Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
File:                     323830343a3462633a3a2f33322d3438203d3e20323632343632.roa (raw, json)
Hash identifier:          +QIg7xWQClfmJ0xB8MTxUfh7x0XKQIed7NXD9OnVhFE=
Subject key identifier:   C9:B1:F6:AE:08:1C:90:C6:E4:BD:52:51:DC:A6:E7:08:ED:99:07:6F
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       52B33BC7DACD6D9E889007428A98B2AF177217B3
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa
Signing time:             Wed 26 Aug 2026 11:58:41 +0000
ROA not before:           Wed 26 Aug 2026 11:53:41 +0000
ROA not after:            Wed 25 Aug 2027 11:58:41 +0000
asID:                     262462
IP address blocks:        2804:4bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 08:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b3:3b:c7:da:cd:6d:9e:88:90:07:42:8a:98:b2:af:17:72:17:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Aug 26 11:53:41 2026 GMT
            Not After : Aug 25 11:58:41 2027 GMT
        Subject: CN=C9B1F6AE081C90C6E4BD5251DCA6E708ED99076F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:77:c4:76:e7:85:93:9b:77:3e:cd:a4:0b:
                    a7:2b:b3:59:a6:75:3e:f2:3f:c2:9b:e2:6d:cc:73:
                    10:69:6f:be:9d:ac:40:9a:c3:7c:1c:74:9e:89:37:
                    ef:75:4e:99:c2:89:b8:eb:a0:c7:aa:f8:51:03:c9:
                    0b:d0:2a:34:32:bf:d9:71:e6:62:aa:4f:ac:b5:8a:
                    b4:67:c7:1d:e0:2d:3a:cd:7a:21:4a:dd:74:73:60:
                    e2:f4:b7:68:52:66:c1:7c:7f:d6:de:ec:9b:ce:5e:
                    10:a8:d0:2b:9a:ef:5e:76:25:00:81:91:de:1f:eb:
                    58:8d:b8:84:f1:39:99:f0:53:df:36:3a:40:fa:61:
                    23:a1:fd:ae:23:9c:73:9d:6e:b2:36:76:89:1e:d2:
                    70:21:15:fe:03:6e:97:bf:e0:75:d6:3f:86:7a:31:
                    56:89:88:3d:ae:c3:4c:e2:7f:da:ed:bf:06:7b:ac:
                    2f:77:3b:f8:46:c6:e4:23:3b:f1:1a:6f:39:f8:0d:
                    fa:17:b7:f3:35:52:75:b8:14:23:a5:6f:58:7d:e9:
                    96:20:03:41:22:2e:52:41:bd:f0:18:e3:db:86:bc:
                    46:26:ce:85:63:95:65:52:40:ea:25:e5:59:df:c4:
                    2e:9d:6c:cc:5d:41:82:98:ce:cc:d8:67:83:c4:d7:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:F6:AE:08:1C:90:C6:E4:BD:52:51:DC:A6:E7:08:ED:99:07:6F
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/323830343a3462633a3a2f33322d3438203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:36:4c:91:5e:7c:ea:c1:09:11:8f:cc:6e:7a:0b:6f:4d:
         89:f3:ce:43:1d:91:76:7a:75:14:c3:95:02:6f:2a:fb:50:48:
         f2:28:8c:3b:e6:c4:04:da:7e:50:96:39:e6:17:2f:95:ac:fc:
         9c:12:f7:e9:b6:d6:28:66:68:c3:fe:4c:55:41:a9:07:1f:d6:
         c2:95:53:60:0b:fe:66:27:59:97:f1:4c:d0:df:cd:d8:7f:38:
         9b:87:02:50:f6:37:08:2d:43:62:ee:73:a3:d6:1a:98:31:c6:
         95:89:c1:49:0a:c0:ef:82:fe:61:ac:81:b3:14:06:71:bd:f6:
         22:7d:18:3b:b8:cf:bc:2f:1f:0a:cd:6c:a7:f3:c5:ea:d9:9c:
         19:ff:72:d6:83:bd:5e:7c:c9:dd:2c:45:51:4c:1c:00:b5:ba:
         ad:37:d0:2c:75:43:ac:12:77:b1:bd:58:40:0f:b4:63:89:53:
         02:8b:8a:65:d8:63:c5:af:73:15:51:64:5a:a9:ac:18:39:04:
         42:d1:fe:31:8a:42:8b:83:23:6c:02:98:80:85:fb:8b:1e:23:
         95:34:cf:c0:e2:92:71:56:a3:9c:da:36:9b:f2:e3:ac:3d:28:
         4a:1b:de:db:f2:8d:1e:70:78:3f:db:bc:ed:4e:67:fa:66:b5:
         f6:2c:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:53:08 2026 by rpki-client