Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/323830343a353232303a3a2f33322d3438203d3e20323638343936.roa
File:                     323830343a353232303a3a2f33322d3438203d3e20323638343936.roa (raw, json)
Hash identifier:          c5Hw+wef78Nr29/Wnyfd7lczUx1RlyGBWJU82HJD8uk=
Subject key identifier:   12:04:7B:20:45:AE:94:06:D5:5E:08:FD:10:69:EF:15:2A:D0:A2:60
Certificate issuer:       /CN=44ED06C8559C3327E20499D7D2F0357D4C530CE9
Certificate serial:       46352D6F63F9AFA97F284EDBD88AFFF2B7024A46
Authority key identifier: 44:ED:06:C8:55:9C:33:27:E2:04:99:D7:D2:F0:35:7D:4C:53:0C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44ED06C8559C3327E20499D7D2F0357D4C530CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/323830343a353232303a3a2f33322d3438203d3e20323638343936.roa
Signing time:             Wed 19 Aug 2026 12:02:59 +0000
ROA not before:           Wed 19 Aug 2026 11:57:59 +0000
ROA not after:            Wed 18 Aug 2027 12:02:59 +0000
asID:                     268496
IP address blocks:        2804:5220::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/44ED06C8559C3327E20499D7D2F0357D4C530CE9.crl
                          rsync://rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/44ED06C8559C3327E20499D7D2F0357D4C530CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44ED06C8559C3327E20499D7D2F0357D4C530CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:35:2d:6f:63:f9:af:a9:7f:28:4e:db:d8:8a:ff:f2:b7:02:4a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ED06C8559C3327E20499D7D2F0357D4C530CE9
        Validity
            Not Before: Aug 19 11:57:59 2026 GMT
            Not After : Aug 18 12:02:59 2027 GMT
        Subject: CN=12047B2045AE9406D55E08FD1069EF152AD0A260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:e8:e1:72:9f:85:ec:ff:67:0e:3b:18:79:
                    fd:d2:8b:47:ec:3b:05:d1:41:b7:41:cf:e7:19:44:
                    9a:09:52:be:68:4d:27:03:ce:b1:7a:87:34:d8:95:
                    44:a3:02:27:05:12:50:af:99:15:5c:7c:a8:47:6b:
                    46:6c:d0:97:3a:02:99:0e:b5:33:0c:15:f3:3d:22:
                    f4:45:f6:c6:b5:d6:79:d5:96:ea:b5:ae:9e:43:f6:
                    f2:f0:5e:3d:81:c2:45:27:74:f6:9f:60:5d:9a:c0:
                    01:e6:7a:47:36:08:fd:8d:0e:04:25:e3:81:c2:05:
                    b9:0c:75:32:b8:0e:9e:5c:cb:fe:7a:85:d9:bf:86:
                    42:0a:52:1b:e2:67:63:d8:b7:0a:02:e6:09:16:20:
                    23:bc:7b:35:54:56:21:c0:35:6a:b4:5e:e2:a3:32:
                    e8:d3:99:48:32:8b:20:a6:f3:93:7b:02:70:72:53:
                    b4:af:ba:3b:b3:51:dc:88:74:4d:f3:7d:ea:b6:80:
                    ba:7a:c3:29:36:f2:39:b8:84:bc:e4:ce:4e:a3:1f:
                    0c:19:7b:67:3c:3c:59:04:17:08:c9:bf:1f:a4:6d:
                    59:19:90:4c:d6:8a:f7:83:e3:57:9d:93:c6:5f:61:
                    b9:3b:35:ff:3a:ed:68:cf:ff:40:ae:76:8f:db:bd:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:04:7B:20:45:AE:94:06:D5:5E:08:FD:10:69:EF:15:2A:D0:A2:60
            X509v3 Authority Key Identifier:
                keyid:44:ED:06:C8:55:9C:33:27:E2:04:99:D7:D2:F0:35:7D:4C:53:0C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/44ED06C8559C3327E20499D7D2F0357D4C530CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44ED06C8559C3327E20499D7D2F0357D4C530CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFuBUfADy4R29GzKCC8Yzx5AW3ALWb8GtYSjZTUNuvDx/0/323830343a353232303a3a2f33322d3438203d3e20323638343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5220::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:87:24:2a:69:ec:47:06:2c:22:e1:c7:48:9e:76:c4:5b:90:
         f6:c3:fa:70:fd:2e:b0:9a:2f:c4:5a:42:15:c4:eb:f9:85:f3:
         18:9b:b3:ec:3c:53:d0:5a:bd:16:5e:f3:e5:bd:7d:8c:1c:2e:
         2a:47:86:52:fa:61:17:92:2e:cf:be:78:9b:d7:2f:31:6d:2f:
         b9:8c:53:fd:d0:6c:0d:91:65:4d:47:da:bb:c4:c0:c6:e3:ca:
         cc:d9:99:dd:c0:17:91:0a:1c:d7:8c:1b:23:be:9c:35:c5:35:
         c2:70:37:a3:05:14:e2:6c:38:2a:25:e2:cf:fb:ff:73:9b:2b:
         79:36:bd:82:12:57:8d:88:db:ac:b8:18:02:84:d3:b9:be:20:
         d5:b1:af:ae:a1:7a:7a:c8:27:fc:df:cd:05:75:76:da:b8:65:
         bf:3e:d4:e3:14:2a:e4:6c:68:dd:10:b2:c0:82:37:1d:3c:f5:
         39:f5:cf:7a:ce:bb:2c:e1:6c:c0:d3:6e:44:3e:9a:51:c2:7c:
         6c:d2:71:d4:42:2a:4d:99:8f:4f:67:19:99:d0:39:14:38:72:
         3a:6f:9c:2c:c8:70:e7:fd:2f:3d:5c:44:a3:c7:1b:d9:66:07:
         d6:2a:6b:c0:fe:b2:3c:a4:70:cd:14:19:0b:81:b2:d0:f5:54:
         5c:d3:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 21:54:00 2026 by rpki-client