Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a393430303a3a2f34302d3430203d3e20323633343738.roa
File:                     323830343a313237383a393430303a3a2f34302d3430203d3e20323633343738.roa (raw, json)
Hash identifier:          1OQ1vN9gzUlLUoyqv0c8XEdfjn+LUVIMwQ54E7OSxtU=
Subject key identifier:   1E:70:46:62:31:5F:D9:8B:19:8F:40:18:40:24:FD:C3:3F:18:D6:FB
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       57FF3166C8CD7CC993DC55D75927094149983C2D
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a393430303a3a2f34302d3430203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:39 +0000
ROA not before:           Fri 14 Aug 2026 18:46:39 +0000
ROA not after:            Fri 13 Aug 2027 18:51:39 +0000
asID:                     263478
IP address blocks:        2804:1278:9400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:31:66:c8:cd:7c:c9:93:dc:55:d7:59:27:09:41:49:98:3c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:39 2026 GMT
            Not After : Aug 13 18:51:39 2027 GMT
        Subject: CN=1E704662315FD98B198F40184024FDC33F18D6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:ae:b4:23:72:03:76:91:a7:1e:01:7d:ed:
                    9a:fc:16:1c:56:b0:a0:23:f5:08:6e:71:7c:32:df:
                    40:fb:b1:9d:3d:d8:eb:07:8a:a9:af:3b:98:bf:82:
                    8e:6c:cb:30:f2:81:c4:ab:a6:6c:f2:5f:d8:d6:c0:
                    83:2d:1d:23:d8:89:8c:35:53:cc:73:b5:d8:7d:e4:
                    04:09:eb:c1:6f:31:55:ac:d1:b7:9d:d5:0f:ab:c0:
                    d1:c9:10:7c:58:7f:79:5c:f8:fd:e4:53:49:d3:be:
                    0a:15:c5:34:1c:2f:19:62:47:4d:6f:cf:b2:ba:3a:
                    30:2d:46:fc:3c:94:5d:d3:bf:bd:e7:7b:ab:42:c0:
                    4e:3e:a1:ea:e1:1d:75:2b:b0:25:b7:87:13:cd:f0:
                    6e:c0:c9:be:ca:dd:cd:83:6c:27:2d:7e:78:2d:ed:
                    23:79:b3:2e:39:97:fe:53:d3:45:f9:b3:bc:43:a3:
                    46:92:c7:52:eb:dd:07:07:09:a3:aa:3d:15:58:a3:
                    ee:b3:4f:0c:e6:1e:c0:8c:75:88:7c:ee:99:d4:1c:
                    ad:21:58:c9:01:b6:26:b9:af:57:45:ae:89:b2:bd:
                    14:c4:37:e5:31:21:3a:72:c5:a4:a6:f3:09:3a:f1:
                    7b:d4:44:9c:2d:55:97:df:1e:c3:12:76:e4:0f:fd:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:70:46:62:31:5F:D9:8B:19:8F:40:18:40:24:FD:C3:3F:18:D6:FB
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a393430303a3a2f34302d3430203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1278:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         d4:58:31:0e:a8:cd:cd:b9:31:f1:93:80:bd:2a:74:51:cc:ea:
         b5:a0:23:e9:44:8c:57:a9:96:73:93:e2:d6:66:ee:06:31:88:
         40:3e:78:eb:e0:ec:81:46:52:73:41:06:7b:7b:36:37:f2:e3:
         4d:ea:b4:6b:92:7d:dc:0f:47:52:08:80:7b:45:85:28:bd:c6:
         56:76:f5:da:bd:60:7e:88:4e:7c:55:b4:cc:23:f1:02:bf:69:
         09:84:f6:1a:e8:8a:8c:99:25:cb:81:c8:60:d2:45:7f:ad:0f:
         6e:e4:29:cc:4c:de:05:60:cb:33:cc:86:de:1e:77:b5:14:d4:
         d8:8f:3e:30:41:fd:7b:e4:0f:9e:32:0a:43:1d:c6:bf:12:2c:
         ba:9c:23:a0:6d:8b:d3:79:e7:c2:83:15:c3:c5:78:00:30:59:
         07:1e:c9:80:52:a8:a5:50:69:63:65:0d:93:67:c0:97:8a:16:
         a8:76:b0:bc:66:a5:e1:e5:50:07:5a:04:30:8d:8a:24:b7:27:
         d2:48:83:16:55:c7:ab:ba:eb:f9:2d:d8:ec:07:0e:fc:07:c7:
         b4:3d:99:84:f1:b9:df:bd:03:ac:c5:c6:b3:ea:9e:76:fe:40:
         36:67:e0:87:ee:f7:6d:29:52:f1:38:90:65:ec:6d:86:7c:ce:
         6f:ea:f3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:32 2026 by rpki-client