Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/323830343a396135343a3a2f33322d3438203d3e20323735383339.roa
File:                     323830343a396135343a3a2f33322d3438203d3e20323735383339.roa (raw, json)
Hash identifier:          w4fmcd/oFaeU1aWb+YPywmu31gjrfkKRW3/g1hiTTfI=
Subject key identifier:   08:84:30:D8:D3:0A:1D:27:FE:2C:CA:6A:2A:E9:37:38:B5:74:75:C3
Certificate issuer:       /CN=BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825
Certificate serial:       7299615D2BE1D65D4E95F22507673DBB2371B9E1
Authority key identifier: BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/323830343a396135343a3a2f33322d3438203d3e20323735383339.roa
Signing time:             Fri 28 Aug 2026 16:19:45 +0000
ROA not before:           Fri 28 Aug 2026 16:14:45 +0000
ROA not after:            Fri 27 Aug 2027 16:19:45 +0000
asID:                     275839
IP address blocks:        2804:9a54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.crl
                          rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:99:61:5d:2b:e1:d6:5d:4e:95:f2:25:07:67:3d:bb:23:71:b9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825
        Validity
            Not Before: Aug 28 16:14:45 2026 GMT
            Not After : Aug 27 16:19:45 2027 GMT
        Subject: CN=088430D8D30A1D27FE2CCA6A2AE93738B57475C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:c3:d0:d2:80:7b:95:bb:90:bb:f1:41:b2:
                    ba:e6:84:c6:29:70:df:82:8f:d3:ca:c6:1c:f0:27:
                    5e:36:85:2d:e1:df:ce:2c:61:c3:8d:46:1d:c6:c1:
                    28:9b:8d:c2:40:f6:1a:05:03:88:c4:15:fb:06:35:
                    5a:bb:e1:a8:1d:7c:2c:75:76:fc:47:bf:68:c1:1e:
                    11:54:97:a8:da:fd:d9:f1:25:dc:8e:f1:8f:67:9c:
                    d7:25:77:f7:08:b2:45:ba:30:8f:b2:f1:d0:de:ed:
                    2d:2a:9c:37:e0:94:e5:9c:6d:b7:3a:0d:8c:ba:27:
                    ed:81:af:12:d9:19:01:e0:34:00:d3:03:ef:0c:60:
                    7c:76:00:a2:cc:e1:da:f4:e2:e9:e9:37:ca:17:89:
                    be:97:38:5f:27:9b:49:2e:4b:5e:a6:49:39:83:62:
                    ca:7c:26:51:f8:de:b1:de:d6:37:5b:51:c1:fc:6f:
                    89:bf:c4:43:dc:68:58:b4:ce:c0:fd:8c:d4:58:3d:
                    9a:37:0e:3f:38:07:95:e9:9b:86:1e:23:ff:35:9f:
                    41:71:24:fd:2b:0e:61:c1:f2:c7:b3:aa:cf:a8:00:
                    dd:fb:dc:74:c0:34:b1:21:72:91:9c:ed:dc:2c:4a:
                    0b:72:6c:37:a6:92:dc:37:9e:c7:9a:be:bc:aa:26:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:84:30:D8:D3:0A:1D:27:FE:2C:CA:6A:2A:E9:37:38:B5:74:75:C3
            X509v3 Authority Key Identifier:
                keyid:BF:9D:E8:FB:49:F6:31:4B:6E:D2:E7:AC:94:3C:9C:BF:93:B4:A8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9DE8FB49F6314B6ED2E7AC943C9CBF93B4A825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hju4bArMXMDp3kaGtMyd6FRnwimwj4zw2aEFmhmpHUVr/0/323830343a396135343a3a2f33322d3438203d3e20323735383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9a54::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:54:30:78:9d:39:a3:46:a4:7c:25:73:7b:d7:d7:30:91:58:
         d3:c3:7b:74:fb:af:2f:c0:74:64:ac:3b:18:bb:5a:a7:e4:cf:
         3a:31:df:4e:78:9f:cc:72:b0:a7:66:7e:e7:95:a9:29:6a:e6:
         cb:7d:77:08:c6:a6:b7:50:4a:2b:31:f7:e4:63:91:df:2b:57:
         a7:3a:b5:57:22:30:e9:0e:ef:54:9f:88:d7:b9:85:ed:ae:89:
         9e:6e:45:ff:57:83:4f:0f:96:e1:6b:94:5a:f3:eb:91:72:90:
         c3:b3:e9:e1:62:bc:3a:4d:c2:a2:36:f4:b0:53:da:3e:5e:23:
         fd:db:42:ee:5d:bd:29:93:0d:c9:d8:1d:90:3c:7d:ad:1e:74:
         22:10:45:c3:f3:7d:18:e4:1f:29:98:b1:df:53:5f:5e:e5:00:
         c4:87:91:f9:89:6a:ec:7e:d3:b4:21:40:be:1f:3f:e7:ec:14:
         18:06:67:fc:1b:33:24:a8:7b:8b:29:1c:a1:59:a7:d5:39:58:
         8c:3c:b9:2d:f0:42:c4:78:b0:f6:52:77:cd:cb:19:3f:31:1e:
         58:99:b2:c6:6e:06:01:bc:9c:9d:19:59:fb:e5:f9:4a:b8:d6:
         36:be:8e:eb:7d:34:96:61:bb:b5:61:7b:e5:02:65:bc:9d:bf:
         6f:dc:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:11:39 2026 by rpki-client