Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
File:                     323830343a386566383a3a2f33322d3334203d3e20323733343539.roa (raw, json)
Hash identifier:          3JzSYny5OHkMcFrwCTLeiFJ/8KDy8kHGa//pnywOhQ8=
Subject key identifier:   64:8F:7B:62:4A:C3:B9:9D:79:03:68:DE:C8:2B:FA:6F:BB:8E:94:CD
Certificate issuer:       /CN=874EE119DC53C9BBF8B67BD6B4955E8944F9854E
Certificate serial:       4C9BAC70C52C214F81DC63088F3A9FB4B1010B92
Authority key identifier: 87:4E:E1:19:DC:53:C9:BB:F8:B6:7B:D6:B4:95:5E:89:44:F9:85:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa
Signing time:             Wed 29 Jul 2026 18:17:03 +0000
ROA not before:           Wed 29 Jul 2026 18:12:03 +0000
ROA not after:            Wed 28 Jul 2027 18:17:03 +0000
asID:                     273459
IP address blocks:        2804:8ef8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.crl
                          rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:9b:ac:70:c5:2c:21:4f:81:dc:63:08:8f:3a:9f:b4:b1:01:0b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874EE119DC53C9BBF8B67BD6B4955E8944F9854E
        Validity
            Not Before: Jul 29 18:12:03 2026 GMT
            Not After : Jul 28 18:17:03 2027 GMT
        Subject: CN=648F7B624AC3B99D790368DEC82BFA6FBB8E94CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:07:8d:2e:59:d4:dd:87:56:65:0c:a0:c4:
                    b2:16:ed:9f:a4:06:73:b2:aa:60:f8:ad:51:36:dd:
                    d3:d5:94:3f:2d:0e:be:60:af:ed:a8:70:69:95:43:
                    3f:a4:16:c7:c8:2c:df:f9:32:da:aa:5e:27:94:4b:
                    93:6f:0d:bb:7b:e1:94:50:89:fa:43:62:02:9e:4d:
                    ec:59:13:5c:b3:37:28:d9:07:15:78:5a:4e:28:4c:
                    6e:30:13:3a:60:7c:2a:75:ff:fd:ca:23:46:f4:41:
                    b1:49:a3:1f:ff:aa:f1:80:80:ac:a9:bd:16:68:c2:
                    94:fa:f8:52:41:d8:ff:6e:37:27:d6:e7:9b:9b:82:
                    a9:88:4c:34:06:c8:fd:b2:b1:dc:87:cd:02:d8:80:
                    7a:c1:14:af:59:83:1f:4d:42:e9:2a:92:22:2a:76:
                    5e:5c:fc:e8:62:f3:a6:12:45:0e:29:f2:bc:45:55:
                    66:2a:cc:60:57:8f:b9:6c:9e:72:95:20:a8:21:0f:
                    dd:e5:df:20:d0:f1:2f:17:47:26:a3:48:13:a5:72:
                    b7:2e:44:cc:af:55:10:31:56:1b:1e:10:cd:e1:98:
                    21:6d:57:61:91:e4:10:6f:00:b1:7a:be:c5:ab:3b:
                    64:b2:c5:bd:10:3a:68:d6:c5:40:cb:41:9f:4f:d8:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8F:7B:62:4A:C3:B9:9D:79:03:68:DE:C8:2B:FA:6F:BB:8E:94:CD
            X509v3 Authority Key Identifier:
                keyid:87:4E:E1:19:DC:53:C9:BB:F8:B6:7B:D6:B4:95:5E:89:44:F9:85:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/874EE119DC53C9BBF8B67BD6B4955E8944F9854E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XsmfqdwnCLSZZZ6MiD9UfRd1qEH9RCV8gxyvB8kDEET/0/323830343a386566383a3a2f33322d3334203d3e20323733343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:34:5b:b9:86:67:41:17:19:5b:eb:91:c5:b0:04:eb:1b:59:
         49:34:a7:19:b5:65:52:2c:46:ce:10:8a:45:53:1a:9f:f4:0a:
         b3:8d:87:37:a1:32:9e:6f:75:fe:37:db:b5:26:64:e1:b5:26:
         3b:ec:3d:0c:65:a5:b5:1f:25:3e:37:be:1e:f2:c3:8b:5a:cd:
         0c:d2:73:71:35:fb:b9:5f:07:73:83:f1:0b:0e:e5:dd:a6:74:
         c2:f8:cf:03:55:8e:a8:5c:ad:5a:c5:ed:da:ca:e5:9f:62:58:
         32:38:87:79:77:f5:4f:c6:3a:fc:e5:b8:37:45:fa:8f:c6:8c:
         9a:12:c7:f4:fa:be:01:60:1e:95:3a:c2:8a:87:51:fb:d5:4c:
         99:8d:b6:24:a7:11:37:08:44:18:fd:21:54:88:27:99:1d:ab:
         55:a0:0d:8b:79:07:cb:a9:6e:7b:43:4e:f6:0e:5b:e4:44:b9:
         8e:14:43:87:3c:a1:e7:c3:04:1a:74:58:fd:69:83:5b:b6:22:
         d4:86:27:27:53:7b:d4:79:f4:0b:57:76:64:d1:cd:64:7a:27:
         d0:00:88:cb:3c:f0:a2:5d:5c:ea:94:28:c9:c8:c6:21:be:11:
         6e:31:a1:57:b5:65:84:df:3c:b3:87:b4:ea:29:2d:63:9c:3e:
         fd:3f:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:01:56 2026 by rpki-client