Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343030303a3a2f33362d3336203d3e20323633343738.roa
File:                     323830343a313237383a343030303a3a2f33362d3336203d3e20323633343738.roa (raw, json)
Hash identifier:          P2Fu8tHcGtJtoRc6yXP11NDy/1mhbJ5qe5pJsyilh3c=
Subject key identifier:   84:C8:4E:B9:F6:C2:79:A0:EC:A9:7C:16:C8:14:B6:CC:89:0F:75:42
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       20F5CB77C91117E561A416FA1532D18529748FE7
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343030303a3a2f33362d3336203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:39 +0000
ROA not before:           Fri 14 Aug 2026 18:46:39 +0000
ROA not after:            Fri 13 Aug 2027 18:51:39 +0000
asID:                     263478
IP address blocks:        2804:1278:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f5:cb:77:c9:11:17:e5:61:a4:16:fa:15:32:d1:85:29:74:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:39 2026 GMT
            Not After : Aug 13 18:51:39 2027 GMT
        Subject: CN=84C84EB9F6C279A0ECA97C16C814B6CC890F7542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:c7:94:0c:10:0f:c1:d6:7b:1a:93:d3:88:
                    2f:7a:92:c5:39:95:5c:54:d8:67:e2:12:49:37:3e:
                    b4:bb:6f:b5:91:b9:26:c5:d8:77:9a:c5:57:c1:61:
                    a1:31:3c:e2:28:4b:c2:aa:de:5a:1d:9d:bc:74:4f:
                    de:5d:cf:53:37:53:3f:e3:92:5d:5a:05:c6:e8:b9:
                    15:01:37:17:c2:fa:85:25:c7:7a:e5:a0:e4:d9:ce:
                    cc:be:39:03:c3:f5:a5:5a:80:0d:62:6f:e9:a7:27:
                    0d:eb:23:96:c5:1a:30:f4:bd:fa:b6:c4:d7:88:6b:
                    2f:bc:a7:4f:87:43:cf:3d:0b:26:7b:ca:14:68:04:
                    4f:08:c1:09:7f:a6:a9:23:cc:c7:79:76:e2:50:59:
                    77:79:bc:ce:fd:22:12:08:4c:e0:9e:90:7e:70:db:
                    56:30:2b:55:c9:c2:a2:7d:f9:b7:65:9b:c7:b8:4e:
                    41:78:ab:bb:a8:e3:b0:be:8b:ea:e1:09:cd:cb:9f:
                    4e:ad:a2:d3:d6:1a:fe:bc:31:50:95:6d:36:1e:d8:
                    39:70:f2:7f:6b:f9:ef:26:c3:ae:07:27:95:a7:11:
                    59:74:2c:b7:13:b6:e0:5f:1d:5a:7e:b0:5c:8e:2d:
                    de:c7:94:6e:8d:b3:00:92:0b:fa:8e:83:f1:92:15:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C8:4E:B9:F6:C2:79:A0:EC:A9:7C:16:C8:14:B6:CC:89:0F:75:42
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a343030303a3a2f33362d3336203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1278:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:cf:23:04:57:46:f1:ab:5b:20:3d:81:cb:fb:1a:a9:b9:
         14:ce:3a:ca:a4:66:12:dc:de:89:b4:34:3c:8b:f4:2e:1e:62:
         a3:c4:ea:cf:dc:67:b8:c7:d2:69:6e:28:ae:95:b0:72:07:4c:
         68:a8:e0:06:bf:8a:c9:45:64:ed:fd:9f:2d:2e:13:b0:41:23:
         5d:a3:be:0c:4c:cc:b9:21:37:50:ba:be:b5:e3:2f:2b:75:81:
         29:f7:e1:89:58:1b:60:0b:e7:1f:55:1c:9b:0c:79:3a:6e:3a:
         8b:8e:f3:8d:ba:d6:0f:09:50:ed:80:39:8e:5e:a0:50:68:1f:
         d1:9f:16:12:45:7b:3d:59:2f:29:92:7c:e6:1b:7e:83:14:70:
         b5:82:3e:0f:24:34:5c:a7:1c:93:57:ff:2d:e4:34:74:e5:61:
         7a:bd:6e:c6:36:55:6a:09:d8:9f:3d:81:4d:06:4b:62:37:68:
         2d:cd:a0:99:bb:9c:d2:3b:17:e3:17:10:79:d3:54:10:5c:be:
         62:57:66:d8:1f:41:38:8c:e8:bb:5c:ac:5c:cb:f5:95:2b:dd:
         8d:f8:35:7e:ae:f4:12:dd:e2:50:e0:4b:04:84:f7:88:f3:ed:
         2c:f2:e7:82:93:e4:dc:eb:5d:54:d2:f2:21:39:07:40:26:0b:
         51:e8:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:12 2026 by rpki-client