Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/323830343a353536383a3a2f33322d3438203d3e20323637393333.roa
File:                     323830343a353536383a3a2f33322d3438203d3e20323637393333.roa (raw, json)
Hash identifier:          gAw3IHH3NPnOuGeRNooQrb55n5lPvDJR+HND4j2McBU=
Subject key identifier:   B6:96:18:AF:08:BF:E4:68:22:0C:84:D1:0A:7C:4E:30:F6:2C:1A:7F
Certificate issuer:       /CN=A71812A39C72ADD65640E8F8A9094FB0E8CE02DD
Certificate serial:       7005702A95BA7E85364A84E0837FF4443ED4E04D
Authority key identifier: A7:18:12:A3:9C:72:AD:D6:56:40:E8:F8:A9:09:4F:B0:E8:CE:02:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/323830343a353536383a3a2f33322d3438203d3e20323637393333.roa
Signing time:             Wed 05 Aug 2026 13:59:46 +0000
ROA not before:           Wed 05 Aug 2026 13:54:46 +0000
ROA not after:            Wed 04 Aug 2027 13:59:46 +0000
asID:                     267933
IP address blocks:        2804:5568::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.crl
                          rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:70:2a:95:ba:7e:85:36:4a:84:e0:83:7f:f4:44:3e:d4:e0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A71812A39C72ADD65640E8F8A9094FB0E8CE02DD
        Validity
            Not Before: Aug  5 13:54:46 2026 GMT
            Not After : Aug  4 13:59:46 2027 GMT
        Subject: CN=B69618AF08BFE468220C84D10A7C4E30F62C1A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:bf:a6:5f:5f:1d:22:ab:43:de:f9:de:f0:
                    05:55:89:eb:2f:93:ed:d1:61:8a:cf:50:4c:18:6f:
                    b7:28:d9:3b:99:1d:7d:26:75:62:0b:40:ee:62:2c:
                    b6:3c:0f:ad:a8:1a:8f:d3:ee:49:97:9e:6e:da:f5:
                    7d:00:1b:ca:51:20:0c:7b:8a:3a:8a:0b:fd:37:44:
                    d5:ff:17:5a:3e:99:1c:b0:30:a2:9e:24:fe:e5:45:
                    4b:43:01:5a:db:3a:03:7d:b7:53:c5:de:ee:ff:b9:
                    bc:ad:fd:d1:f8:3d:a8:f5:7d:5c:2a:a6:03:23:07:
                    c1:34:c4:47:85:cf:21:37:c7:40:a4:7e:ef:14:0b:
                    67:d0:2f:09:0d:0c:57:2b:d9:48:f9:c2:ef:28:6b:
                    8b:fa:43:a4:d2:ff:bc:5a:63:a1:4e:26:89:9f:24:
                    59:5c:34:54:7f:b9:da:bc:4e:a0:e0:2f:e5:ac:c8:
                    f4:f3:76:5f:23:6b:0e:17:d3:1a:98:7a:04:22:ef:
                    c7:30:ca:c7:e0:98:d7:3e:37:16:46:cf:62:f3:bb:
                    8a:d8:eb:29:cc:5b:85:9f:56:42:7f:64:05:de:5b:
                    cd:5d:d7:f0:91:4e:f6:50:36:b8:94:8b:02:da:b6:
                    2e:32:25:c2:68:cf:53:45:af:77:27:03:ae:b0:b2:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:96:18:AF:08:BF:E4:68:22:0C:84:D1:0A:7C:4E:30:F6:2C:1A:7F
            X509v3 Authority Key Identifier:
                keyid:A7:18:12:A3:9C:72:AD:D6:56:40:E8:F8:A9:09:4F:B0:E8:CE:02:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A71812A39C72ADD65640E8F8A9094FB0E8CE02DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hiccr98oLKBWMoqqPjSntAyVpPBdZpmxKy6ip8iyemuU/0/323830343a353536383a3a2f33322d3438203d3e20323637393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5568::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:90:40:8b:fd:82:c4:a1:1c:fa:9d:1e:bd:97:b0:89:f9:
         50:75:a1:0e:b1:ee:2c:3c:ba:a2:67:d8:f5:d4:68:b7:6a:1e:
         42:cf:53:77:91:ba:1d:b1:8e:08:fe:3a:8f:c4:06:c8:26:33:
         81:20:a3:09:ca:22:ad:91:4e:af:4b:28:06:e1:2f:ba:1b:74:
         71:33:d2:d9:54:97:01:4c:be:e7:22:7d:11:40:d6:e8:34:b0:
         41:17:ca:3a:6b:e7:11:b4:f3:38:78:9f:fe:ec:51:4e:1e:d1:
         f7:e8:85:35:3f:e4:e4:4e:46:51:17:01:f2:c6:06:5d:0f:e5:
         ab:8e:f3:01:d7:93:a7:ee:20:0e:16:24:d0:5a:c2:f7:7d:d7:
         d8:f4:14:c6:c4:cd:73:44:1b:99:f8:c5:9f:e9:04:be:7e:26:
         51:d2:9f:76:67:42:4d:c2:ce:20:70:90:f1:e7:ac:de:3b:e0:
         c7:e1:e3:ce:a5:b5:9a:a7:d3:5e:ad:60:59:f3:cb:da:59:37:
         44:d5:8c:a2:4d:79:60:17:b3:69:01:e2:d2:88:98:4a:78:b2:
         68:b6:9b:46:6e:34:9c:c8:ad:74:c5:75:f1:71:66:92:4b:77:
         52:d5:30:ab:11:2c:6f:44:8b:e5:f4:78:92:8a:59:24:7b:57:
         13:75:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:13:46 2026 by rpki-client