Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
File:                     323830343a316131343a3a2f33322d3438203d3e203238313533.roa (raw, json)
Hash identifier:          +MKm7WiL91rxaHHNiCk5bcNfwuAIg/Ppv0/nFvdBOU4=
Subject key identifier:   2C:BE:4B:FB:F0:09:91:E0:46:79:19:43:0F:05:59:AD:D8:3A:25:C1
Certificate issuer:       /CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
Certificate serial:       029A822EEF51F63B991738A897A451F1C3117B5E
Authority key identifier: D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa
Signing time:             Mon 03 Aug 2026 16:38:27 +0000
ROA not before:           Mon 03 Aug 2026 16:33:27 +0000
ROA not after:            Mon 02 Aug 2027 16:38:27 +0000
asID:                     28153
IP address blocks:        2804:1a14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl
                          rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:82:2e:ef:51:f6:3b:99:17:38:a8:97:a4:51:f1:c3:11:7b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
        Validity
            Not Before: Aug  3 16:33:27 2026 GMT
            Not After : Aug  2 16:38:27 2027 GMT
        Subject: CN=2CBE4BFBF00991E0467919430F0559ADD83A25C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:f1:dc:6d:44:c5:4f:0a:40:96:85:72:ed:
                    b6:e9:4c:f7:d2:29:65:f3:c9:f4:96:40:7c:7d:9e:
                    e8:dd:14:d2:87:8f:d8:9a:e3:29:df:8b:79:8c:62:
                    7d:3a:95:50:3c:ab:0b:e9:f3:f4:87:27:eb:5b:5a:
                    9d:07:3e:ab:66:48:8c:fb:f4:e3:dc:4c:f2:bd:ed:
                    61:7a:42:40:36:5a:7b:07:67:5a:74:69:25:0c:66:
                    54:43:2e:00:cc:5e:fb:6c:f7:3a:31:cd:02:19:e2:
                    84:76:05:37:eb:4d:9c:ed:06:8d:a0:d5:b3:20:cd:
                    08:45:de:7c:71:54:e8:4a:54:93:e5:31:40:80:35:
                    d0:4d:42:5a:e6:83:52:c3:0e:78:f3:c5:e5:10:89:
                    d8:e1:24:e8:d7:c5:7d:1f:9e:f0:d5:0b:c3:44:d2:
                    ee:63:3a:70:5c:5d:81:57:fd:ad:78:24:f2:d4:c4:
                    e8:be:68:70:b3:52:ec:3a:5a:10:bc:28:fa:04:e0:
                    73:55:8f:ac:6f:c0:69:cc:4c:0c:3f:42:e9:b1:e9:
                    9e:43:b8:32:8c:fd:90:91:b8:5f:f5:ee:9b:f6:9f:
                    73:d6:9f:ee:dd:2e:70:f8:8a:b4:54:a8:80:02:7f:
                    79:8f:63:08:ef:5d:ec:56:a8:f9:f3:08:43:9d:83:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:4B:FB:F0:09:91:E0:46:79:19:43:0F:05:59:AD:D8:3A:25:C1
            X509v3 Authority Key Identifier:
                keyid:D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/323830343a316131343a3a2f33322d3438203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a14::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:8f:9a:55:6a:fc:f2:e9:c2:4b:83:48:e6:ee:c3:db:ff:44:
         12:5b:29:3c:fb:a4:4f:20:4f:89:ba:d6:69:e8:da:29:97:13:
         06:a5:d0:94:28:15:e8:a2:ec:3e:92:fc:ae:12:2e:37:3c:8f:
         ce:ce:dc:91:26:b9:72:61:b3:3e:5e:89:f6:94:e4:d7:88:34:
         d4:17:0d:8d:a1:5a:c7:ad:2e:aa:6e:23:36:03:22:96:70:9c:
         56:db:21:ea:3d:3b:68:a8:3c:69:22:ca:7f:00:3e:2c:05:52:
         92:4e:36:0d:84:4c:8d:f3:fa:88:55:c6:36:1a:9c:c8:81:41:
         99:48:7e:58:a5:12:48:98:e0:0b:70:f0:d7:2d:ea:65:bf:23:
         0a:b2:42:35:ac:d9:f3:c4:c9:86:d3:e6:bb:b1:ee:28:97:7e:
         b6:68:80:96:31:02:d3:ec:62:73:3f:0b:ed:53:1a:9c:44:8a:
         81:5f:ff:05:45:50:5c:e9:64:db:8a:c3:d0:c6:47:bb:b6:d3:
         1b:8c:ac:34:65:29:b8:01:36:53:19:da:ed:fb:dd:3b:3e:11:
         9f:88:e6:96:64:2f:1c:c7:93:0f:01:75:3e:59:af:2a:b7:da:
         59:f1:5b:7d:bd:de:85:75:9a:18:13:94:39:d5:1b:42:d9:c2:
         79:76:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:41 2026 by rpki-client