Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa
File:                     323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa (raw, json)
Hash identifier:          6YFMWd/4mXZ0hejWp+0xKieLzfCSQP0/sT9hXwpIl2w=
Subject key identifier:   40:E8:8F:B8:B4:CC:6D:1E:6F:CD:B8:E6:B7:16:B7:21:FD:38:28:29
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       3D16C8425B3B5CFD7DCD88F4FA36D39176CE3B00
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa
Signing time:             Wed 02 Sep 2026 16:55:22 +0000
ROA not before:           Wed 02 Sep 2026 16:50:22 +0000
ROA not after:            Wed 01 Sep 2027 16:55:22 +0000
asID:                     270905
IP address blocks:        2804:7344:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:16:c8:42:5b:3b:5c:fd:7d:cd:88:f4:fa:36:d3:91:76:ce:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Sep  2 16:50:22 2026 GMT
            Not After : Sep  1 16:55:22 2027 GMT
        Subject: CN=40E88FB8B4CC6D1E6FCDB8E6B716B721FD382829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:6b:03:ca:fd:87:19:ac:45:4d:3a:45:7a:
                    d6:07:5e:1d:68:00:ab:89:40:f9:0e:73:65:da:8b:
                    9c:73:4c:ac:1f:bc:1f:5e:1c:9c:89:ba:38:06:ef:
                    88:55:9d:05:00:25:fd:59:f6:80:6b:cc:52:95:e3:
                    ba:76:26:34:c2:ab:d1:a9:42:5a:6c:9b:35:8f:d3:
                    24:cd:16:ad:c6:c9:24:ed:88:ec:d1:44:d8:4a:9b:
                    f2:57:99:3c:f2:32:84:fd:aa:02:23:65:eb:a0:71:
                    d9:d5:05:90:e4:e9:77:22:92:6a:21:21:2f:35:7d:
                    95:e9:eb:26:57:4c:93:18:7f:e1:ac:fd:53:8d:89:
                    01:53:19:da:73:b0:57:5c:7c:58:0e:2f:97:cb:83:
                    d1:cb:1b:53:c1:5b:6f:c5:28:bf:d0:e4:2a:5b:ff:
                    d0:63:5a:9f:37:21:96:0c:90:78:9c:f9:8e:a0:3f:
                    0b:c3:20:e7:7e:4b:56:e5:43:06:cd:a5:fb:53:5a:
                    df:8e:e4:a8:cc:8c:d9:9b:8d:55:5a:b7:83:6a:7f:
                    ca:35:bd:cf:c7:b3:f7:ed:8e:c6:41:e3:b7:68:3f:
                    b9:42:71:f1:48:64:d5:4e:c4:4d:c5:51:7d:69:39:
                    95:67:c3:18:33:a8:91:26:a6:08:c1:df:8c:d9:8b:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:8F:B8:B4:CC:6D:1E:6F:CD:B8:E6:B7:16:B7:21:FD:38:28:29
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a343030303a3a2f33342d3334203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:a9:34:de:39:65:df:1c:2a:78:5d:78:27:54:ab:0b:68:58:
         85:77:57:09:0b:4e:cf:bd:25:f8:71:72:7a:7a:54:70:41:c0:
         60:ae:54:65:27:ae:b7:c2:cd:50:6a:97:88:e1:42:01:ae:e7:
         3f:c2:c7:52:7c:9a:a9:da:7f:d1:c3:22:4a:22:52:74:2a:83:
         d4:bb:45:ed:1d:98:15:69:62:fe:c8:68:c0:59:ec:9f:a3:46:
         10:40:22:9c:00:4d:5e:da:f3:b6:b7:8e:ce:ef:1a:42:d1:a8:
         b6:f6:b5:41:31:32:59:b4:d5:71:6a:ae:b5:f9:16:4e:fb:b3:
         0a:52:9e:12:61:e0:d3:61:06:e9:18:c4:9f:92:9f:9e:1c:9b:
         f9:6d:cc:a5:ee:36:82:84:05:dc:fc:96:85:94:d2:2c:2b:01:
         06:2a:5b:b7:dd:74:4b:8b:af:fc:ff:4f:f7:4e:d3:fd:10:d8:
         15:d3:93:fa:a5:5a:05:da:df:1f:35:48:de:1d:6e:fe:af:6c:
         00:26:1e:9a:08:21:83:eb:7e:fd:27:8b:f5:ea:be:de:8c:74:
         3f:0b:c0:89:02:d4:0d:72:52:70:e2:55:ae:87:5f:e7:a2:c7:
         7e:20:65:2d:e1:05:d7:55:e9:4f:82:17:be:a3:d4:32:33:80:
         6f:40:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:31:26 2026 by rpki-client