Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/323830343a6163633a3a2f33322d3438203d3e203532393233.roa
File:                     323830343a6163633a3a2f33322d3438203d3e203532393233.roa (raw, json)
Hash identifier:          hZyJg/ozd8p6f5KuEG2kBNV//VtzhO5YOTQ9XC5X+sI=
Subject key identifier:   DE:02:E4:1E:E8:97:4C:34:35:FB:F3:6B:1F:5F:B1:CA:E8:6D:52:56
Certificate issuer:       /CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
Certificate serial:       654A2195F7FFE5777724C35D5D08E2AC035DA011
Authority key identifier: 62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/323830343a6163633a3a2f33322d3438203d3e203532393233.roa
Signing time:             Tue 04 Aug 2026 19:07:52 +0000
ROA not before:           Tue 04 Aug 2026 19:02:52 +0000
ROA not after:            Tue 03 Aug 2027 19:07:52 +0000
asID:                     52923
IP address blocks:        2804:acc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl
                          rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 06:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4a:21:95:f7:ff:e5:77:77:24:c3:5d:5d:08:e2:ac:03:5d:a0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Validity
            Not Before: Aug  4 19:02:52 2026 GMT
            Not After : Aug  3 19:07:52 2027 GMT
        Subject: CN=DE02E41EE8974C3435FBF36B1F5FB1CAE86D5256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:3e:9b:d8:2f:2e:ff:58:f7:84:58:67:a2:
                    7c:c0:e4:ba:a2:db:7e:dc:69:51:73:6a:81:a6:4d:
                    e3:f8:85:21:09:2f:98:5f:41:f2:b3:06:ed:a5:19:
                    9d:8e:8b:4d:d6:33:c4:85:07:d7:88:9b:ad:dc:e0:
                    09:98:1e:7e:05:21:7e:ba:53:aa:c0:20:ad:13:28:
                    81:63:59:03:70:70:7e:c0:85:27:bf:c7:b7:e0:fc:
                    a0:35:35:32:ac:4b:7d:18:c8:63:04:eb:7e:88:55:
                    81:88:09:66:d5:2c:07:2b:5f:de:ec:c8:53:72:34:
                    7c:16:c1:db:bf:72:9f:9a:4f:ca:75:42:b9:e0:2c:
                    cb:b6:2c:ab:cc:6e:84:02:86:34:08:6a:31:07:cf:
                    09:09:ee:ab:93:9d:04:68:16:f9:da:4c:e9:bc:8e:
                    b7:8a:44:68:10:1a:2d:e5:b2:db:7c:93:b9:1e:9e:
                    34:e7:77:0e:14:0c:ed:3a:1c:8c:42:95:14:7c:20:
                    ac:07:47:92:87:74:45:29:07:12:7c:1a:2e:d7:11:
                    98:af:78:82:b7:8a:df:b8:20:00:f7:2b:90:1b:a5:
                    e9:77:0a:4c:d5:d3:1d:d3:3d:a3:12:bf:f9:1e:9f:
                    9d:78:54:9f:bb:17:47:34:db:e8:ff:c0:ab:c0:34:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:02:E4:1E:E8:97:4C:34:35:FB:F3:6B:1F:5F:B1:CA:E8:6D:52:56
            X509v3 Authority Key Identifier:
                keyid:62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/323830343a6163633a3a2f33322d3438203d3e203532393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:acc::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:ca:de:d9:95:be:d2:6d:fc:83:60:d6:33:ad:fb:58:95:f6:
         58:81:6b:d5:f4:87:0d:35:53:36:90:2e:5f:7b:a8:8e:81:82:
         5d:a6:a6:12:6c:2e:41:16:bb:02:03:7c:65:3d:83:00:91:1f:
         6f:d7:92:8d:c7:ac:40:66:b2:b9:b0:58:a3:1d:80:40:a1:dc:
         d9:eb:47:a2:a6:33:65:50:54:c4:c0:8d:fd:d7:06:80:59:94:
         fa:9a:5f:49:3c:ea:8e:d1:6d:ca:bb:4d:89:c7:af:e8:23:0d:
         21:d8:74:0b:57:4f:df:4a:9c:77:10:08:69:a9:3f:3a:80:8c:
         40:56:de:91:49:6e:21:8e:c7:97:16:7d:c0:09:55:07:32:88:
         b0:28:7f:54:f1:2f:fa:82:06:fc:32:56:33:d4:c9:99:4e:0d:
         79:73:4c:2b:7f:bf:f1:ec:17:37:02:5d:09:f3:99:09:8d:90:
         8e:ae:d3:f7:bf:f2:34:d8:fd:58:4d:a8:02:c5:0a:b9:f8:a2:
         71:7d:1b:34:7d:a9:35:4d:9c:e3:ba:fa:22:3b:23:0f:f7:9d:
         bc:0b:50:5c:c1:d1:8a:94:76:58:d5:ca:2c:ec:bd:50:34:98:
         90:94:10:cd:35:62:27:2b:f6:eb:6e:59:c3:1f:39:a2:29:f2:
         95:02:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:55:27 2026 by rpki-client