Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
File:                     323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa (raw, json)
Hash identifier:          RIhwOzRWjqjwCdW2gAcb3vDuOU0lXL3Mn4c1msZoWP8=
Subject key identifier:   98:DC:0E:C4:F1:FD:EB:B3:BB:B3:97:01:5F:B5:6E:7F:D0:64:28:8B
Certificate issuer:       /CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
Certificate serial:       75A69BF63C8B077510472F41366D53E1208FFE4E
Authority key identifier: 9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa
Signing time:             Wed 02 Sep 2026 18:19:19 +0000
ROA not before:           Wed 02 Sep 2026 18:14:19 +0000
ROA not after:            Wed 01 Sep 2027 18:19:19 +0000
asID:                     267325
IP address blocks:        2804:4bb4:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl
                          rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 06:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a6:9b:f6:3c:8b:07:75:10:47:2f:41:36:6d:53:e1:20:8f:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3
        Validity
            Not Before: Sep  2 18:14:19 2026 GMT
            Not After : Sep  1 18:19:19 2027 GMT
        Subject: CN=98DC0EC4F1FDEBB3BBB397015FB56E7FD064288B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:85:86:5d:44:64:70:d1:fa:bf:2f:d1:16:dc:
                    87:c9:e6:c6:c1:de:99:59:c3:d9:2c:7c:a6:a4:3b:
                    0c:cb:be:8c:36:08:67:d0:8a:21:3f:f9:a5:7c:ea:
                    5e:5e:22:1a:f9:06:f1:69:a5:fe:53:18:73:15:78:
                    6c:64:5a:56:0a:99:2a:32:f3:7c:74:97:3e:cf:06:
                    11:54:a5:d9:ff:96:55:c0:9a:16:1f:82:f2:af:77:
                    00:98:3a:f6:90:a5:40:0c:43:b4:fb:76:c6:4c:d3:
                    74:4e:d9:b7:38:9b:87:cc:16:72:23:37:63:33:88:
                    15:7b:4a:27:b6:64:43:f6:0f:52:48:2d:62:8c:9c:
                    fc:9c:8b:ce:d0:38:6f:17:30:64:87:df:01:90:fc:
                    1e:49:1a:c7:1c:6c:01:e9:c8:de:72:39:70:d8:6f:
                    ee:7a:34:20:55:18:13:77:c3:7a:63:17:4b:a1:c5:
                    e0:99:46:54:32:64:88:e2:cd:cb:4e:aa:4b:73:22:
                    cd:dd:f8:d1:ef:1f:20:33:03:4d:3e:a0:c3:cc:32:
                    08:62:a7:52:af:51:b6:a9:76:31:91:e2:79:ce:fb:
                    b2:83:ff:10:cc:17:dc:fa:2c:dd:86:9d:68:fb:be:
                    01:82:c9:c5:51:bd:2e:3a:9e:b1:61:c8:0e:7b:45:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DC:0E:C4:F1:FD:EB:B3:BB:B3:97:01:5F:B5:6E:7F:D0:64:28:8B
            X509v3 Authority Key Identifier:
                keyid:9E:88:DF:18:4B:0E:2B:77:8F:C8:BF:E4:32:BB:01:BD:CF:AF:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E88DF184B0E2B778FC8BFE432BB01BDCFAFFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a313030303a3a2f33362d3336203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:50:23:9a:7d:24:7e:98:25:b9:4a:ad:ba:61:ee:bf:03:
         0b:98:5e:07:80:96:a3:de:e2:f8:bf:09:26:17:e3:60:bf:c0:
         fa:1d:29:15:d6:1c:38:e6:4d:47:c6:10:4e:3d:c2:e8:a7:df:
         55:f9:ea:68:f0:02:05:2f:70:a6:c5:ec:1c:b3:be:34:f1:c5:
         50:2e:a1:7d:2d:be:30:11:21:d7:3a:4f:3e:4b:e0:a2:8f:1a:
         df:f0:cc:3b:65:b5:57:e5:72:e4:fa:8c:07:40:85:bb:2f:c2:
         1d:43:64:42:4b:19:ed:db:e1:d5:02:32:f5:e9:01:4d:80:39:
         6f:68:d6:d8:36:4d:0d:60:bb:72:e7:69:31:fb:ae:7e:13:e3:
         48:61:f7:71:47:0b:89:97:07:e4:bd:f4:99:d6:7f:80:d5:d3:
         d3:62:18:b8:20:8d:ae:dd:84:25:ec:b3:a9:d2:fa:db:2e:7a:
         b2:8a:db:05:23:78:25:81:3e:5f:08:c8:79:50:3d:0f:7c:a9:
         8e:cc:1f:10:95:10:f4:10:87:e0:af:97:87:10:5d:55:4b:a3:
         8b:f6:d7:0b:55:4c:c9:fb:bb:7f:91:4d:6f:91:45:68:52:4e:
         7b:05:c2:43:ff:f8:e1:1c:6a:91:5d:13:6f:d9:df:b4:7d:b2:
         64:fd:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:12:13 2026 by rpki-client