Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
File:                     323830343a363131633a3a2f33322d313238203d3e20323639323133.roa (raw, json)
Hash identifier:          bZnrR6ZoqNuDMWK9G41BQbHhTqX9gVzMw07bjYvk/xw=
Subject key identifier:   2E:8F:C6:C8:43:BE:49:0D:2F:44:75:18:E7:30:A5:AD:71:F6:FA:38
Certificate issuer:       /CN=3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8
Certificate serial:       365DF1CDE89DFB1E282D1E82CF710288F0C150C6
Authority key identifier: 3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa
Signing time:             Wed 23 Sep 2026 12:50:10 +0000
ROA not before:           Wed 23 Sep 2026 12:45:10 +0000
ROA not after:            Wed 22 Sep 2027 12:50:10 +0000
asID:                     269213
IP address blocks:        2804:611c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.crl
                          rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5d:f1:cd:e8:9d:fb:1e:28:2d:1e:82:cf:71:02:88:f0:c1:50:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8
        Validity
            Not Before: Sep 23 12:45:10 2026 GMT
            Not After : Sep 22 12:50:10 2027 GMT
        Subject: CN=2E8FC6C843BE490D2F447518E730A5AD71F6FA38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:2a:22:8b:ba:35:cd:b5:ba:a9:6d:ce:20:
                    70:0d:d0:0f:cf:05:89:a6:54:98:7c:bc:36:15:64:
                    51:f0:54:77:8e:b4:ea:7f:eb:d3:84:10:93:47:2b:
                    25:f4:0a:b6:58:ff:5e:73:b4:e8:d3:48:7c:8f:74:
                    13:4f:6b:55:0f:7f:e1:2a:66:f9:8e:81:d9:0b:3a:
                    d1:c9:4e:0e:1d:50:55:e6:70:44:21:a5:cf:43:46:
                    16:fd:45:07:c4:b6:2e:0c:cc:fa:e7:f6:66:ac:87:
                    c0:c2:80:e3:ee:f0:8b:ad:98:49:10:24:b3:c7:ee:
                    56:40:13:cd:06:3b:0d:64:ad:be:c8:d9:7c:2b:41:
                    b9:5c:ce:84:b8:3c:cb:a3:6a:cb:3f:d9:2f:50:6b:
                    d0:4a:20:93:c3:17:a7:b0:dd:e6:b6:6a:85:63:b8:
                    c6:07:05:7b:1e:58:57:5c:4d:cd:7e:46:9d:d8:80:
                    94:ab:a2:a4:c5:9d:b9:31:83:59:77:a6:a6:87:8e:
                    df:19:44:65:a3:60:c9:b9:62:24:2e:2c:28:ec:48:
                    e6:1d:0b:36:50:de:d0:75:3b:bb:b1:ab:b8:38:40:
                    09:fb:4d:c4:5d:ee:e8:3e:11:e5:df:92:b9:34:71:
                    cf:11:d4:c5:35:02:9e:06:65:a4:9d:16:fc:8b:5e:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8F:C6:C8:43:BE:49:0D:2F:44:75:18:E7:30:A5:AD:71:F6:FA:38
            X509v3 Authority Key Identifier:
                keyid:3A:9F:89:B5:74:1F:80:3D:FB:33:F4:3E:5A:E5:F4:4C:BC:94:D1:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A9F89B5741F803DFB33F43E5AE5F44CBC94D1F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r1J98MiE49NCLnyxpYsTVuWhVbx1VSusohR3j8Cf418/0/323830343a363131633a3a2f33322d313238203d3e20323639323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:611c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:c7:1b:a0:4b:84:0c:47:74:ab:c9:6c:64:52:86:5e:43:
         11:c8:b7:09:88:b2:01:22:ef:8a:bb:e7:ba:ba:e0:bb:22:d9:
         b9:c9:39:b2:8d:1a:c9:3c:56:a8:5b:ec:9c:0e:74:9a:79:5f:
         84:ef:bc:a5:a6:0d:28:c3:dc:a5:8e:ab:84:b3:8a:11:e4:e0:
         19:80:01:6b:93:98:ad:38:90:bd:4e:0d:f4:37:55:aa:16:1e:
         a7:b1:5e:7f:20:f5:a6:45:9f:ea:f6:14:d0:23:a6:17:ba:99:
         5b:6c:bd:0d:ed:8b:8c:ca:a3:08:0f:96:be:17:c6:d4:e7:9a:
         98:05:8e:c7:9c:8b:78:40:8c:2b:93:d4:b8:a4:84:c7:22:08:
         f6:b8:c2:22:ac:7e:cc:9d:85:48:ce:f6:78:27:b8:73:cc:6d:
         80:3b:7a:6a:2b:d9:9d:8e:1d:2c:d5:f0:21:7f:da:36:b8:2a:
         99:cc:eb:28:87:bf:0f:38:69:54:f4:4b:8a:fb:86:a0:97:8e:
         2b:c3:7c:ad:45:c7:63:06:cd:c2:cf:50:6a:81:02:64:39:af:
         93:a2:96:01:d7:c6:dd:2d:2b:ca:bd:d9:e9:87:85:71:11:fd:
         11:52:d9:5b:5c:3c:cb:f9:a1:70:be:ef:09:66:d1:f4:6b:0a:
         06:68:ff:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:55:40 2026 by rpki-client