Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d3438203d3e203238323333.roa
File:                     323830343a3265303a3a2f33322d3438203d3e203238323333.roa (raw, json)
Hash identifier:          Z8xBDRQDWkCQ+hxC82pWMt5MNLAQEDyoLsLzPX6RlmI=
Subject key identifier:   F0:9A:A3:CF:74:E2:39:B5:71:E9:4B:0C:65:FA:D0:0B:07:43:F5:CA
Certificate issuer:       /CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5
Certificate serial:       3C15EC4201F267069451DF15C518A74005BC803B
Authority key identifier: F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d3438203d3e203238323333.roa
Signing time:             Thu 08 Oct 2026 20:21:49 +0000
ROA not before:           Thu 08 Oct 2026 20:16:49 +0000
ROA not after:            Thu 07 Oct 2027 20:21:49 +0000
asID:                     28233
IP address blocks:        2804:2e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl
                          rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 01:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:ec:42:01:f2:67:06:94:51:df:15:c5:18:a7:40:05:bc:80:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59F0917DC2784889616CA6E5F885D25D0E0D1E5
        Validity
            Not Before: Oct  8 20:16:49 2026 GMT
            Not After : Oct  7 20:21:49 2027 GMT
        Subject: CN=F09AA3CF74E239B571E94B0C65FAD00B0743F5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:10:70:fd:04:8a:fa:6a:f0:5c:86:4c:d5:
                    a5:24:7a:5d:f8:64:8a:ad:e0:7a:5a:2c:0d:11:e4:
                    fd:19:9b:1c:00:87:5b:72:07:f4:aa:81:bb:a3:01:
                    51:f9:97:be:c8:15:4d:63:17:f1:3e:b0:82:91:49:
                    43:94:6d:e8:34:5f:b3:2c:3f:2b:62:c0:01:aa:9d:
                    64:98:3a:ff:90:5c:51:6d:62:d4:4c:36:69:35:a6:
                    b2:b9:ff:02:03:6b:96:86:c7:a6:1f:5f:45:bc:52:
                    89:6c:f2:5c:43:aa:b3:38:b1:3c:0f:ca:4d:02:0e:
                    73:b6:08:b4:13:24:6b:81:95:88:b1:35:8c:3a:0f:
                    74:08:f1:3e:14:a4:6b:60:79:5a:55:69:f6:a1:78:
                    f9:b2:cd:00:99:25:ae:d1:4e:72:af:d4:bb:83:9b:
                    92:cf:b7:06:ed:92:07:49:db:31:0d:7f:62:c4:a5:
                    8e:7a:45:bf:9d:6f:a2:ee:4a:b3:92:5f:c4:2f:0d:
                    32:42:02:55:2b:53:15:5e:a1:6a:0c:83:8c:ff:c5:
                    3a:e9:4b:e1:0e:b9:64:1c:74:9a:85:fa:ba:dd:7b:
                    86:9a:71:13:cc:d1:34:24:78:29:71:b4:1e:cf:e9:
                    c7:5c:e8:5e:e6:28:e7:2a:65:48:21:c3:39:f1:f7:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9A:A3:CF:74:E2:39:B5:71:E9:4B:0C:65:FA:D0:0B:07:43:F5:CA
            X509v3 Authority Key Identifier:
                keyid:F5:9F:09:17:DC:27:84:88:96:16:CA:6E:5F:88:5D:25:D0:E0:D1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59F0917DC2784889616CA6E5F885D25D0E0D1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2yp3RJCT9tGTG4xUnTN7BW2R6zMms9dNyGjx5XXsFt/0/323830343a3265303a3a2f33322d3438203d3e203238323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:c2:82:2b:59:5b:11:cc:10:3f:f3:f0:5a:c9:83:bb:a8:e4:
         18:e0:af:bc:95:59:be:cd:00:20:b3:ba:1b:21:f1:97:a8:31:
         64:eb:d3:0d:5b:6d:94:91:03:cd:44:0e:ce:b4:ed:a6:87:65:
         1b:17:41:bf:70:28:2e:1a:4a:82:1b:a3:f6:63:3c:73:91:84:
         b0:87:46:74:38:b9:0a:fd:64:20:87:25:c5:a4:5d:e0:fe:76:
         40:05:fb:96:1c:47:23:2f:49:8f:8c:8e:27:32:44:dc:f1:a7:
         ba:02:8b:d5:97:d2:a0:ea:d0:38:82:9b:be:da:03:56:2e:2c:
         c3:61:a4:46:59:d7:0b:1f:a9:22:0b:ac:78:fc:fc:c0:f0:f5:
         25:d2:c1:42:9d:f3:e1:88:df:c1:c9:c4:f0:3d:f4:cf:7a:e6:
         85:1a:e3:d4:82:55:15:d6:e3:c3:b1:73:4b:b9:10:e3:b6:6c:
         59:bf:c8:6e:95:4c:5a:43:e3:cc:29:7c:8c:da:0b:64:f1:55:
         1a:b8:10:26:ac:52:49:05:d0:0a:f2:10:85:63:9d:61:ea:22:
         63:be:e7:83:a3:dc:4e:81:4a:14:a7:91:89:c3:69:44:74:63:
         b2:9e:5c:5b:ae:b9:6b:11:8a:bf:d9:97:78:0c:f1:e1:c9:09:
         84:b2:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:38:32 2026 by rpki-client