Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa
File:                     323830343a376536383a3a2f33322d3438203d3e20323731363232.roa (raw, json)
Hash identifier:          0C6zL5dvXuoRT2KYwnmBDXh3IKJHOwn16hYb6+SZER8=
Subject key identifier:   D3:B3:C1:89:02:D2:C2:F7:02:3E:2A:C6:68:82:A0:01:93:1E:EF:8B
Certificate issuer:       /CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
Certificate serial:       11150C3DEE2255C2533B9D097BFC87F23E039682
Authority key identifier: A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa
Signing time:             Mon 07 Sep 2026 00:04:24 +0000
ROA not before:           Sun 06 Sep 2026 23:59:24 +0000
ROA not after:            Mon 06 Sep 2027 00:04:24 +0000
asID:                     271622
IP address blocks:        2804:7e68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 10:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:15:0c:3d:ee:22:55:c2:53:3b:9d:09:7b:fc:87:f2:3e:03:96:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3
        Validity
            Not Before: Sep  6 23:59:24 2026 GMT
            Not After : Sep  6 00:04:24 2027 GMT
        Subject: CN=D3B3C18902D2C2F7023E2AC66882A001931EEF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:51:14:79:cf:46:29:3b:8b:6f:6a:78:20:
                    91:88:9a:d4:77:bb:ee:25:94:0e:fe:72:89:05:a7:
                    3a:05:63:ed:8c:48:99:6e:34:9d:4e:e3:7b:23:b3:
                    07:75:d0:9b:70:d6:ad:78:ff:11:7e:6e:b9:a2:18:
                    48:09:74:c5:bf:98:fa:b0:f9:16:28:8f:35:b3:eb:
                    29:dd:dd:29:fd:0f:d1:37:de:dc:07:30:15:96:5e:
                    00:cd:c8:c4:d8:2a:4a:4e:ba:69:c6:44:2e:33:e3:
                    cc:42:6a:24:e6:02:79:05:84:d9:b7:73:ac:35:08:
                    de:52:2c:63:3d:dc:c7:4b:95:9d:2d:be:6f:03:d4:
                    21:88:b1:a5:e3:e1:c9:ab:a4:83:41:9b:58:de:dd:
                    a1:5a:3b:59:d1:a8:d9:02:65:f3:2d:16:32:65:a9:
                    52:0f:d8:ba:f1:db:9c:43:57:8f:45:de:de:96:6c:
                    2f:37:6a:ea:e2:70:54:39:0e:00:fd:7c:a9:56:31:
                    d9:f3:cf:c6:7e:95:8d:50:15:de:79:68:80:69:a0:
                    b3:53:8b:8f:5c:e5:40:56:46:e1:1d:e2:c8:10:12:
                    4c:96:d2:5e:7c:a1:20:18:82:9a:5f:72:f7:06:96:
                    01:b2:d9:33:60:e3:bf:1f:f4:85:f9:c2:ae:e5:96:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:C1:89:02:D2:C2:F7:02:3E:2A:C6:68:82:A0:01:93:1E:EF:8B
            X509v3 Authority Key Identifier:
                keyid:A0:A8:9B:7E:46:B5:F2:C1:2B:A2:BC:C0:25:4B:1C:02:61:09:A4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0A89B7E46B5F2C12BA2BCC0254B1C026109A4F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:37:b5:af:5c:5c:58:72:25:7c:65:df:1d:a8:c1:de:07:
         a4:db:ea:cc:df:e7:3e:53:92:48:40:db:8e:7c:d8:be:9a:9d:
         01:01:ed:40:f8:70:87:5b:01:fc:b0:3f:31:05:b3:2a:30:e9:
         35:10:f6:cf:db:f7:6b:39:e7:af:b0:65:bb:0a:00:12:2b:10:
         71:26:fc:96:82:6d:14:02:ec:aa:f7:1b:36:f3:0c:1c:8c:ba:
         a2:3a:bc:c3:3f:73:5a:3b:d9:fd:b7:d3:e9:1f:ac:a2:fe:ae:
         f7:af:3c:ae:c2:d1:c9:fb:3e:a1:03:18:42:9b:d9:38:5a:39:
         b5:c9:93:5f:56:23:7c:c5:23:00:0c:c0:7b:f2:80:ea:28:b6:
         e1:7c:2e:05:5b:ae:c1:da:83:3f:57:7a:60:0a:73:e6:c9:72:
         76:55:51:9a:a8:e0:1a:6f:41:48:f4:83:73:52:b9:08:0b:bb:
         c6:ef:f1:da:b4:80:c8:ab:a7:56:0d:4e:ea:a5:f9:8f:ee:56:
         4f:a6:13:ad:a9:f6:bc:b6:7e:44:b2:78:eb:f4:54:7e:6f:46:
         0e:ba:89:d8:54:f9:f5:43:b7:9d:3c:df:e6:e1:34:42:90:5b:
         fe:25:22:2b:7e:f3:d0:bb:4f:0d:97:62:a6:d6:ce:22:0a:61:
         0f:3a:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:21:31 2026 by rpki-client