Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33322d313238203d3e20323734353230.roa
File:                     323830343a393536343a3a2f33322d313238203d3e20323734353230.roa (raw, json)
Hash identifier:          /njNbzj2kQGdiIGpibKjUh9dZzpWwUoZZGf9z0vnmJg=
Subject key identifier:   1E:29:F1:AB:E9:E4:B6:39:F8:F4:06:DB:32:62:CC:44:D6:6E:CF:74
Certificate issuer:       /CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
Certificate serial:       4CFE7025ADC975F2BF999A187C72B290A783C21A
Authority key identifier: E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33322d313238203d3e20323734353230.roa
Signing time:             Fri 24 Jul 2026 17:49:37 +0000
ROA not before:           Fri 24 Jul 2026 17:44:37 +0000
ROA not after:            Fri 23 Jul 2027 17:49:37 +0000
asID:                     274520
IP address blocks:        2804:9564::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl
                          rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 22:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fe:70:25:ad:c9:75:f2:bf:99:9a:18:7c:72:b2:90:a7:83:c2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28429D3ABE302909DF402CE9FF34ABB4CC883F3
        Validity
            Not Before: Jul 24 17:44:37 2026 GMT
            Not After : Jul 23 17:49:37 2027 GMT
        Subject: CN=1E29F1ABE9E4B639F8F406DB3262CC44D66ECF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:0a:e3:91:d6:12:52:41:33:30:e3:07:52:
                    f3:11:fb:bf:86:eb:6d:1c:a0:42:cc:00:32:dc:a5:
                    66:06:9b:94:90:41:48:a2:0d:75:88:54:55:13:b8:
                    19:e5:d5:cb:20:a3:c5:d1:f8:80:e5:42:5c:4c:ba:
                    64:b8:39:b6:5a:12:4a:0a:cf:71:e7:0d:b3:eb:8e:
                    62:e4:14:59:31:b3:8f:0a:e9:2d:39:2c:50:cf:5a:
                    75:9a:98:3e:0d:17:a1:64:d4:5d:a2:eb:1e:57:8f:
                    cf:f5:ec:75:46:f6:dd:43:5b:f6:ba:a6:0c:85:ac:
                    76:33:cd:27:4e:82:f0:c2:af:0f:e6:04:6d:c2:11:
                    64:7f:5e:72:ab:dc:c8:8b:42:5f:63:a0:e8:81:c3:
                    fe:ca:63:7e:2b:8e:65:8c:c2:8e:65:61:08:7f:7e:
                    f7:66:21:d5:6b:5a:42:b7:04:92:38:dd:7e:06:32:
                    7d:33:a4:d7:98:29:3c:b6:89:1d:2e:91:32:66:93:
                    51:29:73:06:4f:60:c3:9e:c5:c6:01:63:42:c9:e1:
                    bb:4f:3d:fa:4d:7c:4d:ce:c1:76:f4:97:76:5c:77:
                    d4:b2:eb:c1:3f:8f:be:af:d9:41:d2:cb:7b:ab:db:
                    30:86:98:ba:65:1b:35:dd:bc:65:44:e5:11:46:a2:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:29:F1:AB:E9:E4:B6:39:F8:F4:06:DB:32:62:CC:44:D6:6E:CF:74
            X509v3 Authority Key Identifier:
                keyid:E2:84:29:D3:AB:E3:02:90:9D:F4:02:CE:9F:F3:4A:BB:4C:C8:83:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E28429D3ABE302909DF402CE9FF34ABB4CC883F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwTVTpGze1EoDYREXSoN8QYTFgfHkYh4shoBoWk12Gwf/0/323830343a393536343a3a2f33322d313238203d3e20323734353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9564::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:4d:40:04:2b:0a:71:35:73:7e:90:1d:e9:c4:27:0b:a5:
         94:53:c1:4d:f7:30:10:4c:f6:c4:9d:23:1d:3b:23:93:9a:22:
         90:3d:f3:cc:ce:73:4d:07:05:36:60:24:20:d1:35:4c:bd:4b:
         2e:3f:11:af:cc:85:bc:fb:be:2f:27:99:b9:5d:7b:b3:93:2a:
         e5:9a:35:e5:f9:b8:d9:e1:02:4c:8e:28:75:64:3c:57:09:1d:
         cf:3d:c7:27:83:07:62:a2:c3:86:74:af:77:53:94:26:95:2e:
         2d:34:6f:83:ce:06:dd:b0:76:8d:1d:96:a3:74:e1:ad:1e:bf:
         c0:70:64:6b:d4:22:73:e2:ec:39:46:e3:f2:e6:85:be:10:cf:
         65:bf:36:22:ce:bf:47:37:e7:79:07:06:b6:15:5f:cf:0c:05:
         66:a7:ea:35:e7:b9:17:34:bb:18:fc:04:46:79:67:bc:1a:a7:
         a5:43:cc:47:89:b3:c7:15:fb:4a:91:28:24:96:ff:f5:1e:50:
         51:06:dc:29:cb:b6:41:22:95:58:ac:2b:cd:22:45:83:dd:7a:
         de:a0:bf:eb:e7:c0:7c:68:48:37:82:61:a3:67:61:11:d0:f0:
         0f:b6:24:98:d8:cb:20:58:97:95:9b:a1:a0:1f:3f:1e:ce:a0:
         e2:58:4b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:22:01 2026 by rpki-client