Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa
File:                     323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa (raw, json)
Hash identifier:          KD0xJP8hE3HQ4BUH2PFCpbgHzoEpz2KY/gYf4D4+HDA=
Subject key identifier:   BC:F9:38:D2:2E:8E:45:A6:F6:F0:C7:D1:0C:FC:06:7C:24:B2:CD:09
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       6C863AE5028A4D4C94C3021CD7038110A955986C
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa
Signing time:             Wed 12 Aug 2026 13:04:19 +0000
ROA not before:           Wed 12 Aug 2026 12:59:19 +0000
ROA not after:            Wed 11 Aug 2027 13:04:19 +0000
asID:                     271111
IP address blocks:        2804:766c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:86:3a:e5:02:8a:4d:4c:94:c3:02:1c:d7:03:81:10:a9:55:98:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Aug 12 12:59:19 2026 GMT
            Not After : Aug 11 13:04:19 2027 GMT
        Subject: CN=BCF938D22E8E45A6F6F0C7D10CFC067C24B2CD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:2b:1c:eb:c2:db:97:e7:2a:2d:ca:60:7b:
                    4d:0c:04:6d:24:8f:f9:8c:5f:fe:50:1e:6b:5c:61:
                    67:85:7f:d3:a7:6d:ff:ae:dc:97:6c:4d:f4:1e:c3:
                    ac:68:b8:c9:75:a2:6e:de:ff:ff:f4:46:29:d3:2c:
                    e1:62:7e:05:e6:90:a9:27:cf:f8:cd:d6:ee:19:62:
                    62:48:f1:49:63:2d:7b:98:23:9f:a3:f0:53:b6:2d:
                    41:f1:1d:05:50:24:76:fa:87:37:21:1c:3c:7e:5f:
                    8c:42:b1:6f:3a:64:1d:64:09:be:07:16:6a:30:1c:
                    53:b7:30:6b:93:ff:c0:06:24:fd:c7:1e:ea:41:f0:
                    f0:d2:91:a1:90:68:73:87:6a:20:b6:3a:9a:3a:7c:
                    aa:d5:1e:a9:c8:96:ac:c9:f6:b6:58:6b:1f:3b:08:
                    9a:d8:6d:b4:37:78:fb:43:86:ad:97:61:25:3f:c5:
                    ee:59:e3:4f:3b:3b:0f:0e:16:4d:42:71:f4:00:e8:
                    e9:1c:d6:41:96:96:73:b4:9a:31:5c:e5:6f:e9:07:
                    6a:fb:db:8a:7d:ff:80:af:24:46:30:23:c6:6d:81:
                    88:dc:c4:09:cc:9f:24:61:d7:24:31:a0:61:9b:fe:
                    6d:86:ab:41:e0:ba:60:e2:ef:48:ae:4b:83:8f:cc:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F9:38:D2:2E:8E:45:A6:F6:F0:C7:D1:0C:FC:06:7C:24:B2:CD:09
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/323830343a373636633a633030303a3a2f33342d3334203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:766c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         8e:ab:5a:94:7d:c0:67:10:a4:9a:62:1d:ce:c2:75:b8:b0:e9:
         f9:c2:59:0b:21:d2:44:d5:cf:e2:47:5b:91:3a:df:2b:68:a4:
         98:30:a0:8b:1a:c6:51:f8:6c:e7:97:fc:ce:84:25:0d:0d:42:
         6a:6c:53:98:ca:fd:c8:4c:97:05:81:15:74:df:67:6b:9a:d2:
         dc:06:64:0f:92:fd:f3:82:b1:32:a5:86:dd:64:3d:37:14:03:
         7e:94:3d:2d:42:21:59:2c:b4:40:57:20:28:e9:77:09:e3:57:
         5e:1c:27:ea:e9:68:29:fc:2e:65:36:92:64:02:cb:c5:d2:6e:
         68:47:f3:ca:c7:a1:f4:67:8e:8c:6d:65:c0:cd:73:b9:c9:43:
         53:2d:ad:87:7f:bd:47:e0:70:92:3f:67:02:f4:bb:66:f8:cf:
         55:ef:15:c4:dd:bf:4d:5a:53:86:1d:cf:95:8c:23:a7:6d:ce:
         99:74:6b:69:88:86:fd:d9:36:80:09:3a:6c:e2:c5:09:f2:dc:
         cd:b9:02:65:e3:86:cc:95:96:6b:e9:2d:5e:03:6d:54:99:2f:
         3e:51:df:6a:75:94:cb:40:8a:fe:b8:1b:9e:52:8e:5d:44:5a:
         e2:78:64:90:6e:fa:91:51:73:43:46:ca:06:4b:19:3b:1d:32:
         0a:23:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:24:24 2026 by rpki-client