Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier:          7MFyp9gfmBXzYehYf6EL5cJUZUgYhlZyqHmc70Guz4Y=
Subject key identifier:   D8:FC:5E:1B:B1:31:CF:BA:CE:BF:84:D8:BA:1A:1C:E3:42:F7:E1:DD
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       2F631985C48757B8C0306B9E64099039610F6604
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
Signing time:             Sun 06 Sep 2026 20:12:59 +0000
ROA not before:           Sun 06 Sep 2026 20:07:59 +0000
ROA not after:            Sun 05 Sep 2027 20:12:59 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:63:19:85:c4:87:57:b8:c0:30:6b:9e:64:09:90:39:61:0f:66:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 20:07:59 2026 GMT
            Not After : Sep  5 20:12:59 2027 GMT
        Subject: CN=D8FC5E1BB131CFBACEBF84D8BA1A1CE342F7E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:ec:56:e6:f3:82:3b:98:5b:74:2b:a0:77:
                    31:7a:81:c8:2f:c1:c1:cd:fc:70:2e:28:49:70:2c:
                    36:4b:a2:96:57:7e:1e:1f:0c:7a:56:ac:16:cd:8c:
                    75:41:1e:a8:d2:f7:1f:d9:dc:4c:9b:42:2b:33:7a:
                    5c:cf:2c:31:00:e0:90:af:38:6b:1d:8d:80:6b:b9:
                    1a:40:8d:e9:d7:74:68:7f:72:74:81:4e:5d:8b:ab:
                    fa:97:ab:34:0c:77:41:e8:f2:73:6c:71:09:94:73:
                    d8:90:df:40:18:00:08:53:6d:9e:10:89:29:44:b8:
                    2b:fa:f3:f1:e9:4e:86:d3:2e:0b:3c:63:35:22:0a:
                    ba:10:e1:2f:af:6b:3d:9b:d4:07:be:10:2b:a5:39:
                    89:1a:45:77:67:38:5c:bb:75:ba:53:19:e9:82:8a:
                    b5:97:5a:94:d2:d0:57:43:8a:47:46:4a:d3:b1:b9:
                    4e:54:05:20:fe:ac:8b:0d:12:ce:09:a1:0a:44:4b:
                    2b:cb:48:f9:04:e1:c3:d0:4a:45:b2:c8:7c:06:0f:
                    33:af:88:60:c3:8b:a5:cf:c1:79:d3:24:54:06:75:
                    d4:31:43:dd:20:b4:46:2f:8a:58:5f:2a:6a:20:7b:
                    8a:dc:eb:2c:ba:13:15:4b:36:67:f3:8a:11:5e:74:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:5E:1B:B1:31:CF:BA:CE:BF:84:D8:BA:1A:1C:E3:42:F7:E1:DD
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:d9:13:3d:29:6c:02:64:1f:49:d8:7c:d2:88:01:c1:b7:
         b3:0a:29:7b:2d:93:c5:a6:ec:af:20:a4:41:15:c2:b5:60:51:
         68:f6:5f:9a:63:72:79:35:b2:d8:ed:4e:ad:28:d6:07:66:0b:
         1f:90:d8:45:37:82:6d:f3:21:d2:c9:d8:05:0b:12:d0:bc:1b:
         ae:81:d7:3e:d2:16:ba:3c:8c:73:60:3f:64:37:f0:14:fa:a5:
         b3:e7:ff:47:40:57:19:18:d3:32:43:36:3f:d0:d0:13:2b:69:
         e8:2a:82:c3:b4:9c:40:fc:c7:85:f8:02:b1:14:7c:e7:c5:24:
         de:25:ad:8b:01:14:8e:7c:54:e9:b8:bb:ea:eb:70:e4:b0:c8:
         e9:4a:83:33:61:d0:0c:00:96:f7:b2:5e:3e:05:56:99:05:1e:
         51:d8:2b:10:ec:cf:0c:c1:b0:82:c3:30:a9:b8:54:22:7e:30:
         59:7c:09:c8:fe:c6:4a:a6:41:51:21:11:9c:6a:89:b8:32:24:
         65:2b:45:10:f7:0b:67:17:de:e7:ec:49:8a:c1:de:7c:b5:6b:
         ce:50:ef:78:13:b1:20:54:ff:0a:ce:a0:4c:ed:aa:58:46:88:
         01:94:a3:a0:08:75:8e:91:42:c7:15:e5:8e:2a:07:71:a4:1d:
         fa:c1:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:23:28 2026 by rpki-client