Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3438203d3e20323636303836.roa (raw, json)
Hash identifier:          FMqXwH0A5mzJT5VAXkUJ4pqFS3cDF3hgmdsMSRh3wMM=
Subject key identifier:   F2:43:CE:74:DA:59:11:3C:15:E6:E8:DD:6F:29:B7:32:69:F9:44:31
Certificate issuer:       /CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
Certificate serial:       044873F53D1DD1A0A3E35773AF23FCC9D4E35A75
Authority key identifier: E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa
Signing time:             Tue 18 Aug 2026 13:59:25 +0000
ROA not before:           Tue 18 Aug 2026 13:54:25 +0000
ROA not after:            Tue 17 Aug 2027 13:59:25 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl
                          rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 08:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:48:73:f5:3d:1d:d1:a0:a3:e3:57:73:af:23:fc:c9:d4:e3:5a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0C40FA4B10FE3592FA45A02252E9834A23C3076
        Validity
            Not Before: Aug 18 13:54:25 2026 GMT
            Not After : Aug 17 13:59:25 2027 GMT
        Subject: CN=F243CE74DA59113C15E6E8DD6F29B73269F94431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:bf:83:27:a9:c7:8a:97:ec:8f:24:29:b8:
                    2c:89:55:cf:2c:19:78:0f:85:bf:bf:47:01:89:86:
                    1a:21:46:86:4d:62:81:e3:83:90:a8:fc:64:97:81:
                    0a:64:d0:4e:6f:72:dc:50:d1:3a:7f:c9:5f:5f:6a:
                    a4:ae:c2:73:3d:a3:08:3f:0b:8c:09:e8:1a:e7:2c:
                    a7:44:3f:ab:aa:55:e2:8b:5e:c1:1d:3d:80:a3:51:
                    d2:ab:ea:a4:46:a6:3a:b0:7e:e6:6a:ad:0a:11:10:
                    75:c7:dc:cd:80:32:48:fb:bb:f7:39:39:d8:0f:54:
                    0e:d1:ad:36:f8:f5:15:6e:d8:1d:6e:c3:be:b3:17:
                    dc:4b:04:c4:8c:13:6f:83:2f:b0:6f:b6:18:48:33:
                    55:be:1b:c0:c2:bb:a0:da:0d:50:38:86:32:42:b7:
                    1f:2c:85:11:df:ca:e2:c0:6a:15:11:3e:7a:96:0d:
                    51:f9:a0:7b:46:3d:62:ac:74:64:ff:72:48:d5:6f:
                    ea:20:46:68:ff:d0:4b:f7:cd:12:c0:39:4a:2d:75:
                    d3:c5:b6:9a:bf:f4:72:ce:8b:5a:12:aa:80:c1:f8:
                    f5:89:3e:2f:51:18:c7:a0:50:8a:31:47:a3:5e:21:
                    ff:b6:b7:39:13:e8:48:62:6b:95:a9:a2:2b:75:bc:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:43:CE:74:DA:59:11:3C:15:E6:E8:DD:6F:29:B7:32:69:F9:44:31
            X509v3 Authority Key Identifier:
                keyid:E0:C4:0F:A4:B1:0F:E3:59:2F:A4:5A:02:25:2E:98:34:A2:3C:30:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/E0C40FA4B10FE3592FA45A02252E9834A23C3076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0C40FA4B10FE3592FA45A02252E9834A23C3076.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:0d:cb:04:af:5a:d3:19:bc:e7:c8:35:a6:57:92:b0:32:d6:
         da:a5:b7:79:29:12:08:a9:77:1b:01:3b:b6:9a:47:dc:55:17:
         3b:3d:d8:62:06:f4:e9:4f:d9:3e:77:fc:e3:39:df:71:e1:54:
         af:8f:f9:76:bc:2c:dc:bc:e6:96:59:e7:3e:ad:52:43:4f:f0:
         ec:d6:a5:12:a4:18:2d:3c:65:54:70:a3:d0:f0:ee:41:5a:d0:
         b1:fc:c6:34:f8:d6:9d:40:e7:b3:a4:06:50:1b:ef:5b:c2:65:
         d7:6c:f1:0c:71:e3:56:5d:cd:bc:ed:04:9c:7e:b5:32:5d:f4:
         91:88:27:bb:cd:e1:71:13:fe:ab:5f:7e:99:c5:cb:40:27:e0:
         15:46:fb:b4:ef:33:ec:35:3d:f5:b6:8a:ff:40:66:bb:9e:47:
         e1:5e:e5:c7:3b:4a:9b:2a:ad:9c:5e:da:85:b2:e0:f8:70:c4:
         ea:c6:7a:5f:d3:da:b1:8e:07:ed:51:de:e9:64:e7:a3:de:34:
         e8:4c:55:80:bb:ae:0e:fc:f9:3f:a2:0e:7e:c7:08:7d:64:42:
         70:35:e2:e6:73:cc:70:a3:c3:84:fa:7a:bc:c2:39:65:83:d2:
         7e:09:9c:db:5f:91:f2:1c:d4:e9:74:59:04:cb:75:5a:ea:fc:
         f4:5b:32:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:11:18 2026 by rpki-client