Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/323830343a343332303a3a2f33322d3332203d3e20323637353530.roa
File:                     323830343a343332303a3a2f33322d3332203d3e20323637353530.roa (raw, json)
Hash identifier:          RxhhPP9h4goWqpfWI52I7iwDXM65y1f7dtPILHLbKM4=
Subject key identifier:   49:8A:A0:9C:40:02:98:62:47:4D:16:40:12:0B:DD:29:3A:FD:E8:99
Certificate issuer:       /CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
Certificate serial:       2C91CB4155D2277F582289AB15328E1AA163389A
Authority key identifier: 83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/323830343a343332303a3a2f33322d3332203d3e20323637353530.roa
Signing time:             Tue 29 Sep 2026 01:39:16 +0000
ROA not before:           Tue 29 Sep 2026 01:34:16 +0000
ROA not after:            Tue 28 Sep 2027 01:39:16 +0000
asID:                     267550
IP address blocks:        2804:4320::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl
                          rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:91:cb:41:55:d2:27:7f:58:22:89:ab:15:32:8e:1a:a1:63:38:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
        Validity
            Not Before: Sep 29 01:34:16 2026 GMT
            Not After : Sep 28 01:39:16 2027 GMT
        Subject: CN=498AA09C40029862474D1640120BDD293AFDE899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c6:38:8f:bd:70:c2:bd:d8:53:8f:bb:04:6c:
                    45:c7:91:67:63:b1:4a:ef:3f:28:63:4d:ff:b2:ac:
                    18:d9:a0:0d:b0:59:f8:88:14:cd:11:74:34:fe:61:
                    d5:f9:3c:51:05:23:db:62:05:da:8b:32:cb:c6:e9:
                    b0:49:69:61:c2:12:04:9e:9c:61:04:76:d9:33:09:
                    72:84:d2:a7:43:41:91:a4:81:c8:4e:d4:16:aa:d5:
                    12:fb:52:d8:fa:bc:a7:01:3e:4e:ef:ef:7f:00:77:
                    b2:9e:51:3e:cd:32:6d:d0:72:f9:3f:53:85:12:42:
                    91:47:24:20:6d:3b:7c:00:f8:c8:4b:14:3c:9e:3d:
                    82:73:44:bf:11:9c:94:1f:f7:cf:71:d5:e6:4a:a1:
                    5d:fd:4d:f7:12:0e:d8:06:61:04:ae:b6:16:b3:91:
                    f6:1f:d9:40:06:27:4d:3e:eb:ad:40:68:14:12:e6:
                    5c:fa:b8:31:c2:ab:c7:79:2f:69:f7:05:08:c9:11:
                    b7:ac:83:11:57:cb:5f:fc:fa:c2:2b:dc:64:a9:9c:
                    42:7c:ab:32:bf:5f:a0:ec:e7:6c:40:bf:7f:83:0a:
                    28:68:60:08:eb:7c:3d:b8:00:a5:c1:1b:59:7d:c3:
                    7c:0f:b7:37:2b:80:75:59:b5:c4:bd:99:ed:7d:57:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8A:A0:9C:40:02:98:62:47:4D:16:40:12:0B:DD:29:3A:FD:E8:99
            X509v3 Authority Key Identifier:
                keyid:83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/323830343a343332303a3a2f33322d3332203d3e20323637353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4320::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:84:90:8f:bc:8d:6c:86:a4:9d:43:9b:b1:06:52:f1:ef:44:
         0e:da:76:a7:b1:fb:b6:47:5d:95:fc:fe:49:90:c8:83:51:c1:
         9c:d3:85:61:47:08:67:11:35:17:b6:a7:49:83:2f:6c:42:e8:
         a6:45:d6:5f:78:2a:e7:ef:f1:da:d1:d5:48:0b:d3:3f:67:a4:
         8a:db:84:e3:c9:81:70:e6:87:dd:2f:29:13:e9:5d:5d:a6:22:
         16:22:2b:15:b8:2b:44:4f:47:57:61:e4:09:30:b3:6f:28:fe:
         ed:7c:c3:82:bf:e8:90:3f:a4:49:4b:b7:48:48:c3:7b:2d:12:
         37:be:04:4f:b0:c1:1a:ef:5f:99:28:03:dc:15:2b:04:f4:b8:
         85:aa:bf:e3:e9:bb:e0:ba:a0:f2:3c:18:f9:2f:4c:8b:11:d0:
         b6:39:06:d4:bd:cf:67:15:4c:e1:ff:40:96:56:b7:45:5a:2f:
         ef:7f:37:81:2c:ae:77:12:bc:b9:bf:32:e0:b7:3c:d1:c1:af:
         b7:d7:8f:1e:aa:a1:ea:19:a0:0f:24:14:72:b6:ed:ef:df:4f:
         73:75:cd:62:c4:ae:6f:71:0f:e4:ba:d3:94:13:e4:23:2d:d8:
         c3:f9:87:1e:48:02:0b:6a:44:00:8b:a9:cc:cc:1e:44:a7:57:
         3b:1f:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:54:31 2026 by rpki-client