Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          2YHwLi+ChLwb8GgBmpo/Py+Umt16LIEDczTdRceCOgY=
Subject key identifier:   37:AF:E2:DF:5D:91:63:16:7F:25:2B:94:62:DF:75:AF:B7:81:29:11
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       34C90AC15955CEB74632D21F31A0F216DF6857EE
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:42 +0000
ROA not before:           Tue 13 Oct 2026 15:17:42 +0000
ROA not after:            Tue 12 Oct 2027 15:22:42 +0000
asID:                     268296
IP address blocks:        2804:4efc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c9:0a:c1:59:55:ce:b7:46:32:d2:1f:31:a0:f2:16:df:68:57:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:42 2026 GMT
            Not After : Oct 12 15:22:42 2027 GMT
        Subject: CN=37AFE2DF5D9163167F252B9462DF75AFB7812911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:ca:f5:8d:22:40:9b:ff:72:88:de:73:06:
                    38:36:55:3b:2f:98:45:cb:f2:9f:fc:a4:87:ae:e4:
                    39:82:ff:81:2b:5a:7c:64:fc:83:8b:82:3e:0b:cb:
                    0b:ee:83:ba:fd:c4:db:3b:4e:f2:3e:2f:b1:d4:b8:
                    73:7a:e6:4e:b9:15:b7:32:05:9a:04:8c:b3:5d:34:
                    b1:8f:75:e2:01:56:d4:c0:eb:94:9d:61:af:b6:cc:
                    a4:2e:ad:f9:c4:70:d8:e1:45:7c:ab:a7:f4:e9:f2:
                    d3:e4:b8:2b:d4:68:48:77:bc:0d:8d:af:43:a8:e4:
                    51:04:30:78:fc:29:10:00:aa:55:6f:62:e3:ad:7b:
                    af:fa:8a:f7:4d:bb:62:93:2f:ea:fa:47:f1:15:79:
                    47:e2:f1:04:04:bd:c1:ca:8a:ba:4f:ef:51:f4:d7:
                    c6:0e:33:e6:7d:39:b9:95:ae:66:2a:ec:1c:ef:07:
                    ac:af:b2:7f:fb:39:aa:6b:00:27:97:9f:a4:a7:fc:
                    d5:44:e2:10:3b:eb:3f:6d:13:37:6d:f6:3c:de:d5:
                    1a:bc:b0:fc:c7:85:56:2e:0c:ca:a2:d5:04:d0:3a:
                    e8:68:0c:02:55:16:36:7d:23:fd:4c:3b:d0:c7:d5:
                    02:eb:34:36:0d:12:34:2f:b1:21:6a:e3:99:c8:4d:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:E2:DF:5D:91:63:16:7F:25:2B:94:62:DF:75:AF:B7:81:29:11
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:1c:3e:24:fc:63:c1:82:d3:18:d3:3c:9d:c3:7d:cd:12:
         1d:b2:ff:d0:8a:ed:2f:f3:2b:ab:ca:eb:5d:ca:f4:8d:5f:6d:
         e0:ba:cd:36:56:40:66:d1:1a:09:63:6a:92:77:fc:d4:0f:40:
         d7:c5:ec:71:7c:a2:4c:00:19:70:94:d6:14:c9:18:ae:16:1f:
         f3:fd:f1:a1:b4:05:fe:29:99:71:db:e2:d0:0a:a2:73:aa:c6:
         44:e3:84:98:c9:24:10:13:c4:da:9d:1a:7f:f1:a4:ac:b3:1c:
         62:71:67:e7:50:12:01:6c:a1:c5:20:fb:9a:6e:06:8c:32:9a:
         b8:6a:ef:a8:b9:15:40:67:f6:bd:3f:6d:ac:d6:2d:79:77:96:
         14:76:f1:b9:fd:68:6e:98:95:d7:73:47:47:8d:16:98:6e:05:
         d0:de:48:e2:9c:56:77:1f:f8:ed:80:d7:4e:06:89:e5:28:f7:
         c2:d0:c2:2f:52:ff:67:61:f9:d1:1c:66:7c:c4:43:90:ca:62:
         78:33:c8:a6:8a:cd:0f:0f:44:4a:f4:e2:36:a8:30:53:fe:e9:
         95:eb:87:33:83:e7:86:94:ec:09:df:ff:25:10:16:09:3c:2b:
         1d:cc:23:67:94:d4:ed:6a:38:92:ff:84:af:c0:8f:8d:57:91:
         e9:85:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:31:11 2026 by rpki-client