Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
File:                     323830343a3863383a3a2f33322d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          z9LSqDP6rrS2p25QGJajtI8nTePL/BX2fO+jvkMuRAU=
Subject key identifier:   98:E2:14:2A:99:1C:CD:C1:DC:0C:E0:8D:83:C8:E1:F3:21:E9:43:EB
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       78A58D03FFE2B1C6942BD3A3B0492B0B08DD10B6
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa
Signing time:             Mon 11 May 2026 04:50:15 +0000
ROA not before:           Mon 11 May 2026 04:45:15 +0000
ROA not after:            Mon 10 May 2027 04:50:15 +0000
asID:                     262393
IP address blocks:        2804:8c8::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:8d:03:ff:e2:b1:c6:94:2b:d3:a3:b0:49:2b:0b:08:dd:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May 11 04:45:15 2026 GMT
            Not After : May 10 04:50:15 2027 GMT
        Subject: CN=98E2142A991CCDC1DC0CE08D83C8E1F321E943EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:28:64:d0:b6:2c:a9:74:54:68:55:f3:d7:0e:
                    62:af:f3:cf:fe:dd:d5:67:e1:9b:2c:57:ab:23:89:
                    0f:8b:92:0e:6c:9c:de:e6:08:8c:c4:d8:22:9f:88:
                    27:ec:4c:44:fd:61:45:5c:e5:c9:fd:47:ea:b4:f9:
                    44:c8:6f:ea:04:d4:21:cb:b3:d1:78:86:10:06:70:
                    82:01:20:b1:97:59:a9:85:09:64:03:9a:c6:2e:b9:
                    c1:49:d0:76:e0:e0:bb:54:4a:57:ef:6d:51:5b:d0:
                    3b:09:97:76:08:da:9a:fc:bb:de:79:09:50:83:be:
                    66:80:ef:9a:a8:2e:72:eb:56:76:59:81:96:b8:b6:
                    25:60:1b:d6:72:75:9f:b1:6d:6f:5b:4d:41:dd:55:
                    27:58:da:22:73:7c:fb:a0:91:39:c8:a4:ec:4e:18:
                    a3:14:9c:fb:52:d8:48:ac:92:d4:19:e9:b2:0c:9f:
                    1e:d8:63:e8:e2:7b:c9:77:4e:e8:91:a9:d0:f2:66:
                    fc:23:fd:a6:8e:06:08:4e:5b:78:28:cc:57:11:2f:
                    45:a3:c9:e4:ad:ae:e2:65:3d:40:69:5c:e9:44:3a:
                    85:17:3d:ed:42:37:1b:14:de:6e:37:27:da:d7:3f:
                    32:ac:77:16:9e:2b:20:a0:8f:7d:50:7a:31:10:b0:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:14:2A:99:1C:CD:C1:DC:0C:E0:8D:83:C8:E1:F3:21:E9:43:EB
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a3a2f33322d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:b0:ea:a8:5e:67:bd:fa:92:47:ec:43:64:29:84:50:26:18:
         85:41:d2:38:aa:d8:17:f8:68:76:f0:0c:29:90:9c:e4:61:c8:
         e5:55:96:57:26:12:18:fd:c4:31:46:55:30:59:d5:f1:81:74:
         c6:a7:c1:56:d9:94:2f:4e:21:98:7d:17:dd:f8:cb:a9:7a:0d:
         51:9b:97:44:cc:9a:9d:60:f5:5e:ed:77:0f:d0:e3:c6:ad:78:
         a8:5f:3a:ef:15:95:07:32:bb:7b:b0:df:21:e0:6b:cb:b7:e5:
         3b:85:87:fa:96:6f:6c:c0:ec:9d:f7:11:06:97:2b:69:89:76:
         6f:da:04:9c:95:56:fe:93:15:c0:ca:a2:0d:de:00:f7:bf:39:
         3e:96:b3:5e:42:b5:16:c2:f6:2e:33:0b:e2:94:21:7f:e9:f2:
         d7:93:25:b6:9c:18:76:6a:c8:56:c9:c8:4d:a8:88:ba:e5:d9:
         91:c3:e9:cc:68:b4:63:6c:c4:de:b4:2d:79:59:1f:90:78:42:
         f6:45:8b:1d:18:88:63:c6:91:0e:07:ba:85:b0:c1:26:bc:f7:
         22:04:00:12:20:5b:ec:59:ad:7f:0d:f6:65:af:bf:f3:f6:32:
         67:63:0f:43:62:f4:93:d0:cc:b4:5a:85:48:ed:a7:ed:65:7a:
         f8:ec:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:17:07 2026 by rpki-client