Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d3338203d3e20323637323831.roa
File:                     323830343a346231303a3a2f33382d3338203d3e20323637323831.roa (raw, json)
Hash identifier:          LVbk2PJnBKs8gE1AmxjGqnSl5bQnqfTSwVi/yyGfa0I=
Subject key identifier:   C9:30:2E:98:E1:58:BB:D5:A4:C8:05:94:BC:BA:70:67:A7:8C:20:CE
Certificate issuer:       /CN=0FF30EC686201018DE081110542623BAED2ADF49
Certificate serial:       679407DCD30C2D86C9AE9DB192AE8D8C7F22B007
Authority key identifier: 0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d3338203d3e20323637323831.roa
Signing time:             Tue 15 Sep 2026 19:25:59 +0000
ROA not before:           Tue 15 Sep 2026 19:20:59 +0000
ROA not after:            Tue 14 Sep 2027 19:25:59 +0000
asID:                     267281
IP address blocks:        2804:4b10::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 15:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:94:07:dc:d3:0c:2d:86:c9:ae:9d:b1:92:ae:8d:8c:7f:22:b0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF30EC686201018DE081110542623BAED2ADF49
        Validity
            Not Before: Sep 15 19:20:59 2026 GMT
            Not After : Sep 14 19:25:59 2027 GMT
        Subject: CN=C9302E98E158BBD5A4C80594BCBA7067A78C20CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:52:77:21:2f:ae:77:6c:e4:7a:d6:31:a1:
                    3d:10:c8:ab:5b:a0:59:9d:f3:c2:e8:b9:96:0a:cc:
                    0c:d5:5c:51:a2:d1:43:ff:51:c0:f3:70:01:97:c1:
                    90:42:72:db:15:d2:14:57:0f:d1:34:54:9c:9e:3e:
                    b9:69:81:ed:70:ec:13:7b:3d:0b:2b:f5:20:50:62:
                    e0:c6:fc:64:11:52:48:e8:c1:e2:0c:a0:35:55:de:
                    c8:cc:a3:b7:98:06:84:5b:15:76:b9:47:ce:44:4a:
                    4e:f9:25:44:e1:7b:ab:22:6d:11:c4:92:aa:a8:5e:
                    78:4f:6a:67:b5:32:50:98:fd:38:30:c7:73:d8:45:
                    47:fe:22:8f:07:f6:c3:ff:c5:db:cf:33:1f:00:1c:
                    1e:7f:04:40:3c:2b:bb:10:bb:5f:9f:32:6b:2e:c0:
                    89:e9:6d:ee:7d:2a:69:ce:d9:3f:d9:13:83:13:ad:
                    ec:9c:e9:4e:fa:d9:2b:d0:32:0f:24:cd:0b:1a:4d:
                    2a:27:70:2f:81:fd:58:99:0a:c5:6f:01:80:c9:24:
                    2f:95:de:54:a7:5e:cb:5e:d5:39:ef:87:f3:f5:82:
                    e5:10:d6:f2:8e:d8:2d:50:3d:d7:9c:0e:87:bf:54:
                    66:f8:b6:ab:e3:a9:29:4a:e4:53:35:39:5a:23:6d:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:30:2E:98:E1:58:BB:D5:A4:C8:05:94:BC:BA:70:67:A7:8C:20:CE
            X509v3 Authority Key Identifier:
                keyid:0F:F3:0E:C6:86:20:10:18:DE:08:11:10:54:26:23:BA:ED:2A:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/0FF30EC686201018DE081110542623BAED2ADF49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF30EC686201018DE081110542623BAED2ADF49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33382d3338203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         75:51:a9:07:8f:a2:75:93:ef:11:1e:31:40:5e:1c:72:38:f0:
         4b:57:4d:93:2d:4b:59:94:0c:79:93:15:40:eb:87:d9:b8:2b:
         e5:13:03:6d:ab:7f:97:3a:b9:37:9a:2a:a9:18:74:4f:fb:e2:
         68:d9:f3:0a:28:5c:f2:81:4a:17:f8:bd:f0:13:4e:0e:4d:51:
         d9:c8:04:c5:93:34:f4:4d:60:00:26:bb:2f:08:33:e4:d0:64:
         53:cf:fd:f6:be:1d:36:44:97:c7:07:7f:4d:72:04:13:75:09:
         00:ea:c5:e0:43:9b:3b:32:11:29:83:c8:0a:f9:13:c8:16:09:
         00:80:d3:b6:6e:97:0d:41:16:24:42:24:6b:59:e5:f8:9d:39:
         2e:82:8e:bb:2f:9f:c4:6c:2b:59:c6:14:23:8a:2f:51:a8:68:
         7d:61:5f:84:fb:04:8e:2b:38:74:55:d7:32:43:98:d4:c3:e5:
         81:14:2a:96:a6:6a:7c:fb:50:40:aa:2f:a2:b3:61:32:12:56:
         fc:ca:53:bf:5e:78:38:ec:b6:e9:a4:b3:7a:0d:e1:d6:d7:88:
         a3:a1:88:8c:2e:1a:a0:48:f2:7a:e7:7f:bd:12:f4:a5:66:7d:
         5f:63:0c:89:23:66:1e:7f:cd:69:b1:1f:26:3a:12:ec:c2:62:
         9a:45:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:34:16 2026 by rpki-client