Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a653030303a3a2f33352d3335203d3e20323635343834.roa
File:                     323830343a333464383a653030303a3a2f33352d3335203d3e20323635343834.roa (raw, json)
Hash identifier:          /cdAHWH6cYdnFtMxk36F6/gUD+fQm+HqYfrSnuODEbo=
Subject key identifier:   F4:35:38:50:C5:8D:66:B8:7B:16:CA:D2:D7:47:27:10:1A:47:2A:D1
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       7F2358E3AF3843E4ED34481A9E14F54E6D527350
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a653030303a3a2f33352d3335203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:31 +0000
ROA not before:           Thu 08 Oct 2026 14:45:31 +0000
ROA not after:            Thu 07 Oct 2027 14:50:31 +0000
asID:                     265484
IP address blocks:        2804:34d8:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:23:58:e3:af:38:43:e4:ed:34:48:1a:9e:14:f5:4e:6d:52:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:31 2026 GMT
            Not After : Oct  7 14:50:31 2027 GMT
        Subject: CN=F4353850C58D66B87B16CAD2D74727101A472AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:84:98:a4:c3:f1:31:57:a8:c5:de:67:f8:
                    46:cb:2e:43:37:1a:53:b0:66:70:92:c1:58:70:db:
                    42:db:3b:92:ae:64:c2:3d:0c:07:c2:eb:6d:92:19:
                    fd:b3:a6:ba:37:75:cc:10:cb:f9:b8:cd:49:40:34:
                    91:94:17:eb:79:84:3a:be:78:5f:8c:43:57:7a:04:
                    0d:ff:c2:b5:07:84:85:3b:15:7f:68:6c:3a:4d:ab:
                    4d:bf:cb:16:ec:5a:6c:c0:66:33:3a:ae:23:49:28:
                    51:8e:76:4a:07:43:cd:ff:67:43:75:7f:2d:5c:0c:
                    13:e2:a0:d6:ca:e8:e8:16:0e:fe:bc:31:80:88:c4:
                    aa:06:cb:b5:ed:d1:b7:a6:34:1b:96:51:ef:41:ce:
                    84:2b:95:1c:2c:a8:93:ea:e4:bf:1e:a3:2f:42:48:
                    1f:9c:ae:2d:79:c8:a8:04:ad:75:eb:78:8b:3d:a3:
                    72:4e:31:61:8e:ee:7a:56:87:79:24:29:6a:70:37:
                    ae:68:b0:65:66:36:c7:18:3a:94:86:ea:60:17:67:
                    4c:ef:e9:85:99:53:04:7f:61:a9:9a:73:6f:96:93:
                    2d:1e:3b:fc:1d:b8:7c:f7:30:1e:50:b0:6f:3b:d5:
                    fc:bc:07:96:9a:38:a6:36:f9:66:26:07:58:a3:08:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:38:50:C5:8D:66:B8:7B:16:CA:D2:D7:47:27:10:1A:47:2A:D1
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a653030303a3a2f33352d3335203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:18:1c:b1:c1:66:dc:59:ca:8c:70:92:35:59:66:6f:25:
         92:86:26:f7:f1:a3:59:2a:aa:ac:92:be:a2:2c:2a:48:5e:af:
         a8:cf:50:26:93:57:ee:6b:22:f7:6a:87:91:06:30:03:5d:58:
         cc:71:8e:30:5c:13:d4:41:ea:c7:33:33:bd:6c:06:0e:81:95:
         b0:b1:d4:85:7e:0f:cb:c6:37:39:8f:9d:4c:6f:91:d9:cb:25:
         b8:57:f6:a2:71:8d:42:63:e0:02:68:78:ca:71:40:a6:63:4c:
         a8:f0:29:25:98:1e:dd:e3:6e:d7:04:6b:fd:db:16:23:69:17:
         3f:9a:a1:f0:82:1a:47:75:d2:be:da:95:69:45:02:3d:96:2f:
         d1:40:bb:7b:fa:f7:13:19:e2:e2:b9:1f:e5:00:37:41:3a:0a:
         39:f8:bd:63:ae:71:dd:a4:f8:34:3b:53:0f:85:e3:1d:82:57:
         77:02:d1:f6:c8:8b:cd:2a:b2:cb:c7:b6:d7:df:ef:59:a6:e0:
         c2:60:bb:bc:8b:d7:08:3a:7b:e2:50:31:d0:34:62:ba:88:02:
         76:fd:0e:b7:03:e9:e7:c8:d5:48:6f:80:a0:e2:a1:f9:3b:76:
         d7:19:2b:95:40:9c:f0:42:01:03:fb:eb:22:7e:a7:f9:93:fa:
         eb:7a:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:34:29 2026 by rpki-client