Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa
File:                     323830343a336536343a3a2f33322d313238203d3e20323636353933.roa (raw, json)
Hash identifier:          vD9aHCRaRSJHWuNukRdLo+eM4Lt06Un7vAt1jxsGlpI=
Subject key identifier:   17:F3:B2:C9:7A:73:21:65:9A:0F:25:C5:7F:53:A8:78:5F:0B:1D:4D
Certificate issuer:       /CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
Certificate serial:       155A9956D4BD15FB4BE945D1394CF88469CD3C2B
Authority key identifier: A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa
Signing time:             Sat 29 Aug 2026 17:04:53 +0000
ROA not before:           Sat 29 Aug 2026 16:59:53 +0000
ROA not after:            Sat 28 Aug 2027 17:04:53 +0000
asID:                     266593
IP address blocks:        2804:3e64::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl
                          rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 22:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5a:99:56:d4:bd:15:fb:4b:e9:45:d1:39:4c:f8:84:69:cd:3c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A336F0307373D367E106ACE4C73B22A06BB50DDA
        Validity
            Not Before: Aug 29 16:59:53 2026 GMT
            Not After : Aug 28 17:04:53 2027 GMT
        Subject: CN=17F3B2C97A7321659A0F25C57F53A8785F0B1D4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:17:f5:61:16:10:d5:a1:f1:23:1d:f6:f2:
                    6c:97:3b:b5:df:fd:aa:25:f5:35:a5:8c:5f:1b:6d:
                    00:34:33:09:f7:e9:f4:20:a6:f0:dd:7d:23:f1:bb:
                    bf:c6:4c:a5:3c:02:98:3d:fa:19:09:b0:ee:1c:4a:
                    27:71:a7:77:58:6f:b8:7d:82:1f:9f:43:7d:1b:4e:
                    a4:33:6c:f8:15:18:83:b1:7e:47:45:04:b5:50:24:
                    54:f1:68:b7:a1:21:99:5a:6e:6f:3b:cb:f6:d3:49:
                    8e:0f:4e:bd:1f:09:fa:08:56:ef:76:57:8d:48:af:
                    7e:a2:70:a5:c3:ba:05:ee:86:bb:10:f8:01:ba:2b:
                    d6:64:bf:b7:1f:5b:24:b4:7f:78:14:39:5c:63:21:
                    dc:8d:91:29:0e:b2:f6:9a:b7:96:b3:31:8d:a3:c1:
                    00:3c:7e:d1:b5:b9:81:b9:d2:da:3d:d4:ae:18:41:
                    62:57:c3:81:d1:7c:20:89:7c:19:20:a1:6e:bc:0c:
                    ef:8d:16:6a:da:aa:14:f5:95:0c:24:63:cd:5b:a2:
                    29:e5:1f:05:66:2a:0f:b0:91:ef:9a:53:2c:ca:af:
                    a6:f1:3c:b5:cf:4c:49:87:5c:07:73:5f:f4:b4:72:
                    87:ee:cc:d4:c6:5f:aa:fe:6d:d0:31:4f:0d:12:2e:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:B2:C9:7A:73:21:65:9A:0F:25:C5:7F:53:A8:78:5F:0B:1D:4D
            X509v3 Authority Key Identifier:
                keyid:A3:36:F0:30:73:73:D3:67:E1:06:AC:E4:C7:3B:22:A0:6B:B5:0D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/A336F0307373D367E106ACE4C73B22A06BB50DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A336F0307373D367E106ACE4C73B22A06BB50DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVeWwrnxk3wqrGVtdFvmroyigPmiQ6BVoPSK8iVK5LcU/0/323830343a336536343a3a2f33322d313238203d3e20323636353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e64::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:e4:74:95:26:c9:64:1b:36:51:cc:33:2b:15:3e:02:1b:27:
         ae:ba:46:42:53:23:7c:52:51:61:b0:46:07:4e:26:2b:db:a6:
         e0:d0:ce:c5:89:42:26:38:9a:f5:52:24:f5:06:1a:3e:8a:06:
         ae:c5:c7:58:bf:99:5a:e2:c3:55:0f:8b:00:02:78:08:0b:13:
         83:f1:c9:09:84:ae:bd:3f:af:91:9b:58:4e:56:d3:90:80:89:
         d5:98:41:e7:d8:66:f0:de:be:48:e9:ac:6b:84:be:62:fa:b2:
         81:7c:32:eb:21:4b:35:23:e2:c5:e0:e6:a5:8b:c3:77:9b:37:
         13:32:6c:cf:83:b7:08:06:58:66:c1:34:f0:3e:32:e2:ce:88:
         07:d8:dd:85:cd:95:a0:6b:39:d9:f7:3a:93:30:9d:ce:a7:02:
         65:62:3c:d4:60:d2:c6:37:19:df:a3:a5:01:b4:dc:0c:0d:58:
         f4:27:46:c7:8f:87:2e:0c:9a:e0:9e:a4:b2:3a:6a:de:d3:1a:
         34:22:52:d2:4c:f2:8e:68:45:8a:c4:79:55:5d:27:0e:50:f3:
         c5:9d:10:13:f4:06:9f:f3:e8:f6:4f:aa:f4:64:00:50:66:34:
         b5:2a:23:c6:8f:6e:a1:15:0f:0c:93:62:e3:20:e9:e1:20:d8:
         ee:70:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:30:10 2026 by rpki-client