Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3332203d3e20323634323830.roa
File:                     323830343a323536633a3a2f33322d3332203d3e20323634323830.roa (raw, json)
Hash identifier:          csFZVBuZf7iEURvRcAuLhQDG0ECzO6T5hDCTpeVJMh8=
Subject key identifier:   A8:7D:E1:66:7C:D4:1B:7F:02:7D:18:11:31:B8:57:C3:81:20:8D:26
Certificate issuer:       /CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
Certificate serial:       270D6B10502B549AA80D285D5D4F7CC9F1A7BC2F
Authority key identifier: E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3332203d3e20323634323830.roa
Signing time:             Tue 28 Jul 2026 18:32:06 +0000
ROA not before:           Tue 28 Jul 2026 18:27:06 +0000
ROA not after:            Tue 27 Jul 2027 18:32:06 +0000
asID:                     264280
IP address blocks:        2804:256c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0d:6b:10:50:2b:54:9a:a8:0d:28:5d:5d:4f:7c:c9:f1:a7:bc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
        Validity
            Not Before: Jul 28 18:27:06 2026 GMT
            Not After : Jul 27 18:32:06 2027 GMT
        Subject: CN=A87DE1667CD41B7F027D181131B857C381208D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:bf:e0:22:22:59:c0:e9:96:57:df:70:a8:
                    18:c0:ae:bd:60:c2:5e:73:7b:9a:91:55:16:f8:01:
                    0d:0f:e0:f2:ee:70:e3:27:88:91:0c:81:aa:70:8e:
                    7e:3e:8e:51:30:af:15:15:2f:78:bd:19:86:1f:b6:
                    4d:82:ea:e4:eb:b9:e8:e5:32:cf:92:2f:ff:9a:d7:
                    9a:4f:70:fa:93:79:09:e4:9c:d6:db:c1:e1:e5:67:
                    41:d8:77:9c:00:60:91:7b:c2:ce:35:4e:a9:00:f0:
                    3b:f4:e6:25:55:d3:4b:81:cf:1f:cf:53:13:eb:6a:
                    0c:fc:ac:b2:9b:a4:59:c2:c2:cd:fe:c5:9b:75:d7:
                    b2:a0:d7:ac:bd:26:32:83:23:83:ba:4d:1e:65:8e:
                    9d:02:e9:0f:fb:12:ad:0e:40:f6:82:e6:8a:6d:4b:
                    b3:80:df:b8:54:ab:26:9c:31:4d:31:62:9e:d8:7d:
                    27:a6:21:63:a7:47:55:a0:36:c5:ab:74:6c:1d:71:
                    d3:0d:13:a6:36:75:91:1b:4e:0f:3f:cb:dc:ba:f8:
                    47:b4:e4:b6:57:80:08:99:4f:02:07:45:e7:d7:28:
                    02:79:1e:83:d9:e0:b3:e9:2f:34:64:97:e8:52:80:
                    f7:8f:58:80:16:2c:3f:e7:2a:fa:a5:dc:8e:d6:9f:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:E1:66:7C:D4:1B:7F:02:7D:18:11:31:B8:57:C3:81:20:8D:26
            X509v3 Authority Key Identifier:
                keyid:E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/323830343a323536633a3a2f33322d3332203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:256c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:26:47:94:d7:be:a9:15:c2:32:35:03:74:5e:9d:c6:3c:
         36:f7:c2:38:77:dc:ab:05:ce:41:d9:09:6b:08:b5:18:23:58:
         b0:a8:ac:73:f9:d8:b6:ad:25:74:04:51:84:09:96:8e:13:b7:
         20:56:b4:e5:b5:63:ad:30:1b:00:7a:21:56:ef:95:c0:f4:aa:
         b9:3a:8a:e4:a6:16:93:69:24:8c:03:1e:d8:bf:7b:30:9f:a2:
         93:1f:99:04:6f:2b:ac:c7:1b:95:e5:f9:ca:5c:d4:00:1f:83:
         be:49:b8:66:f1:42:b0:8e:41:fd:f0:6c:d1:ac:c9:de:24:fa:
         d9:a4:91:1f:de:2a:8c:71:c9:f2:1e:46:e0:61:f6:e5:78:d5:
         c8:45:2f:53:f3:0b:f8:58:0f:ff:a0:9c:4c:13:40:62:73:be:
         c5:89:df:88:af:b9:3d:20:c1:96:55:42:11:ca:29:f3:6d:f5:
         2e:50:a0:1a:f3:50:e1:1b:9b:fc:60:e9:10:11:28:9b:d9:a2:
         0c:d5:90:40:01:15:12:80:55:35:70:d0:63:a2:02:0e:1f:a2:
         2b:72:40:39:62:7c:3e:c3:f9:a4:f6:97:6b:a4:03:18:ef:27:
         06:46:5f:62:a5:fd:2e:02:66:08:f9:52:ff:a3:5a:a5:9a:b4:
         27:bb:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:09:52 2026 by rpki-client