Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3438203d3e203232313238.roa
File:                     323830343a64383a3a2f33322d3438203d3e203232313238.roa (raw, json)
Hash identifier:          Uxg+sqd5CPG9vdnN+PThbtyEddolAdQRtvn9HJBST5s=
Subject key identifier:   78:2F:FB:3B:0C:1C:2D:47:6F:F6:87:7D:17:5F:D1:8D:E4:1C:22:23
Certificate issuer:       /CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
Certificate serial:       3BA56347E2969990A79AD6882BFA295D60ECD973
Authority key identifier: 14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3438203d3e203232313238.roa
Signing time:             Mon 13 Jul 2026 21:07:32 +0000
ROA not before:           Mon 13 Jul 2026 21:02:32 +0000
ROA not after:            Mon 12 Jul 2027 21:07:32 +0000
asID:                     22128
IP address blocks:        2804:d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 18:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a5:63:47:e2:96:99:90:a7:9a:d6:88:2b:fa:29:5d:60:ec:d9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14BE2DC7DA29D6A3E51E817626C1D961B3BA6787
        Validity
            Not Before: Jul 13 21:02:32 2026 GMT
            Not After : Jul 12 21:07:32 2027 GMT
        Subject: CN=782FFB3B0C1C2D476FF6877D175FD18DE41C2223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:cd:3d:f0:82:b2:9e:ab:b5:21:41:e4:9f:
                    0b:80:66:98:0a:fa:e1:33:a0:35:27:ac:84:8b:06:
                    5f:b6:0c:aa:a8:38:85:c2:6d:eb:2d:ef:76:61:a1:
                    7a:5f:29:c5:da:5b:33:b6:9c:77:6f:2a:13:cd:a7:
                    6e:dc:d8:7c:1e:7c:93:39:0a:31:b3:1c:a0:8a:69:
                    ce:38:0c:74:90:c4:ad:d8:91:d0:b2:ef:65:26:e1:
                    4f:68:ef:a5:f6:84:81:b1:0c:e8:f2:43:ba:2f:86:
                    69:35:57:01:28:6b:5d:f7:6e:15:34:aa:77:04:45:
                    fa:e8:1a:d1:ba:ea:10:68:e6:4f:5e:b1:fd:d5:7b:
                    a5:99:b7:ee:52:ef:97:2b:11:03:9e:1a:58:ed:10:
                    f1:cb:fb:7b:a0:a0:4e:25:44:40:36:ac:be:31:7c:
                    fc:75:36:81:c1:ab:1f:00:fd:52:1c:44:8e:72:14:
                    4e:14:73:18:5b:47:ea:cb:61:ee:a5:b8:f3:5d:95:
                    aa:56:b4:8b:3c:9c:c0:c1:4c:b2:12:64:71:bc:e6:
                    e6:7c:72:b1:c1:ed:36:7a:b0:42:7f:4d:4f:26:89:
                    f8:4c:af:c3:4c:ae:38:7c:31:ce:81:dc:76:14:79:
                    fc:39:66:fb:f7:a7:db:9d:d0:4e:3f:90:d5:8c:0d:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:FB:3B:0C:1C:2D:47:6F:F6:87:7D:17:5F:D1:8D:E4:1C:22:23
            X509v3 Authority Key Identifier:
                keyid:14:BE:2D:C7:DA:29:D6:A3:E5:1E:81:76:26:C1:D9:61:B3:BA:67:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14BE2DC7DA29D6A3E51E817626C1D961B3BA6787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a64383a3a2f33322d3438203d3e203232313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:af:8c:82:4f:3d:52:12:0a:a7:14:5d:b0:64:8e:1a:7f:
         88:18:e2:38:b5:ba:59:02:39:bb:2d:73:56:e0:44:34:86:24:
         28:b4:ee:b7:5c:46:a4:79:7e:61:8e:44:7c:e8:b8:17:2e:fd:
         ff:34:c8:2e:34:47:9a:85:2c:5d:11:91:e8:77:27:bc:fb:3c:
         12:c5:f2:34:01:82:ec:bb:5c:d2:14:50:55:e5:61:81:2d:64:
         fb:2c:e9:79:45:a7:e7:dc:bc:45:99:1b:e7:c7:b4:ff:c0:a3:
         a3:a4:ed:2a:96:62:63:0e:aa:4c:84:d6:ec:af:43:d1:a8:d4:
         2b:57:31:b7:17:36:f6:c2:9a:a8:01:cd:d4:93:b2:37:5a:f9:
         08:88:2c:83:26:75:da:4e:20:cf:72:e9:15:b3:d0:1a:87:b8:
         79:cb:ad:a0:7c:83:ca:4e:9a:d0:54:da:20:9f:e1:34:66:6c:
         3f:f4:fb:3b:94:19:2b:07:05:f4:8f:8f:0e:54:b0:86:b3:73:
         9c:d2:57:a4:21:47:30:1b:fc:94:14:46:da:65:d8:17:00:35:
         b9:92:91:14:37:29:1e:6f:15:08:f1:42:1e:61:cd:89:ea:b8:
         56:5d:5a:bb:39:00:fe:e0:2e:29:cf:0f:b0:1f:db:d8:e0:87:
         b0:17:65:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:11 2026 by rpki-client