Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a653030303a3a2f34302d3430203d3e20323633343738.roa
File:                     323830343a313237383a653030303a3a2f34302d3430203d3e20323633343738.roa (raw, json)
Hash identifier:          fr3uoXdfEJcVWZqoXlep7VJpzI0u1WgN+3g8AVFHFmQ=
Subject key identifier:   1E:20:45:5C:D1:F2:E1:17:45:AC:E6:F6:7A:B3:3C:31:E4:D5:73:7F
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       3C7C2E2828BA028E05438DE65F23E61705C1B561
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a653030303a3a2f34302d3430203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:40 +0000
ROA not before:           Fri 14 Aug 2026 18:46:40 +0000
ROA not after:            Fri 13 Aug 2027 18:51:40 +0000
asID:                     263478
IP address blocks:        2804:1278:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7c:2e:28:28:ba:02:8e:05:43:8d:e6:5f:23:e6:17:05:c1:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:40 2026 GMT
            Not After : Aug 13 18:51:40 2027 GMT
        Subject: CN=1E20455CD1F2E11745ACE6F67AB33C31E4D5737F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:c5:3a:cc:90:8c:21:b5:a4:68:00:0f:22:
                    78:66:09:e2:32:ee:4a:f9:54:25:1b:3b:d1:db:ec:
                    9c:aa:8d:b6:61:5d:a8:d9:5b:07:80:ec:d5:06:10:
                    ac:6d:15:c9:45:e5:6c:cb:ff:d6:d6:21:d5:ed:a9:
                    18:9d:d6:c5:20:3c:90:15:c4:52:fb:3f:76:60:77:
                    c2:68:e0:8f:15:27:7c:b3:aa:61:1e:92:0e:c9:77:
                    84:51:e8:9f:28:85:74:a5:58:0f:e0:19:18:16:94:
                    18:9d:77:73:1e:fc:03:d1:ad:ad:4f:a2:46:5f:24:
                    58:77:4a:a4:ce:40:3e:da:0e:03:87:b2:1e:1a:fe:
                    4c:3e:8e:5f:54:c7:be:20:a8:6e:a9:9c:27:23:07:
                    e3:23:70:81:26:7e:00:44:47:ee:5c:6e:19:6b:84:
                    28:a4:91:aa:f1:ea:2f:0b:4f:63:c7:8a:44:a3:8b:
                    47:55:70:ff:2d:29:9a:d5:0f:81:d9:05:65:e9:14:
                    75:8f:6d:c7:90:9e:63:dc:b0:eb:d7:4c:67:eb:4f:
                    4e:29:ca:c0:6c:05:e2:cb:f4:c4:e2:40:1a:5e:51:
                    a3:e3:5d:aa:2c:4f:75:4f:7c:ff:eb:a2:20:6d:2c:
                    14:14:27:e0:82:bc:32:82:1a:b5:63:fc:3c:bd:cc:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:45:5C:D1:F2:E1:17:45:AC:E6:F6:7A:B3:3C:31:E4:D5:73:7F
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/323830343a313237383a653030303a3a2f34302d3430203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1278:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:54:f5:75:b0:69:06:db:0c:25:72:c5:b8:61:b9:93:3c:52:
         47:b9:e5:be:71:15:c3:56:33:ff:53:2f:63:dd:b7:91:b0:7c:
         78:ec:5f:3d:76:4b:7c:b3:ea:8b:c2:22:69:0d:ea:34:81:d3:
         a4:27:d4:52:a2:7b:1e:a2:bb:e7:04:53:56:e4:a6:77:3f:9b:
         b2:2b:6b:96:da:ca:e0:e2:d2:35:65:90:01:80:c6:da:26:12:
         dc:61:83:4f:87:08:47:39:32:3f:1f:8d:55:76:48:ff:10:76:
         4e:e1:f9:3a:ca:4b:2a:0a:7a:69:a0:2e:28:23:57:e9:a1:77:
         c1:58:f2:dc:28:71:8a:00:e6:16:b1:fb:14:11:87:1f:4a:87:
         6f:e4:3e:f2:59:ed:17:15:90:ea:ad:41:10:a8:e0:06:6d:31:
         8e:ee:f5:ad:40:84:ec:2a:e7:a1:cc:5d:3e:98:fd:d1:81:6f:
         79:da:6f:33:00:b0:fa:c7:9c:f9:c7:1e:80:a0:98:a3:47:57:
         76:0a:76:54:cd:b2:44:4f:2f:ce:44:8d:1d:7d:00:96:a0:19:
         03:10:17:73:53:d0:55:aa:7c:43:0e:9f:2c:8f:2c:52:98:af:
         dc:86:d1:d4:50:ea:92:68:dc:ec:4f:04:e3:b6:bc:37:51:1e:
         cd:73:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:11 2026 by rpki-client