Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
File:                     323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier:          XEopuRowTfXHMgPwxCW5x1KHbPjGVMwzNm8gywM2vRo=
Subject key identifier:   F2:CD:A4:60:A7:13:2D:E5:80:81:DF:67:37:91:1A:B2:F5:03:47:9E
Certificate issuer:       /CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
Certificate serial:       2421E5266D1BF74D705B9FD1CDE63C1C5F541D6C
Authority key identifier: E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
Signing time:             Mon 14 Sep 2026 23:15:09 +0000
ROA not before:           Mon 14 Sep 2026 23:10:09 +0000
ROA not after:            Mon 13 Sep 2027 23:15:09 +0000
asID:                     272182
IP address blocks:        2804:8330::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 04:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:21:e5:26:6d:1b:f7:4d:70:5b:9f:d1:cd:e6:3c:1c:5f:54:1d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
        Validity
            Not Before: Sep 14 23:10:09 2026 GMT
            Not After : Sep 13 23:15:09 2027 GMT
        Subject: CN=F2CDA460A7132DE58081DF6737911AB2F503479E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:eb:16:5d:60:f9:1d:5e:8b:68:b6:50:e2:
                    f8:da:ad:5a:53:35:ce:21:94:88:72:9d:c9:96:67:
                    ff:b6:e1:d1:7e:c4:e6:9a:a5:cc:9c:cb:69:47:aa:
                    8f:99:99:fe:36:37:8b:3c:52:c7:08:01:0f:ea:bd:
                    54:62:44:40:dc:e9:07:b4:db:e7:9b:3f:38:f0:0d:
                    b9:5b:04:83:e9:8d:67:7a:da:a0:3c:ee:29:aa:52:
                    a2:55:b8:73:08:c2:b6:e5:fb:13:58:24:64:6b:5a:
                    3f:e9:8a:87:e6:c4:49:ff:26:2d:00:36:f1:e2:21:
                    10:2d:34:8c:48:d8:9c:c8:1e:91:8e:69:40:02:15:
                    cd:26:e1:1c:a4:06:17:e8:8c:41:48:a4:fa:6b:25:
                    b9:83:84:9c:12:91:cf:3c:7a:f6:f5:d0:d9:22:19:
                    12:de:04:4b:0e:52:5a:58:fd:51:0c:e4:99:69:ae:
                    28:16:54:67:28:32:4f:9f:3b:01:af:f8:2e:7f:93:
                    d5:7c:3f:f9:86:fe:7c:07:84:21:4f:30:16:c9:c4:
                    3b:46:3b:9f:b6:54:96:d2:cb:ff:d7:0e:d7:0e:a0:
                    91:72:ea:67:e7:92:d5:f4:86:e1:30:b2:84:6c:18:
                    c3:a0:97:13:00:b6:c6:04:e9:d2:9c:9b:16:33:9b:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CD:A4:60:A7:13:2D:E5:80:81:DF:67:37:91:1A:B2:F5:03:47:9E
            X509v3 Authority Key Identifier:
                keyid:E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:74:da:83:4d:51:33:2c:71:19:4f:f4:dc:90:ed:59:f1:
         83:ce:85:0b:33:5b:95:9d:53:81:98:40:8a:ce:a8:a0:ba:54:
         86:de:c4:71:eb:a9:24:4a:4b:e4:6e:d0:d9:10:d4:84:31:ed:
         30:51:c1:96:ef:62:bd:40:c2:64:ef:96:28:c6:6a:47:66:6c:
         d3:2e:f7:a9:ca:a5:51:3d:3b:1e:0e:22:d4:3c:d9:35:46:c6:
         cf:9b:e4:02:91:65:17:1e:3d:b9:68:12:61:b7:8e:3a:b6:ed:
         fe:51:a7:f5:27:fa:c6:8e:1a:72:97:93:80:6a:b6:87:c5:d7:
         80:1d:0e:a0:31:06:73:1f:e3:05:04:1a:4c:61:de:2c:c7:de:
         9c:35:05:46:6c:ba:a2:74:ca:79:32:80:d0:09:9d:52:77:a5:
         73:64:ad:23:cf:83:b0:a5:fb:d2:55:9a:5d:28:9e:5c:85:a9:
         5c:b8:74:53:e7:e2:f6:c4:d0:0a:72:b4:29:6f:c4:ff:21:70:
         24:1e:39:9e:dc:83:5f:7f:43:0d:b9:4d:65:e0:9a:f8:ce:86:
         82:20:88:16:9e:25:0d:d2:28:c2:6b:1b:b8:6c:99:2e:30:e2:
         4b:c8:2a:16:9b:fa:a6:16:3a:84:5f:70:2a:8a:5b:9d:2b:8b:
         e4:d1:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:37:28 2026 by rpki-client