Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa
File:                     323830343a343661383a3a2f33322d313238203d3e20323637303033.roa (raw, json)
Hash identifier:          H3RQlG1qQOU4Hor03D1W1S4olEskFe1pM0swmHLNhZQ=
Subject key identifier:   45:FC:9B:6E:70:50:DD:BF:64:96:BF:AC:1F:6C:0A:DC:C7:4E:B5:81
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       52C04A693B59B2D35B0E7C0B9DA0E3E28B70FCF3
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa
Signing time:             Fri 04 Sep 2026 18:38:33 +0000
ROA not before:           Fri 04 Sep 2026 18:33:33 +0000
ROA not after:            Fri 03 Sep 2027 18:38:33 +0000
asID:                     267003
IP address blocks:        2804:46a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 15:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c0:4a:69:3b:59:b2:d3:5b:0e:7c:0b:9d:a0:e3:e2:8b:70:fc:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Sep  4 18:33:33 2026 GMT
            Not After : Sep  3 18:38:33 2027 GMT
        Subject: CN=45FC9B6E7050DDBF6496BFAC1F6C0ADCC74EB581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:d4:8b:b8:64:be:56:ad:f8:42:01:9f:1c:
                    74:60:51:74:16:da:5c:14:85:1f:e9:8d:2d:06:c6:
                    82:c2:95:26:0b:0c:0d:c0:47:04:31:a0:68:bd:6f:
                    1d:33:bc:6c:2b:f6:e5:b7:9b:a9:a0:85:cf:50:f5:
                    fd:fe:98:97:50:24:5b:90:78:e1:e0:62:f6:b9:e0:
                    64:5a:d5:74:80:a1:92:26:1c:e8:6b:1a:65:12:c9:
                    ed:db:f3:60:9f:f3:04:a0:8b:6f:19:0f:3a:91:f4:
                    49:ce:3c:31:ed:8b:52:d0:1c:15:98:97:e0:2b:64:
                    d0:2c:5f:6b:e7:f8:1c:d7:23:45:b5:47:f5:fb:ca:
                    03:c7:65:6c:6f:c5:80:7d:91:45:4f:a7:09:55:5b:
                    b4:c9:78:16:1a:41:4f:68:cb:ba:96:64:a8:d2:fa:
                    9c:ec:7a:f7:64:ae:f2:ff:05:98:65:ce:2b:4d:fb:
                    9b:31:8b:00:5c:30:94:a8:44:c9:9f:e5:c0:c8:f0:
                    a6:3c:ba:f4:66:57:4e:5a:47:9a:bf:6a:b7:ba:93:
                    a6:d8:e4:d9:38:6c:4b:a4:d9:b2:71:ca:60:dc:04:
                    13:ec:7d:d8:7a:e0:e8:1c:04:44:78:21:a7:f5:b8:
                    d6:b7:1d:d5:92:82:e4:80:e2:02:a7:f5:8b:be:39:
                    84:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FC:9B:6E:70:50:DD:BF:64:96:BF:AC:1F:6C:0A:DC:C7:4E:B5:81
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/323830343a343661383a3a2f33322d313238203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:25:54:0c:b6:d1:b4:d2:83:28:3c:14:32:70:95:dc:e2:
         a2:c8:f2:f5:14:ab:b2:89:ad:b8:ee:0f:c5:15:e2:c8:a8:7f:
         29:7f:25:4a:8a:c9:2a:d6:96:cc:9f:2c:32:06:44:cc:56:89:
         66:07:35:a9:6e:23:66:63:71:28:ec:9d:9b:58:01:43:73:a4:
         2c:7b:bf:9d:d4:01:07:9b:9e:ed:10:7c:84:db:29:2e:8d:20:
         bc:aa:89:9c:00:48:36:77:ab:d2:bd:b0:14:66:08:b7:af:8c:
         3a:fc:ce:6e:cc:07:6f:ad:fc:b4:92:8e:cb:75:21:8b:5d:cb:
         63:82:1a:c4:14:91:3d:77:dd:93:d3:0b:67:fa:eb:69:6f:6b:
         05:39:4b:ae:29:e2:c2:89:f7:55:ba:fd:c0:d6:49:4c:50:1a:
         3c:cc:de:07:c3:7a:af:63:2a:02:eb:24:d0:b4:e2:7c:37:9d:
         cf:47:9d:08:4e:5f:43:06:37:12:2c:06:3d:8b:bb:50:7f:e0:
         0f:a6:2f:ae:78:6f:82:20:c5:54:f6:af:b6:86:02:f5:45:57:
         81:72:c7:a2:f2:61:6a:0d:17:ff:0a:5d:2c:07:e2:b2:c2:aa:
         08:9f:00:c2:bc:4c:90:9b:ce:40:e1:fa:2d:73:7e:9f:0c:52:
         98:fb:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:59:42 2026 by rpki-client