Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/323830343a353633383a3a2f33322d3333203d3e20323637393834.roa
File:                     323830343a353633383a3a2f33322d3333203d3e20323637393834.roa (raw, json)
Hash identifier:          +lJnekv7blDcIOvTT173y/Rnoy0Ns11Qcptwz0ks+Sg=
Subject key identifier:   89:BE:93:C4:21:A7:79:C2:E7:0E:19:44:06:FB:19:C2:84:36:65:BA
Certificate issuer:       /CN=3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6
Certificate serial:       502FF4A035CC5471E15D04F6A293717BF96CDEA4
Authority key identifier: 3C:28:2E:5D:87:FF:F8:0B:AA:99:13:BD:A7:8E:36:ED:4D:1D:5D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/323830343a353633383a3a2f33322d3333203d3e20323637393834.roa
Signing time:             Wed 29 Jul 2026 17:29:07 +0000
ROA not before:           Wed 29 Jul 2026 17:24:07 +0000
ROA not after:            Wed 28 Jul 2027 17:29:07 +0000
asID:                     267984
IP address blocks:        2804:5638::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.crl
                          rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2f:f4:a0:35:cc:54:71:e1:5d:04:f6:a2:93:71:7b:f9:6c:de:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6
        Validity
            Not Before: Jul 29 17:24:07 2026 GMT
            Not After : Jul 28 17:29:07 2027 GMT
        Subject: CN=89BE93C421A779C2E70E194406FB19C2843665BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:76:c4:75:2d:9f:d9:b4:ed:21:9f:7c:2e:
                    38:a7:a3:d1:e0:99:63:aa:62:fa:aa:da:bd:e8:94:
                    11:0f:19:05:30:16:43:7a:cf:bc:05:18:93:8d:ad:
                    a1:72:a3:e8:3d:bb:de:46:3e:f3:60:64:75:39:05:
                    ca:78:76:f6:bd:c6:39:ac:35:00:1d:07:d5:fd:af:
                    fe:16:f8:43:56:4f:19:39:84:61:a4:95:43:46:bf:
                    57:ad:25:06:d8:f3:70:58:ee:3b:1b:34:52:70:17:
                    ed:5a:60:9b:c0:e1:34:3e:e4:ed:5a:7f:7b:ec:d7:
                    e1:05:63:d9:dc:fe:f4:c7:e4:82:8a:84:0a:31:3e:
                    02:06:f8:6c:47:67:8e:71:3a:a2:b7:bb:d7:f0:a7:
                    d9:7a:e0:7d:b1:0e:bd:57:7d:e7:e6:0a:2d:1e:92:
                    28:e9:fe:b1:f5:68:63:78:6b:37:8b:3c:6c:c1:cb:
                    25:cb:dd:b9:16:cd:ef:36:02:f9:97:a3:26:58:3d:
                    1d:d0:ad:45:5a:64:8a:59:dc:49:53:0b:7a:d5:62:
                    d9:dd:cb:df:a7:c8:c7:e6:0b:63:d4:bf:ff:2a:14:
                    41:8b:28:2b:84:d6:f5:dc:bc:f2:ae:52:03:5d:9b:
                    64:39:f8:b4:ec:be:b1:f8:88:bd:91:27:55:d8:49:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BE:93:C4:21:A7:79:C2:E7:0E:19:44:06:FB:19:C2:84:36:65:BA
            X509v3 Authority Key Identifier:
                keyid:3C:28:2E:5D:87:FF:F8:0B:AA:99:13:BD:A7:8E:36:ED:4D:1D:5D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C282E5D87FFF80BAA9913BDA78E36ED4D1D5DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zUaudLpA3nzKSyjvP3YiqRMKhGTaJSiJnsPtZAuiQG1/0/323830343a353633383a3a2f33322d3333203d3e20323637393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5638::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:21:11:0e:3e:4f:2f:5e:1f:55:8f:40:e5:70:28:c6:e3:
         94:24:46:f2:64:d9:f8:50:71:ee:48:a5:0d:61:75:63:a2:8b:
         6a:26:37:25:7b:f1:06:b8:2d:cf:9d:5e:40:64:4f:ef:34:d9:
         b9:be:a5:f8:f4:17:20:d0:d6:02:73:d1:22:35:4a:4d:79:a9:
         0f:10:f0:74:f4:15:66:d1:d2:0a:35:c1:01:f7:8f:db:aa:31:
         25:3e:85:91:53:03:0f:7f:df:fd:93:fd:6a:70:ee:2a:97:4c:
         ed:4e:5e:92:83:1b:06:6d:e7:7c:9d:39:5d:82:73:ba:e7:bb:
         bf:c7:20:73:f3:11:72:65:65:98:d4:8f:f1:a2:0a:53:87:72:
         66:cc:e6:64:b0:40:51:df:0d:14:d1:83:95:f4:ec:72:b9:b5:
         46:af:2a:db:ed:fa:95:21:4e:82:01:87:49:b2:14:8b:86:cb:
         65:6f:bc:95:93:3c:f6:c3:30:49:f9:07:12:8a:86:f3:f3:ad:
         a9:1b:26:3b:66:a8:00:3c:9d:30:85:43:2b:26:da:10:60:cf:
         d8:2f:15:ae:0f:66:20:a8:e6:64:a4:57:5e:d9:ea:7b:8f:99:
         d3:b5:11:2c:0f:84:7d:34:dc:b4:13:7e:cf:e0:22:b9:ce:7f:
         34:f1:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:23 2026 by rpki-client