Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3332203d3e20323639363637.roa
File:                     323830343a363830633a3a2f33322d3332203d3e20323639363637.roa (raw, json)
Hash identifier:          RlzqKY2kc1E4Za9nBPtsDpI/EVjK13Tpj27rfSIe/ms=
Subject key identifier:   6C:D6:8E:44:B0:F8:16:8E:C7:73:40:85:8B:E2:AF:EC:B9:94:83:3F
Certificate issuer:       /CN=899188992E550CB7173DD65733F04F79CCF47641
Certificate serial:       3D4755FDF9EC6001502BB37BB145903EAD8D5033
Authority key identifier: 89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3332203d3e20323639363637.roa
Signing time:             Thu 17 Sep 2026 12:12:19 +0000
ROA not before:           Thu 17 Sep 2026 12:07:19 +0000
ROA not after:            Thu 16 Sep 2027 12:12:19 +0000
asID:                     269667
IP address blocks:        2804:680c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl
                          rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:55:fd:f9:ec:60:01:50:2b:b3:7b:b1:45:90:3e:ad:8d:50:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899188992E550CB7173DD65733F04F79CCF47641
        Validity
            Not Before: Sep 17 12:07:19 2026 GMT
            Not After : Sep 16 12:12:19 2027 GMT
        Subject: CN=6CD68E44B0F8168EC77340858BE2AFECB994833F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0d:08:45:de:b8:b1:6f:a8:76:95:01:db:1d:
                    aa:be:77:19:6c:01:ce:08:0d:b2:75:0f:ee:0f:b4:
                    c4:f7:63:66:a6:e9:43:c0:55:8e:f6:e8:57:e4:9a:
                    b5:28:ad:d4:06:c8:e5:6a:20:84:be:09:c7:88:98:
                    1e:18:db:8b:8a:f9:42:48:ba:a9:56:06:a0:d2:d3:
                    d7:85:10:75:dc:ab:39:c1:78:78:b5:09:73:7f:7e:
                    3e:52:8e:75:8c:5c:b0:d6:a9:9a:ed:c4:a9:54:20:
                    89:3f:46:43:af:43:0c:dd:e1:3d:a1:2c:ba:05:1e:
                    1c:ce:f0:83:0a:4d:44:2c:36:bf:3f:ba:3f:9b:58:
                    8f:a0:4d:5f:25:5a:f4:69:79:0d:d5:8b:f3:5b:7c:
                    f2:db:0a:d4:58:f7:97:56:d3:c3:ed:a9:d6:c6:ea:
                    58:8c:8c:6a:af:52:b6:dd:88:17:e1:cf:33:70:35:
                    1c:9f:3f:d0:e7:56:c2:6f:99:42:c2:71:ea:41:12:
                    af:d4:74:ac:53:8a:a7:bc:a1:2c:ea:16:20:18:46:
                    1a:6c:22:bb:2e:52:e7:6b:72:35:45:ce:0d:45:75:
                    c4:14:c6:56:78:2e:74:30:ef:54:1f:e6:4f:9a:e1:
                    67:a7:9c:2c:15:a8:d4:08:30:95:31:43:5b:35:2f:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:8E:44:B0:F8:16:8E:C7:73:40:85:8B:E2:AF:EC:B9:94:83:3F
            X509v3 Authority Key Identifier:
                keyid:89:91:88:99:2E:55:0C:B7:17:3D:D6:57:33:F0:4F:79:CC:F4:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/899188992E550CB7173DD65733F04F79CCF47641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/899188992E550CB7173DD65733F04F79CCF47641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3332203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:680c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:11:19:27:78:6a:fa:3a:9c:d3:01:72:e4:9e:5d:b6:fd:0b:
         5c:76:3b:7d:76:24:ce:b4:46:ba:87:ac:68:1b:93:a1:a3:c3:
         56:1f:7f:16:9f:3a:5a:bc:8b:db:74:91:b1:9d:bc:09:0f:68:
         4f:ab:ba:06:82:ae:4d:75:66:59:23:83:b0:63:0b:9c:af:12:
         67:21:d5:85:e7:c8:7e:2f:aa:1d:c6:31:50:83:d2:44:49:8c:
         f0:c8:75:1a:65:45:33:97:90:ce:60:ef:54:08:47:62:80:9c:
         46:02:64:c7:2e:e2:1f:76:26:63:8c:d2:c4:ca:e1:c1:00:15:
         0f:7a:f5:e3:fe:9e:9e:45:ac:84:7e:62:68:5f:c9:af:48:39:
         0a:50:9b:db:2c:a5:ba:61:49:37:1d:d1:73:06:db:37:eb:46:
         61:ce:4b:08:83:11:15:ab:ba:79:e0:a5:62:7a:c9:d0:d2:77:
         9b:27:32:fd:f3:ab:9f:f1:d1:3c:c7:ae:e3:41:a2:9a:fb:61:
         9e:a3:df:92:17:cf:14:4d:2b:04:fb:02:27:3b:99:cd:d9:4d:
         91:f5:5e:5c:42:d2:24:43:54:68:43:d7:c8:f6:e3:54:29:2e:
         3b:4b:cd:e1:b3:56:65:e2:9e:71:98:da:d0:f4:5a:a7:c2:e0:
         cd:74:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 08:11:01 2026 by rpki-client