Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/323830343a6535343a3a2f33322d3438203d3e20323632383037.roa
File:                     323830343a6535343a3a2f33322d3438203d3e20323632383037.roa (raw, json)
Hash identifier:          ZfafQUP+UbIHohXMsZ317Y6vJ/OU6Xz/NsIZUhp4+h8=
Subject key identifier:   BD:4B:88:91:89:84:C2:2A:0E:0B:F7:10:06:20:90:48:84:8C:5C:6B
Certificate issuer:       /CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
Certificate serial:       08B9AB62AAEC6B0A8F51200B6D3B33A22BB43B2B
Authority key identifier: 6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/323830343a6535343a3a2f33322d3438203d3e20323632383037.roa
Signing time:             Thu 20 Aug 2026 10:56:40 +0000
ROA not before:           Thu 20 Aug 2026 10:51:40 +0000
ROA not after:            Thu 19 Aug 2027 10:56:40 +0000
asID:                     262807
IP address blocks:        2804:e54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl
                          rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:ab:62:aa:ec:6b:0a:8f:51:20:0b:6d:3b:33:a2:2b:b4:3b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1
        Validity
            Not Before: Aug 20 10:51:40 2026 GMT
            Not After : Aug 19 10:56:40 2027 GMT
        Subject: CN=BD4B88918984C22A0E0BF71006209048848C5C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:7f:5f:cd:2b:66:81:29:89:00:ef:b7:2f:
                    ba:d1:7b:c2:4c:8a:18:5a:16:f7:ce:82:2f:9d:d1:
                    51:27:2c:29:8a:f9:d1:9e:b6:a8:42:f1:49:37:89:
                    5f:3e:38:11:de:b3:9a:f4:5d:f9:d4:1e:4b:72:7b:
                    02:49:52:46:3f:b2:b5:3f:9e:14:14:dc:26:67:06:
                    c1:8b:da:cd:fb:ce:39:d4:7e:1b:22:18:13:d8:79:
                    96:e0:56:55:ed:47:c0:ad:67:85:6b:87:3b:47:76:
                    2d:23:67:4c:0a:71:66:59:eb:e2:24:b4:39:c4:5f:
                    28:37:21:b6:1f:d4:b1:7c:68:32:ce:e7:d5:8a:75:
                    f3:f9:1d:fc:99:d1:38:e4:b3:51:1b:7b:a2:5e:2d:
                    86:f8:51:ba:17:7d:23:59:a0:26:4c:e1:d8:32:bc:
                    13:3c:ee:9c:5e:ad:0b:15:69:f7:7e:9e:a9:03:7f:
                    b8:7d:42:47:8f:12:95:1c:c5:c8:1d:03:5d:2d:60:
                    6c:82:5a:f2:81:b6:cd:3a:b6:5a:b1:d8:54:93:2b:
                    99:23:45:b3:ea:16:87:5d:b3:47:f0:19:fe:40:36:
                    05:0c:0d:ba:c3:85:42:9b:cb:32:f3:90:d1:3a:02:
                    d0:1e:fb:97:fc:6c:98:46:e7:c1:79:a9:05:87:c5:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:88:91:89:84:C2:2A:0E:0B:F7:10:06:20:90:48:84:8C:5C:6B
            X509v3 Authority Key Identifier:
                keyid:6D:02:6D:FA:D4:6B:31:E9:3A:F9:AD:E4:6F:E6:98:A5:B2:CF:BC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D026DFAD46B31E93AF9ADE46FE698A5B2CFBCD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FbLVfquAvJY6szesYESJ4PRX2S1LUvEMhU2G7bj59xG7/0/323830343a6535343a3a2f33322d3438203d3e20323632383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e54::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:d6:01:4c:d5:2e:17:5a:91:12:c4:27:cf:b4:bc:01:90:
         a1:84:13:9c:46:05:93:78:77:37:a9:a1:19:d9:21:8f:53:93:
         34:85:1c:f3:f9:24:cc:41:39:53:8d:c3:13:fb:de:15:5f:9d:
         8b:98:f9:d4:99:df:a7:b2:e4:ac:36:a4:05:d6:39:44:ff:b9:
         59:9a:25:ec:fa:86:52:0e:c6:ae:2b:a4:8e:2e:ae:91:61:b0:
         8c:64:cd:ed:45:32:55:c9:85:1a:9a:39:13:dd:24:e9:73:51:
         01:62:5c:dd:91:be:4b:66:14:18:46:b5:76:71:56:6f:21:0f:
         59:ce:16:c3:84:34:aa:c7:cf:76:a8:bf:5d:55:c4:c0:29:65:
         70:56:e9:00:dd:93:f6:f5:b4:43:f8:75:b2:95:ce:66:ed:cf:
         09:16:98:e9:fc:9e:09:a1:fd:45:12:7d:2c:d4:5c:7d:be:48:
         35:e6:ef:52:6e:72:4f:5d:21:64:99:c5:44:18:5e:74:aa:8c:
         41:59:8c:73:bd:ef:c5:a5:0b:78:c2:8d:9d:3f:2b:dc:2a:3f:
         2e:c6:50:18:a5:de:2e:d5:ef:74:18:41:fb:7b:ca:17:cc:27:
         6a:a0:60:1a:bb:0a:c3:fd:59:3d:11:e2:d5:a2:5e:a3:94:ea:
         85:f9:8a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:54 2026 by rpki-client