Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa
File:                     323830343a346334343a3a2f33342d3334203d3e20323637333630.roa (raw, json)
Hash identifier:          jLppCgGM5s0d5P/NUcKU2+I8pWWf9okEPQeaWE3Iajo=
Subject key identifier:   F0:69:A6:25:C9:15:F8:E2:93:81:D5:1D:57:0A:77:82:C6:85:0C:1D
Certificate issuer:       /CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
Certificate serial:       1872742EA365C9C49372C3429F1749A4D603AF56
Authority key identifier: 29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa
Signing time:             Tue 08 Sep 2026 20:19:51 +0000
ROA not before:           Tue 08 Sep 2026 20:14:51 +0000
ROA not after:            Tue 07 Sep 2027 20:19:51 +0000
asID:                     267360
IP address blocks:        2804:4c44::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl
                          rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 11:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:72:74:2e:a3:65:c9:c4:93:72:c3:42:9f:17:49:a4:d6:03:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29458830F065A1888B513BA8F48CF0ACB0C499EA
        Validity
            Not Before: Sep  8 20:14:51 2026 GMT
            Not After : Sep  7 20:19:51 2027 GMT
        Subject: CN=F069A625C915F8E29381D51D570A7782C6850C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:04:ae:f7:34:1d:ea:2d:24:38:24:47:6b:
                    f9:74:85:7b:53:75:b4:22:1b:f4:86:84:d4:4f:6f:
                    a1:73:19:99:c2:93:1d:17:be:4b:fc:4d:39:35:a8:
                    69:8b:a8:10:11:4c:fc:03:4c:53:57:bd:62:75:42:
                    95:55:46:0d:5d:8e:b3:d6:33:56:f7:03:0b:cd:97:
                    65:e0:3c:58:b7:42:71:51:c6:24:1b:73:0d:70:23:
                    0f:46:a1:67:5d:00:8f:57:a4:1e:1f:82:a6:f1:62:
                    b6:aa:ef:f4:02:39:65:36:73:d0:83:f9:69:45:44:
                    ea:5d:12:46:cf:79:71:08:05:35:f2:80:bc:bd:0c:
                    97:72:e7:25:c0:ff:13:c6:5d:72:51:f2:9f:6a:90:
                    1d:c2:32:61:5f:81:2e:8b:97:44:2b:15:44:f8:76:
                    90:0a:6f:f3:d0:ae:24:10:6c:a3:51:0c:6d:65:f5:
                    90:33:76:39:22:3b:2c:3b:50:2b:aa:4c:fc:fa:7e:
                    7b:8c:bc:91:81:dd:71:63:0f:64:75:95:1c:37:dd:
                    d4:b8:7f:be:dc:7d:86:74:5d:99:68:fd:5e:45:57:
                    96:c9:5c:79:3d:a4:2d:ae:d3:15:c3:e0:e3:49:91:
                    00:45:4d:52:85:39:2a:cd:10:47:f3:b5:bf:41:ff:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:A6:25:C9:15:F8:E2:93:81:D5:1D:57:0A:77:82:C6:85:0C:1D
            X509v3 Authority Key Identifier:
                keyid:29:45:88:30:F0:65:A1:88:8B:51:3B:A8:F4:8C:F0:AC:B0:C4:99:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/29458830F065A1888B513BA8F48CF0ACB0C499EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29458830F065A1888B513BA8F48CF0ACB0C499EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gh7PneckGeccXo7X3fewHLnb2TbQbFP8o9TtB8ku2BiB/0/323830343a346334343a3a2f33342d3334203d3e20323637333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c44::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:4a:67:2e:ee:4f:3e:94:0b:73:77:0d:a6:8b:d2:81:4d:
         dd:9b:eb:af:23:02:7d:88:30:8e:64:b0:68:44:11:c4:80:59:
         90:c1:1d:7b:c3:0c:b3:1d:76:0c:48:17:7c:fd:6a:32:d1:79:
         6b:2c:cd:cb:53:d8:75:d0:75:47:15:53:3c:ab:9a:50:e7:c7:
         67:18:77:6f:18:62:77:91:f4:1a:1f:07:9e:89:59:9b:cb:40:
         c4:8e:4d:72:06:23:dc:2b:ec:9b:55:93:98:87:6e:58:c5:95:
         08:e4:7a:ad:7f:90:19:71:d7:86:72:1c:50:cc:10:11:bc:2b:
         8a:3f:95:66:94:35:e1:35:fa:20:42:4c:a4:f0:69:85:7c:9d:
         57:4b:82:8c:44:2c:ad:5f:53:dc:7a:22:4a:bb:25:d1:ce:ec:
         7d:58:9f:c5:ab:11:b1:0c:51:f4:3d:f5:5c:61:0c:d7:1d:90:
         ea:b3:f4:38:fc:f9:71:c6:cb:eb:d2:50:0c:95:3e:7a:2d:71:
         bb:0c:b8:2c:e3:60:45:37:0b:d1:c5:71:69:26:2f:fb:cb:eb:
         3d:90:62:ec:29:d1:f4:ef:3f:29:c0:ff:a7:ca:9f:84:51:ef:
         d8:f5:4b:81:8e:34:b0:a5:0e:9f:26:53:6c:12:0a:9e:ac:7d:
         bb:79:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:58:38 2026 by rpki-client