Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33332d3333203d3e20323732313832.roa
File:                     323830343a383333303a3a2f33332d3333203d3e20323732313832.roa (raw, json)
Hash identifier:          +ZkjaIW4+26kcjdMngITx9lSvwysfaje89uOjDqQpVs=
Subject key identifier:   0E:F1:ED:98:DC:F3:E6:80:EE:58:29:30:98:81:80:E5:C6:D2:F2:76
Certificate issuer:       /CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
Certificate serial:       6391035370B41934656A33088A35AC37296C346E
Authority key identifier: E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33332d3333203d3e20323732313832.roa
Signing time:             Mon 14 Sep 2026 23:15:09 +0000
ROA not before:           Mon 14 Sep 2026 23:10:09 +0000
ROA not after:            Mon 13 Sep 2027 23:15:09 +0000
asID:                     272182
IP address blocks:        2804:8330::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl
                          rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 13:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:03:53:70:b4:19:34:65:6a:33:08:8a:35:ac:37:29:6c:34:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E7689F4C91E9921A604490C3CDA10A32E83B10
        Validity
            Not Before: Sep 14 23:10:09 2026 GMT
            Not After : Sep 13 23:15:09 2027 GMT
        Subject: CN=0EF1ED98DCF3E680EE582930988180E5C6D2F276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:72:47:11:30:6d:e1:d6:79:2d:ac:b9:ba:
                    a1:d4:59:b7:fe:34:d2:02:36:c7:bd:7c:2a:29:c8:
                    c5:6f:76:c0:18:e0:4b:c7:f7:11:02:80:59:9a:72:
                    ae:6d:b1:da:99:8b:a2:ed:3c:0d:d0:0c:b7:c6:7c:
                    c9:23:d5:ee:3a:51:d1:3e:33:a7:50:f9:e2:c6:81:
                    ee:76:a8:ea:28:ee:b5:32:82:ff:08:8b:c9:67:6c:
                    f8:c9:86:5a:72:30:2e:93:33:77:71:62:6f:4f:f7:
                    12:aa:9c:2e:dd:da:69:00:6b:d0:04:a5:9d:37:72:
                    04:7a:30:ac:c0:a2:aa:b8:b5:67:ed:b7:5a:ae:dd:
                    25:3b:b9:4f:d8:14:72:3c:4d:4a:f5:94:0d:bb:b0:
                    7f:dd:6f:4f:71:09:a2:3a:96:73:0f:5d:25:c9:79:
                    13:70:02:59:22:4b:9b:c8:5c:b6:72:71:d4:91:94:
                    f4:43:23:db:12:f9:94:ee:f3:6b:a5:52:6b:96:c1:
                    19:90:00:38:2e:88:f5:fe:7e:23:af:42:d3:16:41:
                    b1:94:d5:15:1f:95:c2:fa:59:a0:9a:c1:32:01:4c:
                    63:13:8a:8f:a9:3f:5f:d4:60:dc:58:bc:09:68:6b:
                    77:ed:4f:aa:25:c8:7a:45:ba:81:3c:ba:da:94:fd:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:ED:98:DC:F3:E6:80:EE:58:29:30:98:81:80:E5:C6:D2:F2:76
            X509v3 Authority Key Identifier:
                keyid:E5:E7:68:9F:4C:91:E9:92:1A:60:44:90:C3:CD:A1:0A:32:E8:3B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/E5E7689F4C91E9921A604490C3CDA10A32E83B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5E7689F4C91E9921A604490C3CDA10A32E83B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33332d3333203d3e20323732313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8330::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:39:7b:5b:b0:99:61:47:18:c9:ee:ad:03:6a:0f:00:5b:83:
         16:93:90:01:8e:88:75:3e:9e:f8:83:e0:76:a8:9e:c3:a5:ea:
         30:60:17:d8:6b:7b:6d:e9:dd:d3:90:39:29:91:72:11:a1:a2:
         28:ad:1c:8c:00:3a:ad:a8:25:03:18:3a:19:ce:ee:5d:df:33:
         e9:e7:5b:60:67:f7:ff:5e:1c:01:d0:8e:46:c5:25:12:e8:bf:
         bc:97:71:7d:1a:9b:09:57:2c:00:bf:4f:3f:63:a9:43:be:a2:
         67:b3:10:75:5d:79:2f:96:ac:13:27:1b:2e:00:eb:53:32:63:
         14:ee:82:70:16:c7:76:61:d0:55:05:da:f6:c2:d9:5d:1b:ca:
         f7:ad:37:fb:90:59:60:76:9e:12:80:47:49:01:f7:db:46:f2:
         5f:c1:d0:e9:63:31:db:0d:15:86:bc:bf:60:be:7a:e3:66:ab:
         27:09:29:26:ad:64:2b:77:6c:7a:a9:3c:ad:b4:21:a2:4f:ba:
         a7:73:6d:71:a4:83:0d:bf:f9:bf:fb:45:34:8c:a9:58:52:2a:
         6c:7f:15:4e:15:3c:01:27:92:af:44:a9:95:86:a2:9a:f9:4f:
         f8:24:9d:ff:07:6a:b8:a4:fa:30:ee:62:5a:8c:35:93:00:ec:
         07:b8:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:05 2026 by rpki-client