Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa
File:                     323830343a376230303a3a2f33322d3438203d3e20323731343035.roa (raw, json)
Hash identifier:          YWdZffaMFdCPK61lWb1xn1yVdUi+4bGGYJ18EkmvHlc=
Subject key identifier:   9B:C7:D5:8C:40:00:AF:E8:09:17:8D:70:20:95:3F:8B:71:B9:62:FD
Certificate issuer:       /CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
Certificate serial:       1E5DC082F0399C63DE7F8D232521054AC576C43F
Authority key identifier: CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa
Signing time:             Mon 14 Sep 2026 17:11:46 +0000
ROA not before:           Mon 14 Sep 2026 17:06:46 +0000
ROA not after:            Mon 13 Sep 2027 17:11:46 +0000
asID:                     271405
IP address blocks:        2804:7b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl
                          rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5d:c0:82:f0:39:9c:63:de:7f:8d:23:25:21:05:4a:c5:76:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Validity
            Not Before: Sep 14 17:06:46 2026 GMT
            Not After : Sep 13 17:11:46 2027 GMT
        Subject: CN=9BC7D58C4000AFE809178D7020953F8B71B962FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:48:f1:3e:5e:3b:92:37:1b:f2:67:56:1e:
                    98:5f:7b:7d:32:92:3b:7a:87:ff:46:5a:0d:12:9d:
                    7b:e6:43:18:14:6c:0b:45:12:f1:ef:1b:ac:da:9f:
                    1c:71:5b:73:95:09:a7:67:78:6d:10:fe:80:0c:94:
                    35:2e:b8:04:af:0c:36:9b:60:3e:6f:e5:b9:11:1b:
                    d2:bf:3d:18:f4:01:d9:c1:5b:0b:18:fb:fa:2c:42:
                    7a:75:cd:ec:05:60:f0:0f:ca:08:41:8e:ec:c4:29:
                    12:5a:a6:77:11:e2:9c:da:f8:c4:94:ec:6d:bd:d9:
                    13:e5:3f:96:b8:19:5b:df:95:8d:42:08:e3:fb:7c:
                    f1:3c:cf:37:8f:19:5b:5b:aa:f5:38:a6:d4:09:ba:
                    18:49:be:22:d9:fd:ac:a3:a2:ab:74:e7:f2:12:ac:
                    4d:29:fa:16:02:8a:53:40:a9:eb:0f:57:5b:95:3b:
                    34:b5:3c:0e:08:34:b2:f5:da:14:f2:d9:15:5a:8e:
                    dc:89:71:ea:46:f2:af:b4:ea:82:e6:43:41:6e:f5:
                    e3:45:de:9c:80:32:83:ce:46:de:1c:a8:67:6e:7d:
                    6a:db:bc:87:83:02:1b:78:44:f8:67:37:f0:69:43:
                    9b:f1:8e:86:d2:11:e4:f2:9e:77:8b:90:7d:99:82:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:D5:8C:40:00:AF:E8:09:17:8D:70:20:95:3F:8B:71:B9:62:FD
            X509v3 Authority Key Identifier:
                keyid:CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/323830343a376230303a3a2f33322d3438203d3e20323731343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:61:73:54:bb:26:e1:48:e7:25:e1:81:a4:b9:41:57:cf:
         a0:82:13:99:0c:4d:04:2a:01:8e:db:bf:35:f3:8b:ab:43:cb:
         1f:0e:d8:bd:83:63:58:5a:18:ee:19:d3:41:21:57:03:d5:ca:
         f4:d4:ef:c9:9e:e2:72:8b:13:3a:8a:50:9b:b9:c8:e8:ac:bc:
         3b:bd:be:99:5e:9f:c4:51:7e:23:27:27:e2:65:06:6b:e3:d5:
         67:de:29:4c:b2:a8:53:b3:de:8a:60:dd:ce:90:f7:7d:86:dd:
         73:83:ed:a9:f8:f2:de:62:cb:28:9c:9c:d1:39:f2:f8:3e:38:
         a4:d3:d4:8c:70:c9:12:7d:ec:70:ae:af:5d:38:0c:20:0d:ae:
         6d:f6:8a:04:5f:c9:02:86:9f:62:ee:9a:04:5f:b7:ef:99:a8:
         0e:65:f8:6f:02:2d:69:02:ea:b7:2a:42:56:9a:82:a2:a5:30:
         fd:d9:61:8f:d3:8c:14:13:52:dd:00:2f:b5:78:a5:b0:4d:5b:
         b2:81:ae:0e:39:55:df:9e:27:6d:86:99:03:9b:55:9c:08:a4:
         f0:a5:2c:73:2b:5b:c9:81:7b:71:ea:ff:a3:7e:8d:58:51:81:
         60:76:d9:a1:c3:76:e0:6f:70:29:d9:b9:cd:6c:ec:15:4f:90:
         66:09:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:50:33 2026 by rpki-client