Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/323830343a393866633a3a2f33322d313238203d3e20323735373439.roa
File:                     323830343a393866633a3a2f33322d313238203d3e20323735373439.roa (raw, json)
Hash identifier:          PYcmXVCspVLKR5UWogN+OrnRlgzrsLzjdHJeLPOBGVQ=
Subject key identifier:   3D:FB:EA:7E:B1:93:8F:49:93:91:CB:AC:B4:22:87:3C:AE:BC:19:77
Certificate issuer:       /CN=ACED4C952116C77EA1B35CF2A95C37621EB66DC6
Certificate serial:       0A873AEB1DDBF0F86C04A61D1605FF6B94B4C7D4
Authority key identifier: AC:ED:4C:95:21:16:C7:7E:A1:B3:5C:F2:A9:5C:37:62:1E:B6:6D:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/323830343a393866633a3a2f33322d313238203d3e20323735373439.roa
Signing time:             Mon 14 Sep 2026 13:44:04 +0000
ROA not before:           Mon 14 Sep 2026 13:39:04 +0000
ROA not after:            Mon 13 Sep 2027 13:44:04 +0000
asID:                     275749
IP address blocks:        2804:98fc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.crl
                          rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:3a:eb:1d:db:f0:f8:6c:04:a6:1d:16:05:ff:6b:94:b4:c7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED4C952116C77EA1B35CF2A95C37621EB66DC6
        Validity
            Not Before: Sep 14 13:39:04 2026 GMT
            Not After : Sep 13 13:44:04 2027 GMT
        Subject: CN=3DFBEA7EB1938F499391CBACB422873CAEBC1977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:7c:e6:ac:25:84:6c:f9:09:33:29:c5:fa:
                    00:08:24:ef:3f:90:30:50:58:49:54:d8:af:f3:4a:
                    a0:f5:70:c7:e0:cf:ff:2c:8f:a7:75:ac:17:63:75:
                    fd:ff:cf:06:ac:73:08:88:aa:f8:f5:cd:93:7b:0f:
                    49:e9:c4:dc:e7:be:fe:81:51:0f:ed:8b:61:41:cd:
                    ce:dc:d6:31:fa:56:03:53:79:9d:8e:b1:6e:6a:46:
                    63:aa:44:3f:db:ec:6f:71:aa:56:b0:7d:5d:78:2f:
                    17:b2:8b:63:63:ab:8a:3a:76:c6:58:40:53:aa:b1:
                    da:e5:b1:6f:2f:50:53:00:10:75:ad:93:7b:63:95:
                    80:bf:e7:62:2e:85:5e:8a:50:22:6c:ac:a6:1e:d7:
                    7c:1e:fc:7a:7f:13:5e:3f:fe:82:0e:91:bb:7b:01:
                    bd:17:27:29:ae:27:d9:90:41:18:19:80:88:e6:7f:
                    7b:7b:11:85:b9:e1:a5:ff:51:55:62:f5:ef:bf:fa:
                    36:97:01:81:5e:ed:e3:fa:b3:4e:76:a3:db:ab:a2:
                    72:06:bc:e5:9b:cb:9f:2f:a6:70:ac:35:5c:33:53:
                    11:fd:b7:10:1c:16:32:a2:6b:dd:dc:5c:4c:53:6a:
                    70:cc:55:eb:df:ed:4b:23:fa:76:fd:04:07:52:fb:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FB:EA:7E:B1:93:8F:49:93:91:CB:AC:B4:22:87:3C:AE:BC:19:77
            X509v3 Authority Key Identifier:
                keyid:AC:ED:4C:95:21:16:C7:7E:A1:B3:5C:F2:A9:5C:37:62:1E:B6:6D:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACED4C952116C77EA1B35CF2A95C37621EB66DC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WUuY7JDLfMNAERvmAhZoW7cH8tacEFu7BP3FRV3JxVR/0/323830343a393866633a3a2f33322d313238203d3e20323735373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:98fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:90:a3:84:be:aa:c1:1f:0c:0d:15:00:5a:a9:92:82:62:28:
         c6:c9:b6:33:73:4f:59:00:4c:f0:78:0c:53:13:08:cf:d3:cc:
         2a:0b:45:ca:3b:4c:de:dd:d7:7a:19:92:09:7f:8f:34:9e:89:
         89:14:8c:5a:a9:55:ce:5a:d7:79:84:70:c5:7e:19:7f:26:b0:
         77:f1:c3:38:81:18:91:42:04:3e:01:2d:4f:f0:27:4d:db:b6:
         aa:de:45:5d:ee:19:76:32:cb:bf:ed:81:db:94:c7:3a:26:07:
         17:76:3e:ec:fb:fe:bc:a3:29:a5:59:84:09:d3:14:d9:35:d0:
         89:3c:86:57:eb:99:1b:ed:8a:c4:44:02:55:c7:0f:3c:c1:cf:
         ac:87:0f:e4:6f:13:cc:17:05:57:1b:40:7f:fb:75:71:b4:e0:
         ba:29:a5:cf:16:48:a3:29:f0:a8:6f:0c:35:be:ec:e1:32:ac:
         2b:ad:ea:e7:3b:f7:c9:64:e2:8f:18:2e:c3:4b:02:7a:09:5f:
         d9:da:9a:b6:42:94:86:62:3c:fb:66:90:d4:e9:2b:2e:fe:24:
         8c:99:de:2f:a4:c5:20:3d:48:c0:75:45:a3:1c:80:43:70:42:
         b5:43:2c:c1:62:d6:a9:a8:97:5b:72:a0:d5:ea:26:a5:92:2c:
         e6:a4:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:26:18 2026 by rpki-client