Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33322d3332203d3e20323637313238.roa (raw, json)
Hash identifier:          TSkzJ7mdGr7ifxY5BxfggLDfMlREyUJQvFgomcVjPrU=
Subject key identifier:   8D:2B:17:9F:D4:BD:50:2C:C0:41:9A:E7:B3:3F:4E:81:B9:36:2E:32
Certificate issuer:       /CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
Certificate serial:       5E7AA84EC9F6457CEECC716B24DA1C58105A8F47
Authority key identifier: 64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa
Signing time:             Sat 12 Sep 2026 14:55:08 +0000
ROA not before:           Sat 12 Sep 2026 14:50:08 +0000
ROA not after:            Sat 11 Sep 2027 14:55:08 +0000
asID:                     267128
IP address blocks:        2804:488c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl
                          rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7a:a8:4e:c9:f6:45:7c:ee:cc:71:6b:24:da:1c:58:10:5a:8f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64755CD3D31B6F1A5094E0F187202D5551F1D36D
        Validity
            Not Before: Sep 12 14:50:08 2026 GMT
            Not After : Sep 11 14:55:08 2027 GMT
        Subject: CN=8D2B179FD4BD502CC0419AE7B33F4E81B9362E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:f8:88:36:35:66:f2:a1:1c:fd:66:b8:ce:
                    72:a7:06:c4:81:bf:dc:39:94:cb:80:0b:f2:2b:62:
                    81:df:c2:12:31:67:28:ed:af:80:37:ec:fd:1c:4a:
                    3e:47:da:82:aa:8a:a7:7b:e6:be:f1:14:44:bc:fa:
                    f2:ec:b5:fe:c5:b5:cf:01:2d:01:a6:47:ff:0a:1e:
                    8b:6a:1a:6e:50:e8:f7:bf:b4:1e:19:73:01:03:00:
                    22:02:bc:72:07:61:35:48:cf:41:0c:5f:33:3d:e4:
                    86:26:a6:e2:ce:93:eb:0e:4b:38:ca:8a:27:4b:b1:
                    f7:37:67:b6:b2:c6:7d:3a:a3:b1:39:cd:81:f4:fc:
                    11:f5:44:6e:25:70:43:28:bb:21:1f:f4:4a:c4:65:
                    41:54:d5:74:3d:8e:c7:82:4d:8e:73:f7:1b:48:74:
                    37:f7:2e:ee:f6:e0:68:69:5e:a2:6a:39:b1:b7:fe:
                    ae:fa:3a:b3:06:29:63:6a:63:6d:33:db:20:9a:cc:
                    29:05:46:6d:cb:cf:87:7b:85:af:8d:d5:a9:1f:f2:
                    fd:c1:4a:ae:6d:a4:0c:eb:fa:39:d9:b3:8f:df:81:
                    78:be:11:13:a5:7b:d9:7f:9a:e7:27:7d:83:36:bf:
                    7c:fb:55:fc:6a:9f:e9:20:6a:04:67:50:aa:ba:6c:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:17:9F:D4:BD:50:2C:C0:41:9A:E7:B3:3F:4E:81:B9:36:2E:32
            X509v3 Authority Key Identifier:
                keyid:64:75:5C:D3:D3:1B:6F:1A:50:94:E0:F1:87:20:2D:55:51:F1:D3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/64755CD3D31B6F1A5094E0F187202D5551F1D36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64755CD3D31B6F1A5094E0F187202D5551F1D36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33322d3332203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:9f:8d:70:40:ea:ef:2f:80:76:33:9c:3f:bf:34:c4:d4:c2:
         fd:cd:d9:2f:17:2c:a0:32:8e:62:0a:20:a3:16:46:31:c8:b5:
         12:58:8f:01:a1:b6:ac:05:11:37:7f:d1:52:f6:92:c2:f8:f9:
         6c:93:77:ba:e2:06:dc:bf:57:90:3f:4c:db:02:10:b7:c8:fc:
         53:7b:8e:8d:89:ef:20:52:5d:76:ea:4b:8b:f9:29:2a:fd:26:
         6c:84:fb:85:f7:9f:3c:92:0c:71:52:0c:56:70:a5:59:be:72:
         00:4f:df:09:a5:a8:1f:15:69:28:64:ba:10:8d:19:6b:06:a7:
         a6:22:8f:d4:a3:35:cf:84:85:21:23:56:73:86:71:73:74:5a:
         86:9f:82:12:05:71:8c:e9:c6:ae:85:95:92:37:45:53:47:2e:
         63:aa:21:18:56:65:4a:ac:16:5f:80:c3:a3:b4:99:95:ef:f7:
         2d:d8:a4:2d:fa:9f:4a:f0:c3:47:f3:34:8d:e7:f9:53:a2:e6:
         4e:a6:8b:d6:23:29:47:bc:d5:c5:9f:c3:1d:3c:71:32:5c:98:
         1e:5d:af:1b:44:ff:ed:02:69:76:ee:b5:99:e3:4f:66:96:54:
         3a:93:99:66:e9:fe:69:a6:b6:e0:fd:15:0d:62:98:90:1d:65:
         77:92:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:32:36 2026 by rpki-client