Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/323830343a333435303a3a2f33322d313238203d3e20323635343438.roa
File:                     323830343a333435303a3a2f33322d313238203d3e20323635343438.roa (raw, json)
Hash identifier:          2CEUDz+mn8GdNELM6JL8hetFgwymVls4vYOTPqktgaA=
Subject key identifier:   79:6B:CC:09:6A:28:0D:86:61:88:B1:BE:4B:1D:B3:6A:03:77:E8:6E
Certificate issuer:       /CN=DC2EA92B843FD5C1407018C36A02135C7AE18D3C
Certificate serial:       61BCBEF6280BA8A2BAF46DA72C8A4C321A972702
Authority key identifier: DC:2E:A9:2B:84:3F:D5:C1:40:70:18:C3:6A:02:13:5C:7A:E1:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/323830343a333435303a3a2f33322d313238203d3e20323635343438.roa
Signing time:             Mon 17 Aug 2026 20:47:37 +0000
ROA not before:           Mon 17 Aug 2026 20:42:37 +0000
ROA not after:            Mon 16 Aug 2027 20:47:37 +0000
asID:                     265448
IP address blocks:        2804:3450::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.crl
                          rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bc:be:f6:28:0b:a8:a2:ba:f4:6d:a7:2c:8a:4c:32:1a:97:27:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2EA92B843FD5C1407018C36A02135C7AE18D3C
        Validity
            Not Before: Aug 17 20:42:37 2026 GMT
            Not After : Aug 16 20:47:37 2027 GMT
        Subject: CN=796BCC096A280D866188B1BE4B1DB36A0377E86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:c9:e5:55:f5:e4:c1:9b:ca:1f:60:1d:76:
                    b5:e7:ec:8f:3e:39:23:d6:f9:f7:54:08:e1:a7:82:
                    ce:fc:64:38:ef:77:a2:96:ac:96:e3:47:69:0c:84:
                    d7:ab:fd:b8:59:20:99:0d:75:32:ee:b8:4e:92:ec:
                    be:53:27:94:57:73:b7:39:ae:7e:fe:8b:c3:12:66:
                    db:07:47:e7:20:05:8b:dc:2e:7b:01:b3:17:5b:ca:
                    21:0e:3b:5d:2f:df:f5:53:c1:71:aa:cd:b1:ab:fb:
                    e0:93:b6:aa:3f:9b:8d:8a:08:bd:44:d4:2d:1a:1c:
                    1b:e3:73:e7:c4:6f:20:65:ed:a4:52:21:24:c1:46:
                    ef:f8:43:21:bf:2c:f7:12:dc:99:7b:e5:d5:97:8b:
                    87:5f:b0:9e:01:71:24:50:44:de:46:7e:19:05:f0:
                    8c:38:37:19:6b:64:f2:3c:0f:2d:87:58:eb:03:92:
                    e9:e5:e0:99:09:2e:88:de:d6:30:4a:98:c3:7b:f9:
                    7f:f5:9b:a9:d6:6a:57:ea:a4:96:e0:c0:9c:77:db:
                    23:18:28:da:a1:05:3f:f5:c2:4e:79:e0:80:55:10:
                    75:12:88:b0:a3:03:28:94:ca:ac:d0:6e:26:bf:c3:
                    45:4f:63:5e:ce:b8:9c:be:ba:62:58:1e:08:4d:f7:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6B:CC:09:6A:28:0D:86:61:88:B1:BE:4B:1D:B3:6A:03:77:E8:6E
            X509v3 Authority Key Identifier:
                keyid:DC:2E:A9:2B:84:3F:D5:C1:40:70:18:C3:6A:02:13:5C:7A:E1:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/323830343a333435303a3a2f33322d313238203d3e20323635343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3450::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:10:91:67:1a:77:03:95:5e:ca:1e:8a:0a:bf:39:7d:ed:24:
         55:a3:c1:8d:2c:30:24:bf:e4:47:9d:76:b9:48:f5:b3:6e:0d:
         c8:53:b3:df:24:ac:76:3f:62:61:fe:34:be:dc:84:9b:f9:36:
         a8:36:1c:33:03:15:71:94:1e:2f:71:fd:a7:2a:15:d0:8d:75:
         ec:90:63:3d:d8:80:1b:37:3f:9b:4d:5b:fe:ba:82:70:bb:3b:
         ae:e6:cd:8f:ff:56:ae:23:38:6f:7d:9f:90:88:8a:1e:da:47:
         58:2d:2a:82:d9:79:e0:78:08:34:34:96:5e:61:55:bb:a2:95:
         3d:42:c9:65:e0:cf:2e:a2:f4:b5:9b:33:5b:3c:32:86:46:a1:
         cd:66:96:df:0e:0b:06:3a:55:71:0d:b0:6f:44:13:7d:61:64:
         9c:3f:aa:bf:4a:90:95:96:7e:2e:eb:15:9f:11:cb:b0:52:e8:
         37:fd:bc:4e:67:1d:92:08:c3:b7:d2:e2:45:e0:a8:5b:e8:e3:
         c4:03:30:67:eb:f4:8d:08:bc:7b:12:76:30:76:bf:e3:17:c9:
         47:b0:ac:4c:07:8b:31:17:24:b8:c4:50:bb:8a:7c:c0:83:44:
         76:82:b3:9b:e5:93:f1:6d:a7:e4:63:42:79:6a:81:95:70:d7:
         ed:49:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:28:32 2026 by rpki-client