Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
File:                     323830343a393538633a3a2f33322d3332203d3e20323734353239.roa (raw, json)
Hash identifier:          Rj0qcOxL1+Uj9t2vGvshea18OIn1lEWGW/oHof3R1p8=
Subject key identifier:   58:D6:55:25:9C:15:5D:37:33:AA:34:25:63:E0:0B:09:0F:78:31:81
Certificate issuer:       /CN=D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644
Certificate serial:       48BC7EB425646A595C1BE7138309D878B3ACDBA2
Authority key identifier: D3:68:5A:EA:8F:FE:1C:8C:97:23:AB:24:C1:66:7D:BE:37:F9:C6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa
Signing time:             Wed 12 Aug 2026 04:04:16 +0000
ROA not before:           Wed 12 Aug 2026 03:59:16 +0000
ROA not after:            Wed 11 Aug 2027 04:04:16 +0000
asID:                     274529
IP address blocks:        2804:958c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.crl
                          rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bc:7e:b4:25:64:6a:59:5c:1b:e7:13:83:09:d8:78:b3:ac:db:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644
        Validity
            Not Before: Aug 12 03:59:16 2026 GMT
            Not After : Aug 11 04:04:16 2027 GMT
        Subject: CN=58D655259C155D3733AA342563E00B090F783181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:72:31:79:5b:ea:41:e2:eb:09:7d:8c:2f:
                    f7:7e:11:b1:58:35:49:76:05:1d:ae:61:b2:80:95:
                    42:77:27:f9:44:db:db:4a:34:f9:c8:7a:52:3a:bd:
                    6e:c4:bd:bc:15:16:57:1b:ef:42:95:e7:89:f0:06:
                    90:ec:d3:b8:32:f2:ea:a9:a2:34:95:b7:35:51:0b:
                    9b:dc:97:69:a5:b9:92:25:e8:a8:a8:d5:8b:b5:86:
                    84:cc:94:28:97:aa:1c:7a:ba:da:1b:00:32:7b:a0:
                    f3:5d:6c:02:a9:8c:c7:16:96:21:ad:bd:4a:fb:69:
                    a6:03:37:0f:94:b2:8d:60:d4:d8:d9:cd:45:32:e8:
                    2c:a7:da:9a:5e:42:26:a9:06:de:82:9e:60:f4:9a:
                    a7:73:18:9f:78:27:47:f6:f3:23:5f:06:57:1d:3f:
                    ad:84:f7:58:6d:5b:bb:c4:6a:2b:77:86:8b:16:30:
                    de:06:57:d3:bb:f5:df:27:59:d3:f7:a9:aa:8f:4d:
                    6b:2f:22:81:d5:bb:10:e6:64:d2:51:98:84:5e:e1:
                    3f:58:c1:69:77:da:82:d5:34:60:99:5e:02:10:8d:
                    62:36:6d:71:e7:2d:c2:5a:3b:24:50:67:cd:94:98:
                    16:1e:19:ff:30:b4:2a:e4:b4:a6:d4:fb:31:6b:a2:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:55:25:9C:15:5D:37:33:AA:34:25:63:E0:0B:09:0F:78:31:81
            X509v3 Authority Key Identifier:
                keyid:D3:68:5A:EA:8F:FE:1C:8C:97:23:AB:24:C1:66:7D:BE:37:F9:C6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3685AEA8FFE1C8C9723AB24C1667DBE37F9C644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vogGGtatfqrrv6q5mARR3gH2mHKfrR5Y3rRYo1M6Pm3/0/323830343a393538633a3a2f33322d3332203d3e20323734353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:958c::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:24:e5:ec:b1:e3:7f:95:41:6a:52:ab:62:6d:ac:0a:4b:21:
         98:a1:74:43:ec:ac:04:dc:b5:f8:2d:54:10:21:e9:89:cc:27:
         0f:03:87:65:cb:13:59:25:38:b5:13:41:68:74:c1:20:f8:8a:
         97:85:1a:41:21:bc:85:7b:18:3f:06:5e:ff:67:c0:5f:6f:8b:
         f0:2e:6a:be:eb:b7:1e:ad:97:22:d8:4f:e1:12:dc:46:6f:a4:
         f8:99:ee:5a:a6:b0:70:36:3b:96:49:77:f3:66:b4:57:51:a7:
         70:53:77:ff:dd:53:e1:4c:c6:cd:bd:a5:6e:da:70:85:2a:b9:
         4d:b4:cf:45:a5:17:35:c7:b1:56:27:e6:f2:ee:ad:83:29:0d:
         a4:8d:ab:9a:07:04:74:9f:fc:76:f6:77:de:f9:09:9b:31:08:
         5a:67:c1:ed:6a:8e:37:f0:e2:2a:28:75:2f:d9:32:09:85:4e:
         69:ae:d4:1d:e8:cc:70:0a:dc:9b:08:9b:31:4c:d2:0f:b1:ad:
         b5:ff:bd:74:02:d3:a5:77:d6:b5:07:4d:a3:f3:16:13:7a:ed:
         9f:b8:d2:5c:ce:2c:42:1b:fa:37:50:9e:a4:1f:ba:d8:61:10:
         a2:a9:04:4a:a3:b3:ee:5e:e4:db:9e:40:96:fe:91:57:6c:8e:
         86:0a:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:45 2026 by rpki-client