Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/323830343a313135633a3a2f33322d313238203d3e20323632353638.roa
File:                     323830343a313135633a3a2f33322d313238203d3e20323632353638.roa (raw, json)
Hash identifier:          HAFryBf6bbw4UQo8wYxtCr9WMom5mfpTmAiv8dyvyg4=
Subject key identifier:   A5:CC:5E:17:68:E0:59:D0:09:4A:0A:39:4C:75:BA:DC:6D:13:0E:11
Certificate issuer:       /CN=7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA
Certificate serial:       29AB5F181ADCE5DEFD34998DC8C12A333CA6EC1B
Authority key identifier: 7C:59:E2:61:97:1B:EA:03:1D:FF:D6:56:A6:FB:9C:B8:EE:A8:DA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/323830343a313135633a3a2f33322d313238203d3e20323632353638.roa
Signing time:             Mon 03 Aug 2026 14:36:35 +0000
ROA not before:           Mon 03 Aug 2026 14:31:35 +0000
ROA not after:            Mon 02 Aug 2027 14:36:35 +0000
asID:                     262568
IP address blocks:        2804:115c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.crl
                          rsync://rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ab:5f:18:1a:dc:e5:de:fd:34:99:8d:c8:c1:2a:33:3c:a6:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA
        Validity
            Not Before: Aug  3 14:31:35 2026 GMT
            Not After : Aug  2 14:36:35 2027 GMT
        Subject: CN=A5CC5E1768E059D0094A0A394C75BADC6D130E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:d9:e1:b6:9a:b2:f6:c9:18:d3:83:3b:90:
                    15:d9:bb:a9:4f:85:86:94:d5:f2:5b:ce:36:7d:e1:
                    66:53:55:e1:43:7c:7b:97:59:73:20:33:00:4f:9e:
                    24:e0:66:de:9a:d2:d9:c7:1f:e8:be:b0:79:45:3a:
                    87:d7:3f:d5:1f:2c:21:ce:94:74:53:77:c3:77:6b:
                    60:93:ae:90:5e:76:32:53:41:c8:56:3d:4d:2e:57:
                    1b:12:9f:6a:3e:f5:a4:24:6f:c9:eb:59:40:b4:23:
                    3d:7b:24:c2:04:60:6a:bf:3f:85:e7:e5:b2:a2:2c:
                    08:5c:74:8b:c2:cd:19:23:88:54:3f:b1:61:49:80:
                    0d:d0:ec:87:a0:03:44:01:ad:15:ec:85:8d:75:7a:
                    c9:35:9e:31:b8:c7:df:d7:68:05:81:d4:81:1d:28:
                    4c:1d:05:db:e6:8d:02:8d:e5:31:e2:6e:5d:e2:64:
                    07:b7:3b:34:67:4a:26:f5:2a:4c:94:4b:5f:61:a6:
                    42:c5:97:dc:a0:1a:60:ef:03:dd:2b:d4:3e:fa:6a:
                    97:e3:cf:7d:52:c3:c8:af:f1:4c:b1:84:50:fd:f2:
                    3f:b6:95:8b:8d:ea:16:f4:8c:73:39:df:16:bf:e8:
                    9c:29:bf:84:72:fc:7d:a0:46:ea:76:48:bd:47:8f:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CC:5E:17:68:E0:59:D0:09:4A:0A:39:4C:75:BA:DC:6D:13:0E:11
            X509v3 Authority Key Identifier:
                keyid:7C:59:E2:61:97:1B:EA:03:1D:FF:D6:56:A6:FB:9C:B8:EE:A8:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C59E261971BEA031DFFD656A6FB9CB8EEA8DAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fe7g1ELne2nt4jNYDx1EvbkHDZ2K5nCX7PVBueS3S2VP/0/323830343a313135633a3a2f33322d313238203d3e20323632353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:115c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:0d:cd:cf:8b:e6:02:db:39:d7:43:cd:6b:7c:8a:85:9b:
         ce:f2:02:83:1c:22:7b:3f:75:b5:36:b9:df:cf:41:ec:8d:a7:
         12:07:d9:24:23:cb:e7:3c:b4:1a:31:3c:c3:92:32:92:9d:f2:
         ae:9a:b5:b8:5f:fd:81:06:09:0b:ab:79:df:d2:ea:4b:14:72:
         7a:9e:4a:f1:df:10:eb:2f:37:63:d3:ff:12:21:94:4a:7a:47:
         ae:a4:c3:36:2f:4c:50:28:80:ff:eb:66:15:ab:a3:3c:dc:de:
         1c:47:c3:e7:bd:75:e7:21:9f:35:46:b7:79:dc:d6:98:ca:36:
         99:eb:9f:71:65:6d:dd:b6:f9:27:49:3c:31:9f:e8:71:99:17:
         5c:d2:0c:00:78:a0:45:c4:db:c7:f2:c6:8c:93:01:46:79:1d:
         4c:1b:ba:2b:62:04:20:a1:54:86:8a:21:cd:9c:2a:45:68:c6:
         58:6a:95:83:35:68:87:e8:01:f6:eb:2e:1f:a1:56:c7:dd:dd:
         91:d6:6a:a8:b7:a0:14:eb:24:3f:df:85:9b:0d:48:8f:9e:fa:
         89:48:75:89:92:04:e7:d8:68:cf:93:cc:ac:45:87:df:15:f8:
         b2:8b:e5:96:d1:26:80:61:bb:24:23:d1:8e:b0:bf:3a:a7:36:
         06:ed:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 16:01:53 2026 by rpki-client