Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a333030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a333030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          Wkjr13oVAAjco+tnXZPAGVUxgM3m+Q9F1x8gNuSEZsw=
Subject key identifier:   36:70:6F:A3:1C:DB:9E:24:33:BB:4B:E8:E0:97:78:59:8F:92:BD:70
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       74D7453BD9460D0DA0D0D2702AC44E17B00320E2
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a333030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:26 +0000
ROA not before:           Mon 07 Sep 2026 15:54:26 +0000
ROA not after:            Mon 06 Sep 2027 15:59:26 +0000
asID:                     268009
IP address blocks:        2804:5690:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:45:3b:d9:46:0d:0d:a0:d0:d2:70:2a:c4:4e:17:b0:03:20:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:26 2026 GMT
            Not After : Sep  6 15:59:26 2027 GMT
        Subject: CN=36706FA31CDB9E2433BB4BE8E09778598F92BD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:fe:f1:23:b2:fe:6e:f8:eb:82:ce:77:66:
                    fd:06:7f:cb:c4:65:a1:83:8d:e0:31:15:d5:98:2e:
                    53:32:8f:36:5c:9b:f9:07:9b:99:d0:77:06:41:c8:
                    fe:a0:f9:cd:fd:b0:a4:9a:19:a3:34:47:95:97:55:
                    2f:d2:fe:08:05:15:e8:f6:45:0f:15:90:52:ce:48:
                    33:d1:57:60:4c:c0:b0:22:69:9f:c8:15:f1:09:d3:
                    9c:32:95:03:e3:3b:c4:7c:7b:f1:1e:84:ec:c1:3e:
                    dc:3e:cd:00:53:21:c8:fd:e0:53:bf:b0:76:aa:63:
                    c7:03:72:e2:33:d8:66:af:02:68:1e:ce:79:52:01:
                    02:4a:e8:93:9c:f5:30:c8:67:e9:ba:ac:c2:8e:e5:
                    83:f7:3c:88:25:4a:e6:4d:87:0f:02:bb:cd:18:71:
                    0f:fa:ff:dd:67:9c:f8:fb:e6:5c:4f:89:f9:d1:82:
                    ef:90:16:21:31:0b:83:e7:e1:29:4c:71:28:62:ea:
                    2e:33:b0:bd:0c:fc:72:12:a2:ed:d8:bb:47:78:7d:
                    4e:7d:fe:ab:72:d2:20:a7:52:98:08:8d:5a:41:a7:
                    1c:27:02:91:3e:cc:02:c8:e3:bd:52:18:0f:2d:a5:
                    2e:9e:20:21:fc:67:84:52:ca:02:e3:90:1c:69:96:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:6F:A3:1C:DB:9E:24:33:BB:4B:E8:E0:97:78:59:8F:92:BD:70
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a333030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:d8:64:f1:fe:0c:a8:58:bf:38:d1:cf:55:cb:dd:e0:d6:
         e3:41:ec:ba:05:ff:41:af:de:51:d1:b4:08:b3:7a:03:bb:4f:
         e6:f2:54:22:23:15:d9:13:8d:21:5d:2d:80:a0:ea:34:44:c7:
         80:f4:dc:09:f6:04:e0:7e:53:7b:c2:66:eb:90:25:85:bb:aa:
         4a:3f:c3:50:cb:77:0b:a8:3e:c6:3a:84:d9:eb:95:25:e5:94:
         a7:c6:e2:fb:07:42:10:32:74:3a:2c:aa:8c:c1:da:76:63:ad:
         e1:6e:69:a8:4d:50:14:da:3f:4b:d3:a9:5b:8d:c6:cd:f9:61:
         cf:aa:65:1e:02:c0:3f:fc:d0:e0:c5:bf:68:95:d4:a0:a9:be:
         78:40:92:5f:07:66:eb:66:d2:de:90:9d:5c:2d:b7:fc:44:f7:
         de:8c:03:8d:c8:c2:ab:a3:b4:9b:f9:71:79:dc:d1:25:f2:1e:
         55:0d:9f:71:b9:6a:5e:51:51:11:4a:29:1d:a3:b9:3e:dc:56:
         86:e4:28:f5:08:de:ef:f5:bd:94:51:53:8e:cc:50:45:c0:e2:
         9b:27:6f:44:f2:f4:ec:41:79:5e:97:9d:e5:ae:59:d8:d5:6b:
         05:94:e9:09:ed:ac:c8:d7:f0:6e:e1:ee:18:2e:dd:07:f4:d2:
         e3:ca:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:59:37 2026 by rpki-client