Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          +qcpA+eprnwOMBDL7ohWHvxQ8c2aNBPu4c04ebFa2NA=
Subject key identifier:   2D:AA:F0:8E:A3:20:91:27:C2:38:DC:37:AD:A7:10:CE:58:BA:11:24
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       10408D0DBC43AF35E403AA0C248113F748ECFB48
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:26 +0000
ROA not before:           Mon 07 Sep 2026 15:54:26 +0000
ROA not after:            Mon 06 Sep 2027 15:59:26 +0000
asID:                     268009
IP address blocks:        2804:5690:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:40:8d:0d:bc:43:af:35:e4:03:aa:0c:24:81:13:f7:48:ec:fb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:26 2026 GMT
            Not After : Sep  6 15:59:26 2027 GMT
        Subject: CN=2DAAF08EA3209127C238DC37ADA710CE58BA1124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:2a:84:44:33:91:63:6b:e5:0f:88:01:12:
                    a3:92:9f:35:25:62:a0:94:9f:44:ee:16:ce:da:43:
                    31:61:54:68:c2:7d:b5:ca:84:77:76:2d:af:d2:a5:
                    17:7e:4d:a2:5b:87:ea:36:44:48:3f:9b:2e:f6:e0:
                    5d:b6:51:ce:a5:53:4d:69:0f:24:09:9f:18:26:23:
                    81:e8:42:d4:8e:8f:37:25:02:90:19:a3:5b:fd:57:
                    0f:b7:3a:fc:38:39:91:8f:61:89:bb:ca:da:ce:1d:
                    f6:29:cf:55:2e:f2:37:49:65:8d:a6:31:e6:4b:4d:
                    c3:a3:1b:f3:69:db:e7:9b:e4:ae:cc:85:dc:ac:10:
                    c0:9b:21:b5:ff:12:4f:81:87:01:9f:b5:a3:28:30:
                    d7:c6:ea:35:14:8c:d9:fc:6a:0e:2a:1f:ad:a1:65:
                    ee:54:e0:2a:96:81:97:e7:f8:9a:5c:95:a5:25:18:
                    09:c9:2f:a9:26:0e:06:44:03:ac:05:8d:7c:2a:57:
                    a9:44:97:22:01:38:6f:32:c1:32:28:fe:e4:c7:fc:
                    5d:bd:0c:9d:00:1a:f4:8b:5e:22:18:ac:ca:ab:fc:
                    3a:e4:c0:34:96:56:58:33:f1:b4:07:f2:f9:2f:7d:
                    8d:a7:fc:2f:cb:71:12:e7:e1:34:68:c5:d2:4a:97:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AA:F0:8E:A3:20:91:27:C2:38:DC:37:AD:A7:10:CE:58:BA:11:24
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a353030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c7:f0:94:01:78:bf:d0:8f:61:63:52:37:29:fc:09:79:11:58:
         3b:92:eb:3c:f0:ad:63:0f:15:ba:98:a2:21:ff:fc:81:bf:64:
         88:55:7c:35:85:c1:9f:b3:49:3e:cf:11:97:44:69:fd:65:12:
         31:22:34:12:f3:6b:49:86:19:be:b3:c4:88:ed:f9:d9:43:17:
         13:a3:3f:be:ad:23:fd:92:20:8b:e0:f0:5a:b1:e9:76:43:7b:
         e5:22:e6:fa:84:88:73:70:02:9b:3e:b5:99:d0:32:87:5c:59:
         c3:c9:3a:ce:f5:f8:67:46:d7:f0:a4:27:8e:fd:c6:43:b6:84:
         65:94:e6:8d:6e:83:2c:80:e6:09:29:27:ea:68:c9:fb:db:bb:
         fc:8f:02:e7:0a:2a:b9:71:69:e7:43:3b:db:26:31:dc:2c:4f:
         eb:1e:f7:71:c6:76:da:ef:56:b1:65:71:e6:f6:e8:6d:31:70:
         2f:db:b3:f9:a3:e2:f1:dc:c3:5b:6a:61:ab:f4:58:30:d2:d0:
         39:5a:4a:4c:27:e7:ee:cf:0c:14:dc:1e:04:84:70:bc:e0:2a:
         6e:86:6b:a5:93:47:13:b5:3b:e5:6c:97:60:0c:f2:e3:20:a8:
         1a:1b:3a:43:35:f1:6c:c2:2f:f2:d8:c9:73:f6:04:bd:f6:0f:
         f6:6d:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:58 2026 by rpki-client