Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa
File:                     323830343a393038303a3a2f33332d3333203d3e20323733353536.roa (raw, json)
Hash identifier:          KWrcA7/La1qzzqk6wxlyHI6W5mlnkqJ/8srp6R/CQnY=
Subject key identifier:   DD:A1:2A:EA:F9:84:8B:AB:C0:D9:D9:69:E3:A4:BA:AA:D0:4C:74:8B
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       4772D68B4B16812502A96CB8D3A4FB4E8E0951D1
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa
Signing time:             Sun 25 Oct 2026 12:40:32 +0000
ROA not before:           Sun 25 Oct 2026 12:35:32 +0000
ROA not after:            Sun 24 Oct 2027 12:40:32 +0000
asID:                     273556
IP address blocks:        2804:9080::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 16:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:72:d6:8b:4b:16:81:25:02:a9:6c:b8:d3:a4:fb:4e:8e:09:51:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Oct 25 12:35:32 2026 GMT
            Not After : Oct 24 12:40:32 2027 GMT
        Subject: CN=DDA12AEAF9848BABC0D9D969E3A4BAAAD04C748B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:2e:76:59:56:d1:9d:b3:6b:01:b6:16:0e:
                    1e:0f:65:96:32:ca:1c:c9:5e:23:ab:0b:88:52:c2:
                    11:18:e1:53:73:3a:04:6b:d4:90:cb:6d:00:ae:e4:
                    13:6d:22:61:3c:8b:8b:c8:ea:36:22:ad:ca:e4:55:
                    a6:41:8d:49:cf:55:4a:1d:d7:ed:54:63:b7:2e:73:
                    1b:23:5a:e4:76:97:b5:62:62:24:13:e6:82:41:de:
                    84:04:59:62:cd:12:90:2a:09:1c:3d:31:8c:11:ae:
                    76:4f:87:e5:fc:9b:33:46:6e:9f:0b:da:5f:4a:4e:
                    13:f7:a0:72:bb:4f:60:64:b0:57:ed:ee:b5:5f:f2:
                    b0:c9:77:48:9a:96:e9:32:3f:ab:ed:df:fe:94:da:
                    cc:ee:c0:07:e0:09:98:dd:3e:4c:bd:f8:fd:60:04:
                    e1:03:87:1b:38:c1:9b:a4:96:d2:cc:62:5d:55:a8:
                    f1:de:50:c9:db:9d:8c:a0:6e:5a:08:b0:f2:c1:3b:
                    68:61:c3:2d:13:69:00:37:f2:5d:85:a3:f3:01:17:
                    bc:c9:e0:d6:e6:3a:44:4b:46:c7:40:0e:78:03:fe:
                    88:88:2b:7c:9d:42:ff:84:fe:cd:16:5f:e8:44:19:
                    7f:66:86:f2:dc:a4:e0:74:b3:54:8b:33:d4:10:0a:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:2A:EA:F9:84:8B:AB:C0:D9:D9:69:E3:A4:BA:AA:D0:4C:74:8B
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080::/33

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:74:93:ac:f0:a6:88:7f:4e:f8:bf:f6:6a:19:94:5e:dc:
         b1:47:62:75:db:9a:24:71:89:d9:36:31:47:09:3b:c5:79:2e:
         81:f0:19:3e:23:54:8a:5d:14:5f:a2:7a:72:30:1f:1c:2f:41:
         14:d0:91:ea:7b:7b:e4:5f:ec:04:b9:4c:9c:f4:97:b8:3e:8c:
         e0:71:48:a9:23:e5:87:69:ae:15:f5:f4:c6:b3:a8:b8:54:33:
         fd:b9:9b:fb:b3:c7:fa:c4:bf:72:96:06:df:ec:55:2a:4c:a5:
         69:15:b8:12:89:26:7f:b6:8c:8f:e5:ba:2c:4e:7d:5c:16:ab:
         75:66:0b:b0:a5:df:f6:ed:54:d2:f2:d9:06:15:4d:96:ec:99:
         17:76:8b:a3:aa:97:f8:11:fc:cd:51:48:27:fe:cf:f5:3b:6b:
         07:d4:d2:52:36:02:d0:77:7f:61:1c:34:07:0d:4e:0f:2f:b7:
         dc:02:af:12:24:df:a1:27:d4:ab:c9:2a:09:a2:ab:03:3f:3b:
         c7:37:4e:83:14:db:4f:40:8e:1d:7d:9b:2e:1f:68:0c:f4:9f:
         9c:95:31:81:49:37:5c:71:36:93:9d:bb:67:e7:31:81:f0:97:
         c1:68:f4:31:b8:5f:98:4c:56:48:29:e6:bd:84:d4:e7:ec:50:
         14:11:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 04:01:53 2026 by rpki-client