Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623362303a3a2f34342d3634203d3e20323732323138.roa
File:                     323830343a383363343a623362303a3a2f34342d3634203d3e20323732323138.roa (raw, json)
Hash identifier:          P1vnGw3LK/EYruQejX8uhKDsTtzBKsfZ45GSR7on5+c=
Subject key identifier:   02:38:04:50:09:F6:FF:6E:A8:7C:3C:AE:85:C0:19:13:D1:B1:6F:CE
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       22B91846FDAD8B6F1EB74F8987E6F5448EE615D1
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623362303a3a2f34342d3634203d3e20323732323138.roa
Signing time:             Tue 01 Sep 2026 15:53:22 +0000
ROA not before:           Tue 01 Sep 2026 15:48:22 +0000
ROA not after:            Tue 31 Aug 2027 15:53:22 +0000
asID:                     272218
IP address blocks:        2804:83c4:b3b0::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b9:18:46:fd:ad:8b:6f:1e:b7:4f:89:87:e6:f5:44:8e:e6:15:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep  1 15:48:22 2026 GMT
            Not After : Aug 31 15:53:22 2027 GMT
        Subject: CN=0238045009F6FF6EA87C3CAE85C01913D1B16FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:7c:ce:d3:7e:57:60:35:4a:00:6c:a3:da:
                    37:5c:d8:08:c7:47:12:b1:15:62:d5:db:8a:26:98:
                    56:5a:60:0f:7c:c4:f4:f3:cf:a3:fc:0f:ec:03:4e:
                    a7:63:69:25:36:9d:cd:9a:89:4a:6b:4f:1b:c5:18:
                    ae:f0:3f:27:1a:bf:9b:74:ea:c2:be:de:9e:a1:48:
                    29:ec:20:2b:8c:cf:f7:82:bd:e7:7d:7d:5c:65:c7:
                    90:b5:ad:43:59:ef:74:7b:b5:bf:3e:2a:da:ee:db:
                    42:a7:ea:9b:94:3e:0c:26:66:37:11:f1:2b:d4:22:
                    60:33:39:98:89:ef:a6:0f:e5:a4:43:fd:27:b2:dc:
                    86:34:e3:08:f1:f0:90:c2:37:56:72:8d:83:ad:42:
                    5f:13:82:50:c8:36:6d:aa:00:2f:8c:d0:cd:d8:19:
                    46:d5:70:df:de:e9:68:8a:d7:bb:a6:a9:fb:0a:eb:
                    8c:9d:11:b7:ac:98:2d:a8:23:bc:25:9b:59:47:7d:
                    f1:d6:ac:ef:0a:1a:aa:b4:65:fa:ce:b8:a2:df:4a:
                    83:95:9a:c5:55:ac:1a:9d:ce:62:f1:8e:97:55:0a:
                    3d:9b:21:3f:14:7b:58:1f:43:49:d8:16:a0:ab:bc:
                    04:54:f4:f6:3e:1c:fb:32:68:ba:b8:b2:57:2e:78:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:38:04:50:09:F6:FF:6E:A8:7C:3C:AE:85:C0:19:13:D1:B1:6F:CE
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a623362303a3a2f34342d3634203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:b3b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:18:81:1e:c2:6b:23:39:a4:0b:24:d0:ac:d0:5f:79:60:be:
         6f:4d:8e:4e:69:ca:22:5a:03:f5:e2:ad:1e:43:53:e0:d5:b3:
         59:9e:24:5a:cd:df:5e:fc:63:36:cc:74:d8:72:0f:28:f0:20:
         23:d9:93:c7:b0:65:08:92:11:c4:e0:83:e3:ab:ed:f6:74:74:
         c3:4e:30:68:41:d4:81:49:ff:94:08:c6:ed:4a:ef:1d:8c:31:
         01:86:79:e1:e6:9f:b7:fb:0f:0a:2c:3b:5e:0d:84:81:0c:23:
         88:b3:8e:f6:1a:c2:ca:0d:f8:be:21:9c:15:d9:93:5e:c8:71:
         67:5f:34:05:d8:2b:6f:8b:63:69:c7:6d:bf:aa:58:db:0b:41:
         cf:cb:81:69:ca:b3:93:85:b0:6c:ed:13:6c:95:01:5f:6f:07:
         63:c4:ed:a1:38:20:24:ca:cc:00:d9:1c:31:d3:df:bb:be:ae:
         25:cc:99:c4:75:75:c2:10:5b:bc:36:da:07:ae:f2:79:c3:05:
         3d:63:4c:65:ca:58:14:b1:aa:b3:3f:50:0e:dc:49:82:e9:23:
         07:77:f1:35:5a:28:2d:04:f2:34:73:81:fc:a9:ef:2c:19:bd:
         f1:9b:4a:6c:f5:58:04:6f:ec:c5:29:ae:3f:ce:f4:f5:f3:b6:
         d8:db:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:29 2026 by rpki-client