Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a3a2f33322d3333203d3e20323635333337.roa
File:                     323830343a326534633a3a2f33322d3333203d3e20323635333337.roa (raw, json)
Hash identifier:          g0aTMy5nhRpa0Rvcq8wsWaOnjnClIAzBVuykyGpy6H0=
Subject key identifier:   28:27:8D:BF:75:F4:A1:D1:51:9F:BF:46:B8:F7:CC:CB:7B:F1:18:B1
Certificate issuer:       /CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
Certificate serial:       3E97F1F61B9962D91211DEA6F7D78370354EF51C
Authority key identifier: C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a3a2f33322d3333203d3e20323635333337.roa
Signing time:             Mon 05 Oct 2026 17:39:01 +0000
ROA not before:           Mon 05 Oct 2026 17:34:01 +0000
ROA not after:            Mon 04 Oct 2027 17:39:01 +0000
asID:                     265337
IP address blocks:        2804:2e4c::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl
                          rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:97:f1:f6:1b:99:62:d9:12:11:de:a6:f7:d7:83:70:35:4e:f5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
        Validity
            Not Before: Oct  5 17:34:01 2026 GMT
            Not After : Oct  4 17:39:01 2027 GMT
        Subject: CN=28278DBF75F4A1D1519FBF46B8F7CCCB7BF118B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:a8:73:96:f3:a7:ee:d0:99:3c:65:f5:69:
                    2a:b8:be:33:99:4b:1e:32:ad:a0:43:95:2b:54:21:
                    09:6b:83:c0:5f:87:d8:6b:ab:79:f3:ee:e0:d7:96:
                    4e:87:16:aa:a9:2d:22:0a:5f:3a:c9:ae:9a:df:72:
                    a1:92:07:93:2f:ee:8d:81:61:63:85:fa:4a:a1:26:
                    bf:c0:86:63:c8:79:2c:fb:4d:42:f7:9a:35:24:7c:
                    ee:91:14:9c:3e:15:98:d5:55:77:11:0f:53:a4:c5:
                    e7:2e:24:9d:d3:7c:17:d8:85:33:b0:76:23:af:f7:
                    93:32:1c:99:75:97:e2:f4:f3:ae:6c:2f:e7:dc:d4:
                    6b:54:24:13:85:19:35:b4:85:b1:7b:84:bb:b4:50:
                    76:ae:7c:14:05:1a:50:d5:71:28:da:88:c6:4d:44:
                    d5:93:62:d4:b7:74:c4:14:c6:9e:89:97:c2:15:d6:
                    28:a9:7c:ae:c8:a2:f3:fc:81:ba:5e:40:7f:b8:85:
                    4b:86:2a:ae:a8:fa:5a:5b:35:40:00:6c:c0:df:25:
                    ee:4b:9f:e7:d3:ca:04:5e:93:45:8a:e9:8b:0c:85:
                    18:45:08:cd:94:fc:cd:e0:a9:44:bd:5c:f6:0e:e2:
                    63:80:64:ed:b2:41:ef:19:19:c6:2d:9e:67:a7:61:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:27:8D:BF:75:F4:A1:D1:51:9F:BF:46:B8:F7:CC:CB:7B:F1:18:B1
            X509v3 Authority Key Identifier:
                keyid:C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/323830343a326534633a3a2f33322d3333203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:89:ef:24:b2:2c:0a:a6:d8:05:b9:9f:13:d3:49:13:d0:
         d8:92:85:c0:b9:f1:ac:a7:20:62:fe:68:b5:3d:1a:93:ac:68:
         7a:93:3d:9e:aa:e6:fd:75:2c:ba:87:e0:f0:fb:d9:ad:a7:f1:
         8b:ba:f0:7d:d6:60:ce:7a:79:df:5e:f7:4e:20:2e:d1:5b:5a:
         ab:c6:9a:7a:41:bc:8e:62:8c:86:3d:b1:69:bd:e5:25:22:ea:
         cc:44:33:8d:76:ff:a5:c2:c0:c0:36:4d:a1:35:eb:f9:78:be:
         98:77:4a:18:98:83:39:f4:2c:94:44:cb:d9:35:36:c3:bc:b2:
         7e:3e:90:2d:6f:70:1a:f9:6b:3c:e0:09:f8:6c:72:86:13:ce:
         35:8f:da:3b:93:7c:50:7c:e6:f5:49:6d:f2:47:ce:47:39:60:
         d5:b8:91:86:ae:c7:5b:eb:9b:03:8f:97:b1:12:91:70:b8:88:
         0d:3a:8f:6b:21:7b:a7:c6:be:51:a9:80:a1:f9:d1:14:3f:96:
         b6:2d:83:aa:84:a2:5e:5b:41:47:59:9f:34:c7:a1:4a:da:ed:
         bd:bf:49:96:38:35:d1:fa:4a:9f:9a:76:70:61:f7:40:ae:65:
         b2:8c:d8:42:ee:bb:57:30:34:e1:9d:88:80:b5:65:d3:3a:bb:
         aa:28:66:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:04:29 2026 by rpki-client