Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa
File:                     323830343a393835343a3a2f33322d313238203d3e20323735363831.roa (raw, json)
Hash identifier:          pBQCnitnC2KK6biAca0iFm7QN7pel9/X2RUyXq/jUE4=
Subject key identifier:   47:20:D5:75:EC:D9:D5:6B:6C:3A:9B:FB:0C:16:EF:21:5A:D7:70:32
Certificate issuer:       /CN=D8D8310BF161C17828D8C8E9341BF055481B108A
Certificate serial:       15210A70CB91AFFD2C2E649EA627CA9C7F6BB7F3
Authority key identifier: D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa
Signing time:             Tue 21 Jul 2026 17:50:30 +0000
ROA not before:           Tue 21 Jul 2026 17:45:30 +0000
ROA not after:            Tue 20 Jul 2027 17:50:30 +0000
asID:                     275681
IP address blocks:        2804:9854::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.crl
                          rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:21:0a:70:cb:91:af:fd:2c:2e:64:9e:a6:27:ca:9c:7f:6b:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D8310BF161C17828D8C8E9341BF055481B108A
        Validity
            Not Before: Jul 21 17:45:30 2026 GMT
            Not After : Jul 20 17:50:30 2027 GMT
        Subject: CN=4720D575ECD9D56B6C3A9BFB0C16EF215AD77032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:28:53:c6:c1:70:91:e6:96:69:4d:dc:3a:
                    c4:13:1e:71:68:fa:a0:eb:83:67:0e:56:d1:ae:06:
                    20:a9:74:c4:24:3d:ce:fd:e5:da:ea:18:8a:20:ac:
                    a1:3d:6e:2e:6c:8a:43:86:df:b7:46:9e:39:a6:7e:
                    80:11:32:bf:f0:22:22:ac:31:3b:0c:9b:0c:38:fc:
                    19:a0:53:f1:55:7d:2e:5c:02:95:2d:fa:71:c1:5f:
                    77:8c:3e:42:e1:ff:09:7a:e5:43:a6:a0:33:8d:a9:
                    5a:61:6e:5b:86:23:ed:c5:da:e3:49:9f:fb:ca:9c:
                    a8:28:38:bc:cf:dd:c5:bb:05:bb:f0:fc:77:e3:74:
                    35:68:75:f3:d8:09:97:aa:be:fb:c6:28:4c:29:58:
                    37:27:72:c8:99:43:79:27:18:74:48:b5:eb:32:d6:
                    cd:e0:9a:b0:a7:f1:c5:07:9a:c3:b8:81:28:11:db:
                    93:f7:74:d9:80:93:c8:d7:b3:87:33:82:30:ac:a6:
                    98:70:f5:24:77:59:f7:21:e6:84:ac:a2:b7:ab:0f:
                    bf:65:3a:81:fc:5e:cf:1b:67:fd:c4:f2:90:d0:3d:
                    d8:b1:1e:39:b2:dd:57:2c:60:2c:ad:34:01:07:c6:
                    13:f5:61:38:fe:f4:0f:81:6b:a6:0a:be:e7:a6:5a:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:20:D5:75:EC:D9:D5:6B:6C:3A:9B:FB:0C:16:EF:21:5A:D7:70:32
            X509v3 Authority Key Identifier:
                keyid:D8:D8:31:0B:F1:61:C1:78:28:D8:C8:E9:34:1B:F0:55:48:1B:10:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/D8D8310BF161C17828D8C8E9341BF055481B108A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8D8310BF161C17828D8C8E9341BF055481B108A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEPmq54S7VB9RCN8cETasmrFeGDWnpnpQAnYAM3wDH6B/0/323830343a393835343a3a2f33322d313238203d3e20323735363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9854::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:98:2f:74:44:c2:30:19:8b:62:2f:d8:3d:24:61:8b:79:
         41:06:53:fb:d8:db:5d:b5:0d:e0:fe:da:57:36:51:18:ee:89:
         c2:74:2f:88:8b:46:a3:6d:7c:70:81:43:80:10:dd:84:7b:16:
         fd:f8:c7:43:0d:df:d9:44:21:4a:28:ab:35:f3:90:5f:9a:08:
         af:af:4b:4b:84:02:b5:70:71:6a:02:d4:f0:3b:1c:30:16:d2:
         b9:74:d8:92:52:77:47:66:b2:3b:37:e9:ce:3d:42:f6:04:64:
         60:e7:82:f2:21:72:33:bd:7a:0a:67:d2:43:43:fe:91:45:d7:
         d4:34:0a:14:00:fc:0a:d9:c6:49:b5:34:5e:b5:aa:d5:e5:e8:
         cc:5c:03:18:9f:53:7e:9f:c7:ad:0b:66:08:2c:ac:4e:ad:51:
         4a:f5:7d:9a:54:5d:ac:4b:d1:57:12:d4:8e:b5:21:f0:86:46:
         02:fd:79:ff:bc:34:c2:93:42:05:61:9e:90:a0:f2:70:d3:c5:
         58:e9:cd:74:50:d9:a2:70:ec:d9:a8:9b:24:e1:ad:cd:aa:11:
         98:d8:5e:3c:18:44:d7:b0:c4:74:17:5c:48:49:fc:d8:90:aa:
         a8:be:01:21:fb:e7:7e:c5:0b:c9:4b:e8:88:d8:c2:6c:10:05:
         5b:92:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:49 2026 by rpki-client