Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
File:                     323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa (raw, json)
Hash identifier:          Aow+I0gCWtn9y/uZ5t7f8y7g/bt0NQOx49EazUSUz9s=
Subject key identifier:   E1:D2:2D:71:81:D6:6F:85:74:00:DC:9F:0F:76:2E:35:03:D3:5E:4A
Certificate issuer:       /CN=C35549FD881F7AAE59D817159EC9B19049B93616
Certificate serial:       72F69481280925B3C9B7AA4A55D5B4E35649720D
Authority key identifier: C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa
Signing time:             Sun 06 Sep 2026 20:12:59 +0000
ROA not before:           Sun 06 Sep 2026 20:07:59 +0000
ROA not after:            Sun 05 Sep 2027 20:12:59 +0000
asID:                     268707
IP address blocks:        2804:5984:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl
                          rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 10:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f6:94:81:28:09:25:b3:c9:b7:aa:4a:55:d5:b4:e3:56:49:72:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35549FD881F7AAE59D817159EC9B19049B93616
        Validity
            Not Before: Sep  6 20:07:59 2026 GMT
            Not After : Sep  5 20:12:59 2027 GMT
        Subject: CN=E1D22D7181D66F857400DC9F0F762E3503D35E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:6c:15:30:3d:61:63:33:d9:9d:a7:b3:96:
                    66:7a:47:5c:30:c6:c7:34:0d:b9:7a:50:2e:10:b2:
                    58:67:1e:b6:b3:cb:cf:77:60:c1:40:ea:ce:37:e7:
                    4f:5b:ce:8e:85:53:82:ad:19:d8:a5:9a:ad:9d:9d:
                    6a:95:77:91:a3:bc:81:a6:af:ae:14:82:33:8f:c7:
                    69:99:e1:0e:5c:b3:d7:ef:fa:41:cb:99:12:aa:a9:
                    ae:5b:97:00:f1:f6:c0:a6:21:04:7f:25:6e:2b:55:
                    d7:8b:7a:ef:38:4e:85:55:55:6b:88:95:0a:68:64:
                    68:f3:3f:5e:ac:91:04:97:f8:de:86:d8:28:7a:d4:
                    7a:21:dc:91:a4:01:27:c6:26:00:ef:bf:91:10:3f:
                    db:b2:4e:53:71:2c:a3:81:56:61:e3:1b:94:f2:bc:
                    d6:15:18:af:6c:44:c1:d2:05:9b:e8:0f:f8:b1:8e:
                    ce:00:27:90:e1:36:dc:de:07:cf:5b:93:44:41:9e:
                    17:18:ec:90:d4:50:b7:59:b6:fe:84:f0:04:8f:88:
                    8b:1b:e0:0e:6c:33:b5:26:e4:ad:47:fb:61:ec:28:
                    06:a1:6c:90:f2:04:d7:88:fe:e9:ef:10:ef:5d:f8:
                    f6:c1:bf:6f:69:04:be:81:84:9e:71:4b:ef:f8:61:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:2D:71:81:D6:6F:85:74:00:DC:9F:0F:76:2E:35:03:D3:5E:4A
            X509v3 Authority Key Identifier:
                keyid:C3:55:49:FD:88:1F:7A:AE:59:D8:17:15:9E:C9:B1:90:49:B9:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/C35549FD881F7AAE59D817159EC9B19049B93616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35549FD881F7AAE59D817159EC9B19049B93616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33352d3335203d3e20323638373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         84:88:64:60:2e:b4:a9:6f:76:f8:9f:f8:5a:4c:70:1f:4c:a9:
         37:db:eb:2c:6c:53:17:54:11:23:7a:c7:09:02:a9:4b:1c:a8:
         a6:2b:82:c3:04:30:46:f6:67:93:81:f7:5a:83:d2:cd:cd:7d:
         0b:a8:52:f1:4a:6f:4b:9c:d0:37:2e:f5:65:3e:0f:b3:49:05:
         63:3a:fd:51:fc:71:59:7f:13:c7:af:6b:f1:55:ff:18:15:62:
         3b:e4:fe:04:45:9f:2f:de:b2:fc:32:c1:01:35:ad:26:74:be:
         f2:88:2e:9d:b8:be:a2:09:95:11:5a:42:60:9c:66:de:2c:62:
         f8:6b:81:12:29:23:58:dd:03:17:5c:57:f4:92:71:67:0f:56:
         bd:a7:4b:fd:e9:41:98:a4:41:03:67:86:8b:55:f3:0e:75:af:
         e1:94:c8:38:be:bb:40:50:cc:d0:2b:9a:c8:04:01:aa:1e:78:
         d2:1b:2e:e7:0d:04:7a:0c:a0:31:16:29:41:e9:93:28:bc:cf:
         71:fd:2b:71:4c:38:96:24:79:2f:3b:f2:41:8f:43:31:c8:64:
         59:e6:62:e5:b3:2b:9a:30:a0:d4:5a:4e:5a:85:0f:70:85:a1:
         4e:41:74:92:4d:f4:5b:96:ac:38:28:3e:80:7b:8c:04:f1:dc:
         df:e1:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:20:48 2026 by rpki-client