:a7:7d:6f:1d:7a:80:d4:23:
         90:13:c3:ce:51:e9:3b:ab:c5:f0:c7:00:98:f0:b4:fc:bd:a2:
         6d:de:ce:b2:a2:3f:24:eb:f3:11:b7:da:ff:93:18:26:c6:50:
         40:c2:8d:8e:57:1e:d4:05:a4:67:f8:0f:df:f8:1e:2d:d4:62:
         fc:a7:45:6d:8c:8f:61:f7:c6:6d:0a:8f:7b:05:65:d2:ca:4f:
         19:63:08:5e:6d:d6:d8:10:86:07:69:94:4c:fb:d1:09:ce:64:
         d8:da:b8:8c:5e:a2:8d:87:9d:9c:55:58:0d:32:9f:38:e9:53:
         dc:1e:46:b1:56:02:fb:13:91:d0:ba:7f:9f:b4:1c:33:98:b1:
         d4:e7:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:23:34 2026 by rpki-client