Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
File:                     323830343a383763343a3a2f33322d3438203d3e20323732373330.roa (raw, json)
Hash identifier:          emQ3diWKKw+QyVyRrDUdWch7hnlwpoST5vHUBEgvSdU=
Subject key identifier:   7E:95:9A:48:38:06:D8:27:74:DA:A4:AC:02:C0:57:78:45:84:0B:48
Certificate issuer:       /CN=C0DD64892A0C121799367350C68DE3D2965E859B
Certificate serial:       1562A8BCBC47CB9B22B0F750D30B26B63919DA20
Authority key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa
Signing time:             Fri 21 Aug 2026 16:09:54 +0000
ROA not before:           Fri 21 Aug 2026 16:04:54 +0000
ROA not after:            Fri 20 Aug 2027 16:09:54 +0000
asID:                     272730
IP address blocks:        2804:87c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl
                          rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:62:a8:bc:bc:47:cb:9b:22:b0:f7:50:d3:0b:26:b6:39:19:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DD64892A0C121799367350C68DE3D2965E859B
        Validity
            Not Before: Aug 21 16:04:54 2026 GMT
            Not After : Aug 20 16:09:54 2027 GMT
        Subject: CN=7E959A483806D82774DAA4AC02C0577845840B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:51:b2:c5:1b:b8:a3:c2:6a:8b:ab:dc:5e:
                    ed:41:4e:de:3d:c8:3b:03:4b:d8:6a:28:09:c3:da:
                    29:56:60:49:3b:69:e5:1e:2b:88:c0:21:51:d0:b3:
                    fe:02:db:19:5c:b5:4d:e0:1e:b5:f8:10:e9:c2:45:
                    cd:d5:94:00:ec:1b:b3:17:24:d6:c8:70:fb:cd:05:
                    2e:3b:d0:7f:7b:59:1a:68:ab:75:e4:96:49:4c:bc:
                    6a:a1:30:b4:c8:ca:95:6c:7e:dc:00:2f:5b:f4:3f:
                    a1:95:00:24:61:df:eb:da:ee:f3:cf:6c:58:71:c8:
                    2f:0c:81:a2:a9:97:28:70:a0:7e:ad:e1:7e:c4:85:
                    d9:54:87:7c:27:ca:f3:6d:74:e4:b2:8f:18:33:89:
                    e6:45:5d:25:85:b9:2f:5b:b2:33:5b:d9:01:1c:41:
                    63:95:73:3c:05:bf:5c:82:4b:21:d5:89:f6:84:99:
                    a4:09:99:5e:98:c4:90:52:e2:8d:5a:06:c3:95:b8:
                    da:8e:f9:cd:b9:b7:4a:8a:ad:b7:b1:6e:58:d3:2f:
                    48:75:ef:38:e9:01:49:f9:e4:9f:14:28:72:d8:95:
                    0d:48:13:69:12:d4:65:87:4a:e0:5f:1b:8a:ba:a8:
                    e8:53:40:5d:dc:72:53:91:7c:72:8c:4a:97:2c:79:
                    7a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:9A:48:38:06:D8:27:74:DA:A4:AC:02:C0:57:78:45:84:0B:48
            X509v3 Authority Key Identifier:
                keyid:C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/323830343a383763343a3a2f33322d3438203d3e20323732373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:41:d4:39:15:0d:67:76:28:0d:ce:62:2c:11:20:30:94:79:
         7f:03:42:68:a1:74:97:8d:59:40:50:7f:32:fa:00:02:0d:f3:
         70:d2:6c:19:14:a4:73:39:e6:1a:9b:cc:c9:18:3e:b1:06:ef:
         95:d7:f5:8c:08:49:2a:2c:1d:c6:df:07:1c:d9:61:1e:4f:e9:
         31:26:0d:47:52:19:30:5d:b3:3d:c7:77:80:32:36:1d:09:7a:
         1b:ec:7e:c6:bb:1e:56:b1:82:c1:e0:94:03:28:ae:e5:aa:9f:
         99:1c:75:8a:33:73:2e:0d:20:41:ee:23:2c:56:05:d4:d3:5e:
         1b:b4:c6:0e:39:43:33:5d:3d:fd:ab:66:e8:15:81:99:ce:81:
         7b:f5:df:fd:d2:42:61:db:5c:25:ab:dd:e5:43:fb:39:df:16:
         7d:4d:61:14:66:59:00:47:c1:c8:d7:9b:e7:ab:1f:99:5e:59:
         05:71:3e:2c:e5:67:6b:aa:43:cb:cb:dd:42:5f:87:6a:af:7c:
         7e:66:67:78:71:af:54:c0:b2:51:71:d4:c6:a5:37:51:7c:d4:
         11:9b:3b:84:0e:cb:d6:02:95:c3:13:93:3b:ac:1e:e1:55:86:
         b6:91:2e:79:42:9e:39:5a:28:4c:a4:21:b6:84:c3:cf:27:8b:
         26:55:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:16:51 2026 by rpki-client