Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33322d3338203d3e20323733363731.roa
File:                     323830343a386137383a3a2f33322d3338203d3e20323733363731.roa (raw, json)
Hash identifier:          4x5JA9g1Y/iR7FthWhbS78o3rKkzsIfYCTzmRiF9UJg=
Subject key identifier:   9B:58:DF:0D:D3:D1:EE:4D:52:9F:C6:CE:A2:A4:0F:83:EB:A5:00:5D
Certificate issuer:       /CN=AAD323D383FD095C028E5F5C220F91747C58895D
Certificate serial:       44FF06E73CFFADB28DF3CB83011587D8A393E84B
Authority key identifier: AA:D3:23:D3:83:FD:09:5C:02:8E:5F:5C:22:0F:91:74:7C:58:89:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33322d3338203d3e20323733363731.roa
Signing time:             Tue 29 Sep 2026 01:26:03 +0000
ROA not before:           Tue 29 Sep 2026 01:21:03 +0000
ROA not after:            Tue 28 Sep 2027 01:26:03 +0000
asID:                     273671
IP address blocks:        2804:8a78::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.crl
                          rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ff:06:e7:3c:ff:ad:b2:8d:f3:cb:83:01:15:87:d8:a3:93:e8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAD323D383FD095C028E5F5C220F91747C58895D
        Validity
            Not Before: Sep 29 01:21:03 2026 GMT
            Not After : Sep 28 01:26:03 2027 GMT
        Subject: CN=9B58DF0DD3D1EE4D529FC6CEA2A40F83EBA5005D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:0b:4d:13:67:78:0c:e7:bc:cf:3f:04:a0:
                    4c:35:a8:e7:e9:d0:54:08:3d:34:25:5c:7f:11:78:
                    64:96:49:62:3c:c8:22:3d:2a:e9:15:db:4a:ed:aa:
                    98:3e:5e:4b:4e:16:29:71:bb:1a:bf:b3:0d:cd:22:
                    dc:0b:24:d9:47:0e:62:0c:5a:c7:58:d5:5d:98:ee:
                    74:5b:91:28:27:51:96:4d:6a:33:90:87:47:10:d6:
                    da:d0:da:74:03:e7:8f:08:76:35:70:8c:9a:08:0b:
                    05:b1:88:3b:b6:1c:47:52:4c:fa:cd:08:e5:78:2d:
                    84:b5:1a:2c:6d:48:ea:9a:06:5a:c4:52:b0:08:6b:
                    16:ae:df:13:23:a9:4f:2d:c4:f3:ec:83:04:1e:de:
                    83:e2:e0:bc:11:3e:d5:ca:35:c3:cb:25:99:ea:60:
                    49:9b:37:68:bb:30:8b:df:87:3b:aa:38:d1:d5:9e:
                    ca:c5:df:14:03:58:b1:18:6e:7d:dc:e2:85:02:58:
                    42:a9:0c:09:e6:17:70:1e:b9:37:22:5b:95:b3:df:
                    55:b4:05:c0:a6:00:ce:bc:66:7e:91:47:eb:64:62:
                    ec:88:57:71:20:24:02:a4:45:74:ea:34:ad:6f:e6:
                    a4:26:06:0a:14:71:b7:b9:2a:93:69:87:24:4b:87:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:DF:0D:D3:D1:EE:4D:52:9F:C6:CE:A2:A4:0F:83:EB:A5:00:5D
            X509v3 Authority Key Identifier:
                keyid:AA:D3:23:D3:83:FD:09:5C:02:8E:5F:5C:22:0F:91:74:7C:58:89:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/AAD323D383FD095C028E5F5C220F91747C58895D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAD323D383FD095C028E5F5C220F91747C58895D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9NkTP9stB8EccRWEG9PySXiRgn4aGhoNXmejcLXgNZu/0/323830343a386137383a3a2f33322d3338203d3e20323733363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a78::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:73:a5:d1:02:7b:e0:22:d7:5b:30:ea:18:ea:4a:13:36:
         33:da:96:99:04:88:fe:06:ee:62:09:80:a6:47:32:4e:4c:1a:
         41:66:97:d9:11:5c:64:6b:88:c4:99:dd:34:28:f7:fd:ca:b2:
         cb:d9:1a:85:10:af:ea:92:e2:fc:e1:e9:a8:f5:1d:21:7b:37:
         ee:33:04:39:67:96:de:ab:79:0a:86:03:4d:e7:40:ef:e1:2f:
         37:e2:ba:29:9b:08:62:41:3e:dc:14:b0:75:ce:fc:85:9b:ae:
         cf:77:9f:6a:18:f6:5d:31:59:c9:8e:af:6e:8e:be:4a:54:e1:
         b6:89:fb:d6:8e:99:c7:80:04:1d:56:4f:c4:db:6c:71:77:bc:
         cb:be:eb:95:42:8d:9b:b9:b7:0a:fa:cb:58:eb:cf:7d:54:80:
         24:8d:c8:81:7a:f2:78:b9:77:64:e1:2b:73:02:39:0a:53:a1:
         41:23:87:ee:66:58:8e:a3:4c:0d:cf:aa:f5:cd:18:16:49:05:
         fc:3c:5b:28:11:be:ac:7b:83:f3:28:42:58:5b:c3:47:6b:85:
         ba:a8:16:81:10:7b:45:69:d0:2d:2e:09:43:36:b9:90:81:d9:
         92:db:86:be:06:6a:c0:14:ff:3c:ce:44:7a:52:ac:73:c0:45:
         45:41:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:04:48 2026 by rpki-client