Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a633030303a3a2f34302d3430203d3e20323632363432.roa
File:                     323830343a326561383a633030303a3a2f34302d3430203d3e20323632363432.roa (raw, json)
Hash identifier:          bao1GdhyWc48G63BV4bSguaWpODdLME+5ma4evNP00w=
Subject key identifier:   E3:D5:E4:0D:17:4D:51:AF:F6:F8:25:72:3B:D6:C8:C7:48:1D:A3:65
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       50EEDBE2BAEFAD629B178F9A24C51F9EB7A021DF
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a633030303a3a2f34302d3430203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:02 +0000
ROA not before:           Fri 28 Aug 2026 17:01:02 +0000
ROA not after:            Fri 27 Aug 2027 17:06:02 +0000
asID:                     262642
IP address blocks:        2804:2ea8:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 18:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ee:db:e2:ba:ef:ad:62:9b:17:8f:9a:24:c5:1f:9e:b7:a0:21:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:02 2026 GMT
            Not After : Aug 27 17:06:02 2027 GMT
        Subject: CN=E3D5E40D174D51AFF6F825723BD6C8C7481DA365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:3f:03:c1:95:0e:cf:f6:e5:66:15:b5:d5:
                    f6:5d:a6:22:47:d6:bc:14:b3:30:99:7a:d6:53:60:
                    cb:d7:6d:d2:0c:d8:6d:64:33:ee:f7:44:ff:71:27:
                    b4:e8:72:20:bb:36:8f:64:77:86:86:4d:f6:72:12:
                    9f:74:d1:5a:86:aa:ac:65:fd:04:13:d3:8c:6c:05:
                    2e:64:d5:2c:bd:54:2f:4a:72:91:a4:79:c1:e8:26:
                    6e:eb:9b:4f:3c:13:79:0a:71:a5:82:2d:9f:53:0a:
                    27:96:61:12:9f:b9:17:74:93:e4:fa:d0:92:0d:3b:
                    48:89:7b:14:dc:d2:b0:08:c0:59:4e:92:33:fe:59:
                    02:31:8c:de:49:61:0f:bd:41:2b:7f:1b:2f:82:90:
                    3d:b9:46:9d:9c:af:98:71:03:f5:84:62:62:f7:42:
                    81:ec:81:8c:d2:45:d7:97:17:2f:a9:67:ed:bf:66:
                    87:93:03:40:82:b0:80:e6:33:31:c6:e9:f6:92:59:
                    34:c7:9a:1a:3b:d1:95:18:8d:88:c7:24:31:74:0d:
                    65:b1:d5:4e:85:77:a3:6a:04:bc:24:2e:10:83:f8:
                    9b:6a:a1:f4:70:70:a7:e1:ed:2c:c6:94:57:4f:20:
                    2d:47:f0:9d:81:7c:08:8d:42:1d:2f:02:d5:50:92:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D5:E4:0D:17:4D:51:AF:F6:F8:25:72:3B:D6:C8:C7:48:1D:A3:65
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a633030303a3a2f34302d3430203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:88:10:88:d7:ec:fb:b1:91:8b:80:1e:5d:20:f5:ec:b0:a2:
         c7:c5:1a:c3:92:92:a4:9e:09:0d:e3:6b:73:62:22:4f:98:06:
         25:a5:b6:11:d9:f0:be:2f:3f:20:0e:20:46:ae:a5:b1:7e:51:
         6d:de:9e:06:e5:43:ff:12:ab:f2:cf:f3:f8:d8:cf:ba:3b:43:
         42:82:91:b0:9b:69:cf:16:26:ce:de:6a:83:fb:12:c8:0c:d4:
         c1:fc:96:1d:08:59:d0:1f:0d:df:f6:ea:a8:4a:fd:6a:02:2c:
         42:33:11:c0:5d:05:f3:54:86:9b:97:bf:b2:b8:56:82:9e:98:
         24:63:11:47:b5:64:95:1a:8c:1e:cf:8f:5f:b0:0d:54:f1:6c:
         e5:20:73:e9:35:90:da:a9:e4:33:0d:ff:a5:3f:ad:b1:05:1a:
         bd:1f:b7:9a:cf:ad:1f:81:ec:00:d3:11:6e:0c:da:3d:04:2a:
         48:0c:2a:4e:dc:ea:bc:d8:91:d4:5a:2b:cc:3f:c5:8f:de:d9:
         8c:45:10:f7:ff:48:d4:37:bf:90:91:0e:95:5d:96:9b:b9:95:
         c9:17:a3:69:01:46:58:0d:bf:68:fa:62:f5:68:e5:56:3b:aa:
         ca:d6:bf:91:4a:dc:6d:93:cb:7c:38:e0:6e:ea:1e:e2:64:bb:
         db:32:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:22:49 2026 by rpki-client