Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa
File:                     323830343a333264343a3a2f33332d3436203d3e20323635313030.roa (raw, json)
Hash identifier:          DP7VMVTULVPm/t4uYReoBaIU42700EU4VYLJ72yqCDM=
Subject key identifier:   0B:FA:50:FB:D5:6F:3A:79:6C:90:4C:8E:F1:35:F6:2B:09:AD:9D:DD
Certificate issuer:       /CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
Certificate serial:       375A785778EC92BDFA5E7CA5CFE1B2C6264FAAF1
Authority key identifier: B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa
Signing time:             Mon 24 Aug 2026 19:00:00 +0000
ROA not before:           Mon 24 Aug 2026 18:55:00 +0000
ROA not after:            Mon 23 Aug 2027 19:00:00 +0000
asID:                     265100
IP address blocks:        2804:32d4::/33 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl
                          rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:78:57:78:ec:92:bd:fa:5e:7c:a5:cf:e1:b2:c6:26:4f:aa:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819
        Validity
            Not Before: Aug 24 18:55:00 2026 GMT
            Not After : Aug 23 19:00:00 2027 GMT
        Subject: CN=0BFA50FBD56F3A796C904C8EF135F62B09AD9DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:b0:ac:26:1c:3b:1e:d1:23:fe:17:a9:e5:
                    c1:63:64:ae:30:8c:5a:f6:03:5f:44:77:70:57:9e:
                    dc:74:c2:98:64:06:95:6b:db:12:14:a7:8b:20:a0:
                    7a:19:8e:33:a1:7f:ea:66:cf:14:05:b5:ab:ce:88:
                    6d:28:30:3e:cb:67:d3:2e:12:7e:c6:10:88:d7:0c:
                    a2:27:05:68:dc:82:eb:29:5f:69:1a:a6:29:ff:94:
                    54:47:4a:04:1e:aa:5d:08:1d:cf:a0:f9:c4:2b:c0:
                    6f:20:c2:93:e3:5d:66:47:0c:a4:24:17:58:6d:61:
                    42:3d:41:d5:03:04:87:c3:ca:2c:54:3a:82:ca:47:
                    eb:12:3e:d1:12:48:d9:6a:20:41:bf:f1:dc:79:aa:
                    9c:ad:d4:ca:70:5f:92:32:ae:13:f3:08:6d:2a:87:
                    32:a5:90:11:b4:1b:a1:8f:49:04:41:9e:77:a9:62:
                    b9:48:d4:67:f2:c2:46:df:29:eb:81:9c:db:ed:a2:
                    b5:1b:8b:8a:94:e8:31:ce:ae:1a:0f:1d:6e:33:7d:
                    7d:c7:5d:1c:ce:f8:8a:32:59:e6:5c:38:01:31:bb:
                    6d:53:ec:f8:99:41:db:16:d4:c3:54:27:67:b2:1e:
                    4a:2e:b8:17:ac:25:76:90:01:98:44:ac:fb:29:fa:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:50:FB:D5:6F:3A:79:6C:90:4C:8E:F1:35:F6:2B:09:AD:9D:DD
            X509v3 Authority Key Identifier:
                keyid:B5:FC:5F:08:B8:C4:86:40:13:DC:3A:4C:A4:7C:22:00:B3:C2:B8:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5FC5F08B8C4864013DC3A4CA47C2200B3C2B819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/1/323830343a333264343a3a2f33332d3436203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:49:58:c2:cb:d6:01:1a:01:ad:d3:e5:3d:4a:4f:1d:15:eb:
         66:a5:45:28:49:8f:56:c0:da:68:ed:52:c7:b2:59:0a:99:fe:
         80:59:74:48:ea:a7:07:77:14:32:37:27:d5:5f:cf:34:e0:40:
         e9:ef:cb:68:c0:60:21:ff:17:d4:6e:88:f3:4f:f3:49:eb:3e:
         b6:72:88:9d:8f:06:95:fc:70:07:23:eb:92:66:a9:07:69:1e:
         cc:58:32:ae:46:85:84:e2:35:b8:04:42:33:20:6f:c1:43:9f:
         60:eb:06:29:a1:7b:c9:0b:35:52:b8:0f:c8:ec:97:88:c9:ef:
         16:19:8a:90:22:b9:f6:3d:f6:03:78:dc:5b:85:b9:c0:9c:23:
         d5:8e:d5:02:db:5c:c4:a3:f0:be:b0:9f:c2:d5:d7:be:5a:cb:
         62:f5:78:a1:1b:2c:20:43:55:9f:d0:d3:3f:1b:d8:72:33:65:
         c7:5c:85:5e:a3:de:a0:d3:61:c7:14:b4:48:36:da:97:35:c0:
         eb:02:73:e6:32:f3:a3:de:d9:29:25:c0:5b:8d:47:70:9d:49:
         7b:0e:b7:f0:a5:3d:a3:ca:19:f7:7c:b6:bc:80:3a:ce:b9:9b:
         8e:cb:c1:02:4b:77:99:65:5a:47:0a:39:2e:4b:23:3b:58:36:
         59:64:42:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----