Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33322d313238203d3e20323733383136.roa (raw, json)
Hash identifier:          zHI3pGFk88U2D/bTV5mAaKbuugDagVRLsSyn2GepN1k=
Subject key identifier:   47:F9:0F:37:54:5E:D4:CA:60:DD:8E:AF:29:8F:A7:C3:43:43:E0:D9
Certificate issuer:       /CN=FB0DA985DB7C18DB91614DC714EA3B8EBF837D05
Certificate serial:       63E78F219F49F08D3C446CB296A1113FF9DE11F5
Authority key identifier: FB:0D:A9:85:DB:7C:18:DB:91:61:4D:C7:14:EA:3B:8E:BF:83:7D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa
Signing time:             Wed 08 Jul 2026 18:17:43 +0000
ROA not before:           Wed 08 Jul 2026 18:12:43 +0000
ROA not after:            Wed 07 Jul 2027 18:17:43 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.crl
                          rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e7:8f:21:9f:49:f0:8d:3c:44:6c:b2:96:a1:11:3f:f9:de:11:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB0DA985DB7C18DB91614DC714EA3B8EBF837D05
        Validity
            Not Before: Jul  8 18:12:43 2026 GMT
            Not After : Jul  7 18:17:43 2027 GMT
        Subject: CN=47F90F37545ED4CA60DD8EAF298FA7C34343E0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:6f:bb:44:5f:b8:27:66:ab:80:8d:0a:b8:
                    d8:ed:91:9e:a7:8b:54:05:0d:f4:62:c3:a4:08:35:
                    e2:d9:d7:8f:7f:47:eb:93:f8:76:07:93:52:c9:66:
                    8d:45:5a:bb:de:4e:7e:4d:a1:e2:a3:21:cb:ea:e1:
                    b5:b2:d9:0b:f0:ac:6f:f0:70:fe:ab:bb:54:74:5c:
                    07:4a:9d:1f:ac:99:9f:1c:07:7a:d2:4e:8b:fe:02:
                    7a:68:81:02:3f:ee:d2:e6:27:c5:44:9f:ec:c2:91:
                    98:1b:3f:c7:a8:49:94:5f:13:e2:c7:db:cb:f7:0f:
                    96:e5:f3:25:5e:5a:34:a7:32:a8:2a:b9:0e:70:17:
                    8b:d9:e3:85:bf:71:0c:c4:cc:5f:a8:0c:eb:76:07:
                    80:98:72:c6:c4:79:1f:a9:1f:9a:80:ce:d8:17:c1:
                    89:05:b9:e7:fc:71:f9:2d:8b:38:59:da:4d:9f:d3:
                    bf:79:65:34:ab:38:fb:8a:1a:fb:26:90:48:56:49:
                    20:5c:25:a6:d9:ef:23:4f:cb:c5:c4:eb:0e:b2:2c:
                    9f:c7:51:6c:25:0b:f6:2d:c0:cf:b9:7e:22:3f:90:
                    28:31:4a:ac:c0:a2:fb:bf:42:56:e5:58:1e:8c:ed:
                    99:45:76:18:f2:69:fe:37:d3:93:a3:c9:ee:fe:cc:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F9:0F:37:54:5E:D4:CA:60:DD:8E:AF:29:8F:A7:C3:43:43:E0:D9
            X509v3 Authority Key Identifier:
                keyid:FB:0D:A9:85:DB:7C:18:DB:91:61:4D:C7:14:EA:3B:8E:BF:83:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB0DA985DB7C18DB91614DC714EA3B8EBF837D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:03:01:17:1d:20:60:c6:c0:61:8a:86:bf:a7:3d:63:36:db:
         e4:46:ca:62:d5:81:39:9f:2e:65:5c:f0:bb:38:b2:b8:d2:2d:
         d7:82:37:a9:7a:ac:a9:e0:7f:28:7d:56:d2:b0:a0:a5:dc:91:
         09:c9:8b:2a:5c:03:56:f4:3a:d8:72:31:a0:3c:82:c6:c7:6d:
         1d:eb:d2:fa:07:0e:d9:8e:f8:ff:48:28:8f:d1:4a:4f:35:2e:
         b3:3a:86:54:cb:ad:b8:f7:87:85:60:8d:4e:e9:b6:e4:34:ec:
         2f:52:c4:6b:0c:9a:90:4d:1b:80:e1:ae:59:cf:71:fe:95:f0:
         2c:8a:45:7d:61:b6:73:63:a5:f7:c8:89:1b:77:7c:c7:4c:d6:
         b2:71:3d:50:11:77:0c:4f:b7:af:57:dc:bb:1e:98:7d:c5:73:
         b0:72:ba:40:26:e0:01:36:b7:b7:d3:67:56:b6:4d:fd:3b:3a:
         ab:e2:17:3e:77:c2:bf:18:c9:06:56:57:85:38:85:5d:d4:49:
         72:5e:d9:2d:df:dd:38:2d:80:01:76:09:ab:4c:4c:38:a8:94:
         8f:79:8d:18:46:c4:ae:84:b2:fb:dd:54:39:fc:ca:6d:61:9a:
         cf:bd:6b:e8:aa:1a:3e:28:b9:9f:87:b0:b3:38:17:b1:c7:c1:
         77:a1:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:19 2026 by rpki-client