Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          NSlQihNsPFKULIYmNtxa25CMw3QmWharapnVCy995Nw=
Subject key identifier:   95:BD:53:7C:0F:77:0A:BE:9E:2A:B2:7B:8B:32:78:30:E9:16:B9:0F
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       0D3F2405F95878C7F7E45BDDAFC664BB746E91D0
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        2804:3fd8:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3f:24:05:f9:58:78:c7:f7:e4:5b:dd:af:c6:64:bb:74:6e:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=95BD537C0F770ABE9E2AB27B8B327830E916B90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:07:84:9e:17:c9:e6:0f:3d:b5:98:2f:1f:
                    a2:05:9a:c5:d0:82:27:28:cd:41:23:b8:c9:15:93:
                    7c:50:8d:80:d5:06:ff:ec:5a:59:2c:1d:ff:1f:dd:
                    47:a2:61:e6:6e:c1:c3:5e:f0:09:78:4a:07:f5:40:
                    03:b7:b7:fe:ea:1e:5e:2b:3d:97:c3:0e:d1:0e:c3:
                    11:38:6d:95:fc:10:39:53:85:11:f1:88:56:08:8f:
                    aa:8d:f1:26:08:78:b3:e7:c0:b6:bb:22:92:63:3b:
                    15:28:83:3f:10:88:98:57:d6:1a:d9:56:c9:b3:0b:
                    02:f5:e0:45:3f:c5:86:98:3d:bf:f1:5f:b8:39:dc:
                    9f:87:f6:32:8c:81:0f:f0:5a:40:86:60:ac:3f:0b:
                    04:84:3d:4a:b5:45:20:b1:8a:34:7c:0f:52:3b:52:
                    36:34:f0:cd:30:ff:6b:11:eb:01:77:46:91:f7:40:
                    e5:98:bf:81:91:02:72:8a:b2:ca:da:a1:12:49:79:
                    8b:49:a2:71:b2:8b:e9:f9:3b:ad:ea:d4:36:36:ae:
                    ff:68:ff:70:9f:72:36:50:cc:88:56:98:a2:a7:8c:
                    de:35:b6:c2:16:cd:cd:af:28:c4:82:8e:34:bf:9a:
                    7c:9a:7f:76:fa:89:f5:0b:06:9c:34:0c:20:91:61:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BD:53:7C:0F:77:0A:BE:9E:2A:B2:7B:8B:32:78:30:E9:16:B9:0F
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:e6:b5:1b:ab:28:f5:2e:32:0d:84:aa:2a:c9:8d:39:d6:8b:
         dd:56:95:14:a1:d2:73:b7:2d:84:59:7b:26:b6:44:14:ad:5c:
         d7:f8:bf:48:5f:37:84:cd:68:2b:f4:a9:4c:9c:a5:23:4f:45:
         42:77:0b:78:bb:f1:d5:ca:e8:de:49:d1:f4:5b:0c:75:07:a5:
         05:f6:09:7c:10:a5:bd:ff:28:cc:df:94:c2:f2:14:25:bf:0a:
         d0:98:c0:69:5f:3e:01:ad:f4:10:04:2e:ff:76:a6:90:24:e9:
         71:dd:88:1c:85:40:19:3a:5b:46:0d:7e:13:23:99:16:83:59:
         59:51:30:d2:e7:79:b6:11:cf:40:01:cd:39:3a:a1:ad:7d:10:
         34:b2:37:f4:61:35:a0:3d:0a:38:68:4d:30:e8:10:9f:62:ab:
         74:8f:11:7f:4b:b0:b7:3e:a1:43:8e:fe:94:72:82:61:67:56:
         3b:63:c8:f5:21:68:40:1a:39:11:7f:69:9e:ea:3a:31:18:3f:
         81:ec:d5:f2:07:79:96:92:b9:7e:c3:6c:1d:1f:b8:46:86:b0:
         5c:f8:bd:a3:07:6c:33:b5:90:68:20:fb:3b:6c:27:40:ca:02:
         c3:32:e3:dd:7f:f5:6a:2b:5e:37:2b:22:50:44:54:60:1e:88:
         ea:f2:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:05 2026 by rpki-client