Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
File:                     323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa (raw, json)
Hash identifier:          19L0GwxdXz9pF/D6HohnwdpcJZV30B9fVeWKyz4/Dwo=
Subject key identifier:   3A:D1:94:F4:C6:BA:22:02:5A:3E:FB:98:22:FE:70:88:C8:A3:8B:25
Certificate issuer:       /CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
Certificate serial:       4938B582B2198F1133DA67B74FC68FEDE2FADEAF
Authority key identifier: 2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa
Signing time:             Fri 28 Aug 2026 22:24:08 +0000
ROA not before:           Fri 28 Aug 2026 22:19:08 +0000
ROA not after:            Fri 27 Aug 2027 22:24:08 +0000
asID:                     268070
IP address blocks:        2804:5788:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl
                          rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:38:b5:82:b2:19:8f:11:33:da:67:b7:4f:c6:8f:ed:e2:fa:de:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC42055AFC59A104B87FD6706375331B8F6BF55
        Validity
            Not Before: Aug 28 22:19:08 2026 GMT
            Not After : Aug 27 22:24:08 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:56:f2:3d:fc:c5:0c:d4:25:74:4d:0f:d1:
                    04:07:60:61:af:a5:a4:da:6b:64:a9:8b:de:c6:26:
                    0d:3b:0e:ed:34:a8:63:6b:4f:58:38:bb:49:fe:38:
                    dd:4d:a7:85:fd:89:1d:b1:4a:8a:3f:f5:ea:a5:11:
                    dc:b5:49:b1:2a:27:74:ad:60:07:2c:04:ae:58:69:
                    01:fd:b2:da:ee:fa:9f:6f:d6:7a:9d:1a:38:51:a6:
                    1a:cd:d3:cc:22:57:b4:74:46:ea:da:c4:44:91:3c:
                    82:b9:cf:bc:b3:1f:54:b0:19:42:e5:fb:1e:4a:2c:
                    a0:25:d8:a7:e6:d2:97:ae:49:4b:73:e3:e1:86:c0:
                    f7:bf:26:c5:d2:b5:ce:33:54:3c:03:30:2d:6f:38:
                    53:f5:b2:09:88:81:d9:24:85:bf:5c:35:f5:cb:72:
                    53:d2:2a:a3:ea:ae:b7:8a:27:67:33:89:26:63:eb:
                    e8:9d:45:a2:1b:53:f1:8c:43:56:cd:d9:c9:85:f7:
                    ae:e6:7b:a6:12:30:08:60:34:eb:4e:61:b3:99:0a:
                    98:20:80:20:24:fd:f0:4f:0e:db:06:6a:3e:9a:b8:
                    68:fd:f9:37:96:a1:85:fc:67:6c:c7:c7:32:0a:ae:
                    3b:68:56:11:a6:77:70:13:4a:28:0a:92:e7:0b:f9:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D1:94:F4:C6:BA:22:02:5A:3E:FB:98:22:FE:70:88:C8:A3:8B:25
            X509v3 Authority Key Identifier:
                keyid:2E:C4:20:55:AF:C5:9A:10:4B:87:FD:67:06:37:53:31:B8:F6:BF:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EC42055AFC59A104B87FD6706375331B8F6BF55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYEFVLKTWRdG7ooEx9QzPgZj8eW8Ne8j7ZwXDRDP9iaD/1/323830343a353738383a343030303a3a2f33342d3334203d3e20323638303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5788:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:8b:b2:f4:60:90:8e:4f:9b:01:25:e9:95:ac:9a:f9:71:
         66:2c:e0:83:7f:4d:0f:1c:53:61:c4:3b:5c:88:13:14:69:9c:
         26:f2:46:56:3f:0e:9c:78:1a:00:21:f2:fa:79:22:c4:c5:89:
         c4:e3:53:e5:c3:f0:d1:b8:b1:40:10:8a:9b:4a:9a:a5:9e:7b:
         8e:e1:9c:25:9b:39:b1:d3:9b:60:88:14:f2:30:7b:e0:82:66:
         e8:4e:0c:19:e3:de:46:16:1e:fa:a1:57:31:b0:5a:5b:ec:6b:
         ab:47:d8:7b:6f:04:69:11:01:ba:48:50:c4:2d:f2:b9:4b:68:
         28:d1:44:42:30:49:82:25:e5:c6:da:44:31:4d:51:9c:e5:9c:
         f7:0b:b0:19:57:ee:b4:af:41:ab:ab:9d:a1:62:61:01:89:06:
         45:18:98:c4:d4:e5:11:de:6d:31:d3:55:54:b5:93:87:6d:5b:
         35:43:3f:1e:8b:ff:96:c5:92:9b:58:05:15:86:b1:f8:b3:8d:
         fd:66:68:f1:90:2f:ee:d4:17:f1:88:34:2c:e1:50:46:78:f9:
         a8:06:39:81:39:7f:0e:a7:3c:01:af:01:d2:9e:6a:76:1e:72:
         74:9c:6a:b9:fd:a5:55:f1:77:8f:90:ed:f0:52:3b:52:2d:0c:
         6d:1b:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----