Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3438203d3e20323633313038.roa
File:                     323830343a313665633a3a2f33322d3438203d3e20323633313038.roa (raw, json)
Hash identifier:          R/muZr5DmfLNNYdD+6yuxTjCheLLLH587vZflqyYdvY=
Subject key identifier:   36:28:AC:E0:9A:E7:9F:D7:38:4B:C8:07:64:E4:F5:A9:DA:D0:EA:AD
Certificate issuer:       /CN=AFA74B8940D555F399B41099771795949DA233E0
Certificate serial:       77CC84C55A3A8F5B9DF24FAA40C378BCFD11F3E0
Authority key identifier: AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3438203d3e20323633313038.roa
Signing time:             Tue 18 Aug 2026 12:11:47 +0000
ROA not before:           Tue 18 Aug 2026 12:06:47 +0000
ROA not after:            Tue 17 Aug 2027 12:11:47 +0000
asID:                     263108
IP address blocks:        2804:16ec::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl
                          rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cc:84:c5:5a:3a:8f:5b:9d:f2:4f:aa:40:c3:78:bc:fd:11:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFA74B8940D555F399B41099771795949DA233E0
        Validity
            Not Before: Aug 18 12:06:47 2026 GMT
            Not After : Aug 17 12:11:47 2027 GMT
        Subject: CN=3628ACE09AE79FD7384BC80764E4F5A9DAD0EAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:79:69:17:98:0b:94:84:d1:e0:a0:f5:2f:
                    14:4f:be:ed:b3:9a:20:93:17:42:d3:27:2d:99:54:
                    ea:5a:28:62:8a:a6:ba:4b:43:07:4d:c6:17:71:92:
                    65:c8:af:0c:0d:b3:88:11:a6:73:04:8a:90:b1:01:
                    e6:71:02:7e:b5:de:aa:75:8d:09:60:1f:55:29:d3:
                    e2:f3:82:36:77:d7:03:8d:f2:45:fd:2c:df:48:41:
                    d6:dd:5d:8a:93:da:4c:de:a3:d6:42:81:0a:09:cc:
                    57:e3:7f:47:8a:28:26:f8:fe:e4:65:f3:4a:c8:c7:
                    b3:b8:8d:98:16:47:e4:ba:09:d1:d0:80:48:99:f2:
                    f5:d9:3f:16:30:17:f4:3d:e1:ae:bf:4b:bd:ff:29:
                    9f:52:48:98:41:2b:f1:1b:da:9a:2c:f4:3c:07:7e:
                    98:a2:78:5d:ea:f7:bb:97:09:ee:f7:3b:03:29:6f:
                    03:94:67:91:e5:ba:35:ae:7e:28:87:95:99:c2:7c:
                    b5:5a:d7:21:93:41:47:ce:96:5c:b5:db:92:91:d4:
                    42:55:12:64:b9:b4:c4:85:44:97:d2:c6:79:6d:fa:
                    a8:f6:de:71:4f:91:4e:e4:2c:da:01:0c:59:74:ae:
                    36:e8:4e:8b:70:ce:71:89:5b:3a:d4:f3:cd:be:7a:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:28:AC:E0:9A:E7:9F:D7:38:4B:C8:07:64:E4:F5:A9:DA:D0:EA:AD
            X509v3 Authority Key Identifier:
                keyid:AF:A7:4B:89:40:D5:55:F3:99:B4:10:99:77:17:95:94:9D:A2:33:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/AFA74B8940D555F399B41099771795949DA233E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA74B8940D555F399B41099771795949DA233E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdKDMm65Y6RiMT5uU3jqqHmYwWnjirFLwHNWdXgYaSHC/0/323830343a313665633a3a2f33322d3438203d3e20323633313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:be:49:4b:ba:6b:2b:e8:a6:fc:42:a4:be:bf:22:91:33:
         cf:2d:79:2e:99:11:3f:6b:cb:80:7c:f1:f2:09:c8:ff:a2:64:
         ab:9b:26:c1:5d:03:0c:bb:0c:af:63:3f:78:1b:a9:51:d9:82:
         6e:61:e4:4e:44:e8:40:7d:fe:14:73:36:fd:78:6d:11:ac:a6:
         b6:cd:27:99:7f:9e:43:8f:d8:97:1a:f2:da:4b:95:30:64:39:
         eb:b8:c5:89:bb:dd:fb:a9:9e:f2:55:f4:39:d8:15:07:ad:73:
         64:c6:8b:6a:e0:c2:b2:ba:7b:08:34:17:74:1a:d9:ee:b0:73:
         d8:ce:d5:73:62:8a:c8:2c:66:40:72:aa:e3:32:10:eb:1f:c2:
         dc:46:54:ed:c3:bb:d7:20:cf:a3:02:00:25:66:1a:60:65:a9:
         3b:30:bb:29:8d:3e:93:eb:a6:97:95:6c:38:1c:dd:4c:e0:e8:
         8b:0b:27:a5:30:93:d2:86:bc:43:84:b6:14:41:70:16:a2:76:
         f4:c1:30:f0:3c:0c:0b:b2:f5:cb:1f:0c:59:68:07:2a:a8:c1:
         cd:b7:ef:04:97:55:cd:7c:31:4e:b8:84:5a:e2:8e:7c:ce:99:
         b9:85:df:b9:be:b4:df:c0:59:20:27:f9:4c:0c:26:63:55:40:
         5b:f4:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:08:12 2026 by rpki-client