Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a313030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a313030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          lJImAG2uHZhIZJDuhy3qynty/9dJWS+SwyEpZFlPAI4=
Subject key identifier:   5F:8B:A7:08:F9:B3:3D:DC:9D:69:BF:09:C4:FB:0E:DB:4A:FB:45:6B
Certificate issuer:       /CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
Certificate serial:       268393D98A22CEC483D60090DA157C0AA3815A76
Authority key identifier: 39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a313030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Tue 25 Aug 2026 11:25:56 +0000
ROA not before:           Tue 25 Aug 2026 11:20:56 +0000
ROA not after:            Tue 24 Aug 2027 11:25:56 +0000
asID:                     272418
IP address blocks:        2804:80e0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl
                          rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:83:93:d9:8a:22:ce:c4:83:d6:00:90:da:15:7c:0a:a3:81:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
        Validity
            Not Before: Aug 25 11:20:56 2026 GMT
            Not After : Aug 24 11:25:56 2027 GMT
        Subject: CN=5F8BA708F9B33DDC9D69BF09C4FB0EDB4AFB456B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:73:45:ec:5f:ab:a0:46:c2:fe:2a:a9:de:ec:
                    22:c5:08:bb:e8:9b:c6:5a:ab:bf:ea:40:a0:cd:d2:
                    26:3a:ab:56:61:f6:15:c7:e9:17:c8:bc:05:e6:20:
                    ac:2a:f1:dd:06:15:d1:7f:8d:3f:bb:c6:f1:ca:53:
                    8c:4a:52:ef:b4:a6:26:14:fa:eb:26:ff:9e:24:81:
                    f5:89:25:f5:9f:4b:16:1c:c1:d9:ea:0c:61:b7:8c:
                    10:2b:3d:24:46:b6:9d:69:8c:51:e3:01:e5:43:23:
                    76:85:05:68:bf:23:b5:bd:ff:5c:a3:15:e2:4f:15:
                    00:41:11:b2:26:de:ec:d3:e3:ea:6b:6d:34:bb:d4:
                    f5:48:b0:5d:c7:17:54:94:f4:e9:eb:4f:9b:d8:1f:
                    35:24:c3:b3:a8:32:95:07:da:52:dd:07:bb:e5:67:
                    51:c3:70:14:43:0c:82:a9:46:5e:07:9f:09:5e:b7:
                    07:cf:35:03:ae:7d:3a:c7:c9:87:cc:72:cf:a8:a5:
                    dc:34:38:13:64:32:b8:e2:80:6b:11:5d:b9:33:d4:
                    56:e0:e2:60:12:b8:9e:aa:0d:b8:a9:bb:b9:52:17:
                    c7:78:d2:a9:4c:e6:3f:86:fb:8b:bf:c2:4f:ea:cd:
                    10:24:b0:4f:33:89:28:95:96:47:e5:c4:06:d4:fa:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:A7:08:F9:B3:3D:DC:9D:69:BF:09:C4:FB:0E:DB:4A:FB:45:6B
            X509v3 Authority Key Identifier:
                keyid:39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a313030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b1:43:87:29:ef:94:91:fe:5f:5f:36:3e:1e:4e:43:64:c8:06:
         df:2f:56:28:4b:d0:2d:2d:76:c5:51:4b:8f:53:cf:50:57:c5:
         9a:30:0a:ab:a8:ae:03:2f:7e:91:d0:40:94:dd:d6:d5:31:9f:
         97:fe:a1:c7:0c:3b:33:26:4f:d6:99:ab:32:d0:1b:d1:ab:94:
         7c:00:ea:be:db:d9:09:32:f9:f1:31:8e:90:51:7a:5a:cc:3c:
         e2:bf:4b:f9:05:04:8e:9f:e0:ec:c1:de:57:2a:37:9f:5a:59:
         4e:da:8e:33:47:e9:e7:36:be:04:a8:ae:51:f0:82:fa:7f:91:
         51:53:db:6e:4a:de:8f:5f:8e:c7:2c:09:97:7f:75:e1:8b:66:
         b2:63:04:d7:85:8f:3f:0e:00:d0:e5:c6:d2:a7:ef:98:e1:d4:
         66:ec:77:78:41:4e:a0:18:ec:84:34:f3:f3:be:15:74:53:ce:
         e1:d3:7e:21:42:a3:15:37:71:cb:ea:7f:be:6b:5e:b2:52:81:
         aa:46:fe:33:ae:75:36:7e:6e:42:3a:f5:77:de:35:5e:ea:91:
         8e:d3:22:3f:d7:9b:da:78:02:b5:b9:57:b3:d4:de:9f:49:70:
         9f:bf:eb:34:69:9e:69:36:28:99:0f:f7:84:8a:06:ab:67:91:
         cd:90:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:26:08 2026 by rpki-client