Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          wkYTWhYljIOqVupXUd0HxUBz5/dzUVh7f3d2qjy/wXE=
Subject key identifier:   C5:3C:9E:F0:75:3C:0D:0F:BB:E6:B7:91:19:C5:8F:3D:68:ED:2D:EC
Certificate issuer:       /CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
Certificate serial:       4EB74BA9104B73AD5D9A8BA65331A446547A8BC1
Authority key identifier: 39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Tue 25 Aug 2026 11:26:02 +0000
ROA not before:           Tue 25 Aug 2026 11:21:02 +0000
ROA not after:            Tue 24 Aug 2027 11:26:02 +0000
asID:                     272418
IP address blocks:        2804:80e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl
                          rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b7:4b:a9:10:4b:73:ad:5d:9a:8b:a6:53:31:a4:46:54:7a:8b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
        Validity
            Not Before: Aug 25 11:21:02 2026 GMT
            Not After : Aug 24 11:26:02 2027 GMT
        Subject: CN=C53C9EF0753C0D0FBBE6B79119C58F3D68ED2DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:82:57:a0:c1:56:b7:c9:99:d0:9b:01:2d:
                    09:19:df:45:d4:4b:bb:bb:c8:28:03:cc:b5:c3:1e:
                    86:df:49:f1:7c:47:0e:c5:d9:3e:26:d1:41:05:b6:
                    de:01:c5:27:fa:b9:b7:e2:e2:d9:80:2f:d0:8c:ed:
                    b5:0d:95:c0:51:d3:61:1f:4d:4f:35:51:be:d6:cd:
                    9c:08:06:ee:74:44:56:fa:01:66:02:1a:44:80:4d:
                    3b:38:bb:71:89:64:23:c6:ab:79:6c:4a:96:d2:fc:
                    26:2d:f1:cf:52:54:a8:aa:aa:23:ed:d9:6d:6c:1d:
                    98:59:81:e8:58:db:b7:7c:fc:ab:31:7c:17:62:a0:
                    ce:1d:b9:00:dd:16:b4:39:a4:3e:56:a8:b3:fe:d1:
                    34:7c:ce:8a:8b:13:ac:a9:83:e8:90:a6:dd:1b:76:
                    a7:c3:a6:eb:1a:6a:62:de:95:96:8a:41:b3:1a:b5:
                    9a:ce:d6:8a:c8:dc:17:1f:28:44:31:0b:1c:2d:b5:
                    cd:aa:9d:83:e0:69:20:de:84:fb:c4:57:10:3d:bb:
                    2a:ce:4b:3d:f6:9a:f8:6d:e9:7c:0f:a5:57:c9:55:
                    4c:c9:1f:bf:6f:1d:6b:1a:52:8d:c1:fa:50:51:3f:
                    d8:b7:f7:9b:01:08:b8:e5:30:6b:34:ee:04:9a:2d:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3C:9E:F0:75:3C:0D:0F:BB:E6:B7:91:19:C5:8F:3D:68:ED:2D:EC
            X509v3 Authority Key Identifier:
                keyid:39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a333030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:ce:b4:1a:e5:9c:36:dc:41:4a:05:17:4c:63:82:fc:22:
         31:c7:02:08:43:0a:61:3e:40:d0:18:df:f3:74:5e:de:2d:96:
         63:a2:82:46:ee:f3:97:19:9d:07:6f:d1:88:1c:d7:18:e9:48:
         6c:e6:fc:97:cd:0c:fd:cf:f7:32:94:6d:ab:28:f3:a6:22:56:
         6d:a3:ad:00:05:d9:20:26:f7:85:70:f9:14:09:63:01:7a:4a:
         cb:f9:0b:95:79:e1:7e:17:e6:98:e0:3d:b8:e7:f4:c0:0c:e6:
         59:a3:dc:11:f8:e3:3c:35:50:b0:57:36:ea:02:92:8a:86:2f:
         fa:43:6e:3f:8e:da:3a:f2:c1:2b:49:03:07:e9:5f:2e:79:3e:
         19:6c:bf:13:53:c2:8f:e1:64:60:d9:f3:ca:ce:34:7f:cc:61:
         d6:61:a5:00:67:83:e2:f5:c0:88:e6:2f:c4:fe:60:1a:45:e2:
         cb:db:b5:c2:ee:3f:5d:4f:3f:4d:0c:64:78:3a:e5:64:06:0e:
         40:1c:94:71:db:f6:8d:0b:fe:aa:ee:b1:ca:5d:95:05:e2:f3:
         4b:d8:c4:88:05:92:3c:21:16:4c:94:95:30:09:16:65:41:01:
         b9:a1:cc:87:dc:9b:7d:9c:a6:8d:00:cf:16:4e:3f:25:a7:f3:
         88:2c:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:42:47 2026 by rpki-client