Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3430203d3e20323636333535.roa
File:                     323830343a333638633a383030303a3a2f33332d3430203d3e20323636333535.roa (raw, json)
Hash identifier:          fBfLfx17LhFdmntzA5AI2pPw83P+fQ6QgiFAQg8QyYs=
Subject key identifier:   B8:4E:9C:50:84:56:F5:75:B4:3A:49:B5:DF:54:55:96:20:8E:84:0B
Certificate issuer:       /CN=A594B4C7F78F1FE8A3BA855D39DD02A83730306B
Certificate serial:       4D9D85814E8D3A5779042589C140A7430854B9D8
Authority key identifier: A5:94:B4:C7:F7:8F:1F:E8:A3:BA:85:5D:39:DD:02:A8:37:30:30:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3430203d3e20323636333535.roa
Signing time:             Mon 27 Jul 2026 22:58:29 +0000
ROA not before:           Mon 27 Jul 2026 22:53:29 +0000
ROA not after:            Mon 26 Jul 2027 22:58:29 +0000
asID:                     266355
IP address blocks:        2804:368c:8000::/33 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.crl
                          rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9d:85:81:4e:8d:3a:57:79:04:25:89:c1:40:a7:43:08:54:b9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A594B4C7F78F1FE8A3BA855D39DD02A83730306B
        Validity
            Not Before: Jul 27 22:53:29 2026 GMT
            Not After : Jul 26 22:58:29 2027 GMT
        Subject: CN=B84E9C508456F575B43A49B5DF545596208E840B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:59:8f:a4:76:cf:7c:02:96:65:e4:8a:ae:
                    10:fa:32:db:46:ee:f8:8b:00:9b:50:21:e9:c1:c2:
                    da:cc:a7:05:c2:8e:f3:f1:ee:bd:01:b5:a2:bb:dc:
                    41:0e:c3:75:26:c2:b2:81:f2:8f:fa:c3:c9:9d:b3:
                    d6:7b:57:51:47:2e:42:03:02:3c:12:5c:dc:84:07:
                    a6:4e:c1:f2:72:f5:e9:4c:f9:79:7d:56:fc:b2:22:
                    6e:fb:19:2e:77:ce:29:58:eb:46:15:17:d9:43:39:
                    32:c4:95:4c:ea:43:2f:6d:b4:e0:cd:0f:35:b0:6b:
                    e8:55:b9:b3:76:c7:ba:e6:93:37:16:f6:f8:bb:4d:
                    1b:22:4c:e7:1d:27:c0:c3:70:8c:f8:fc:36:fe:37:
                    ce:ba:88:e8:f8:49:10:2a:f5:fb:43:f4:ad:21:9c:
                    6f:18:1c:93:88:64:d8:4c:e3:ef:25:4f:7b:04:da:
                    5a:5d:89:ad:02:25:6b:c7:c9:2d:69:85:c8:f2:b8:
                    99:fc:1b:11:7b:ed:c6:ea:cd:fb:73:1b:25:9a:9e:
                    19:7a:3c:e6:d4:98:d5:fd:17:ab:4d:b7:4a:6f:00:
                    75:0d:7b:43:76:dd:f2:00:ac:08:36:94:90:b1:95:
                    dd:9d:8c:49:de:b6:2a:b0:55:e3:6a:82:ae:9e:00:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4E:9C:50:84:56:F5:75:B4:3A:49:B5:DF:54:55:96:20:8E:84:0B
            X509v3 Authority Key Identifier:
                keyid:A5:94:B4:C7:F7:8F:1F:E8:A3:BA:85:5D:39:DD:02:A8:37:30:30:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A594B4C7F78F1FE8A3BA855D39DD02A83730306B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9mJnQbJCGPx9Kd5bB5bstZroYP83tH61SfoGYCBQaewX/0/323830343a333638633a383030303a3a2f33332d3430203d3e20323636333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:368c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:5a:9b:64:f1:9e:6d:02:72:d6:16:42:15:59:e8:b1:aa:
         87:94:89:77:98:d7:37:c1:3a:ac:d3:5f:32:61:bd:8a:91:cd:
         a8:b1:4c:ec:e6:c6:85:50:56:4a:e8:f9:29:73:96:63:fc:3d:
         57:13:05:cd:90:15:4e:c5:25:f6:b2:7a:f6:60:d7:f2:1d:c5:
         45:8a:97:89:e1:49:9a:00:e9:8a:27:8b:fe:8f:6b:32:7b:72:
         17:74:29:16:bd:e3:61:35:f9:ad:fb:b3:92:d6:6a:70:dd:02:
         cb:e5:52:67:36:55:86:28:55:5c:8f:96:40:7e:a4:56:64:c3:
         13:51:4d:cd:a4:f3:34:4b:eb:f5:4c:3e:09:18:3a:ad:61:9c:
         ee:64:fb:83:f6:0f:39:29:30:1f:b2:dd:e7:8b:32:6b:1c:4a:
         5c:bf:0f:8a:60:ba:54:23:4c:d2:89:fe:f5:8b:94:8e:56:70:
         6b:ef:18:ae:8c:05:cc:09:b6:f2:67:92:2b:15:bf:b5:72:1e:
         df:02:ca:93:08:b4:fd:31:51:3e:c7:a5:a0:d6:26:9b:cf:a3:
         15:ec:0c:06:bf:13:f8:06:fc:cc:8e:29:8b:57:32:9f:38:5e:
         62:ee:7e:2d:f9:ce:46:48:da:9e:18:09:a1:05:71:f2:8d:51:
         de:75:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:39:21 2026 by rpki-client