Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa
File:                     323830343a356566633a3a2f33322d313238203d3e20323639303639.roa (raw, json)
Hash identifier:          QdKnBylm9B3rCdfvsUiV7AoqJuQzE/N2VNrfK91UKj0=
Subject key identifier:   AA:D6:53:70:2A:19:A0:AF:EE:7B:9E:DE:26:62:C7:71:12:CF:E3:80
Certificate issuer:       /CN=23A45196211651E8A4484F360D708F4E265B4320
Certificate serial:       7ABF2FCEC87BBCBD8145750DFE4327115F6455DE
Authority key identifier: 23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa
Signing time:             Sun 02 Aug 2026 00:42:44 +0000
ROA not before:           Sun 02 Aug 2026 00:37:44 +0000
ROA not after:            Sun 01 Aug 2027 00:42:44 +0000
asID:                     269069
IP address blocks:        2804:5efc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl
                          rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:bf:2f:ce:c8:7b:bc:bd:81:45:75:0d:fe:43:27:11:5f:64:55:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23A45196211651E8A4484F360D708F4E265B4320
        Validity
            Not Before: Aug  2 00:37:44 2026 GMT
            Not After : Aug  1 00:42:44 2027 GMT
        Subject: CN=AAD653702A19A0AFEE7B9EDE2662C77112CFE380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a3:5d:6a:b8:60:ea:cf:ed:f3:98:ed:2f:ee:
                    9e:95:fa:8f:f2:c7:aa:9b:3a:1c:89:86:65:7a:14:
                    92:fb:2d:34:44:ea:13:fa:df:f7:5e:a4:8f:14:9c:
                    e9:05:02:c5:97:55:0d:7f:34:14:83:69:68:26:a3:
                    15:0b:c6:b8:14:9c:c7:92:f1:c6:2e:97:7a:da:54:
                    b9:64:74:e4:c1:a4:ac:ba:94:71:a1:79:71:04:f8:
                    36:90:15:52:e5:ff:80:13:88:a0:94:81:22:84:e7:
                    64:13:18:4f:99:a8:f8:de:04:59:2e:c5:3d:a0:d4:
                    1d:4a:2c:2f:f6:19:f3:5d:4c:94:d3:b1:6b:1f:40:
                    43:03:bf:87:54:cf:9b:bd:7b:1e:33:44:cb:d0:e9:
                    d3:c6:98:dd:77:df:ce:39:ac:3c:bb:83:80:29:8c:
                    5c:c0:2d:c2:9a:af:69:93:b6:7e:bd:c0:fc:6f:01:
                    1a:59:c1:98:c9:50:b6:17:1f:8c:41:30:5d:f1:59:
                    72:ab:b9:73:c3:8e:e8:dd:c2:be:73:5b:2a:65:7f:
                    a9:b7:bd:25:c6:08:76:e2:c6:3e:94:7c:bd:6d:71:
                    74:9b:ee:67:93:dc:21:71:d9:e9:91:7f:2f:e6:6e:
                    d0:38:11:b0:01:3d:3f:9a:22:7c:a6:ef:e2:3c:d3:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D6:53:70:2A:19:A0:AF:EE:7B:9E:DE:26:62:C7:71:12:CF:E3:80
            X509v3 Authority Key Identifier:
                keyid:23:A4:51:96:21:16:51:E8:A4:48:4F:36:0D:70:8F:4E:26:5B:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/23A45196211651E8A4484F360D708F4E265B4320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23A45196211651E8A4484F360D708F4E265B4320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc8fxPneRMbQVUe9pcwfhSWW4sb3TunVPY7d5vt7QmzF/0/323830343a356566633a3a2f33322d313238203d3e20323639303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:ff:07:11:82:1d:5d:71:54:e6:a6:d1:f0:78:e1:40:0e:04:
         d6:35:f9:37:90:67:f5:ed:db:73:36:85:76:15:0e:0c:ec:52:
         bd:13:04:23:5a:73:0f:6c:3f:d4:ac:06:e8:39:2e:ac:fe:86:
         9e:ba:1a:e7:a6:78:88:81:de:61:b7:59:80:ac:20:72:54:8a:
         50:39:70:0f:b5:be:03:fb:f9:ff:15:d7:91:bc:fe:9b:2e:1f:
         06:46:c2:d5:33:27:93:d3:4e:77:39:a4:4c:f2:51:c8:a2:b1:
         dd:56:94:0c:0b:a6:8d:57:1f:08:c9:c1:72:16:7e:75:a9:68:
         bc:7b:eb:b8:ba:1a:33:e7:86:bc:7d:e5:45:88:70:cb:e5:1c:
         f1:11:84:ae:76:20:e7:74:e3:00:16:28:b3:aa:15:9a:48:fd:
         fe:db:bd:bd:e0:78:dc:27:7a:db:35:f6:78:97:8f:6c:8d:63:
         15:8f:5d:9b:6a:71:fc:7e:53:11:23:81:e7:d4:18:f3:a8:35:
         56:50:ef:b7:fc:50:89:01:3d:11:15:54:97:28:a6:98:13:fa:
         ad:bf:1f:43:67:19:b1:de:48:b1:e8:6d:be:60:60:a7:50:9a:
         f6:b3:51:13:36:3a:ae:88:83:bd:ee:bb:d9:d4:d5:56:d2:4b:
         90:95:ea:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:41:47 2026 by rpki-client