Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          1dr5NDVcJNMwFuLCcbEUkuEhf/kfs9fn2ZJs0W6dtvE=
Subject key identifier:   33:F6:07:9F:A1:D7:16:FF:90:9F:97:16:36:92:0A:4C:2B:89:9A:96
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       5BADB9708D8A277F301A0D58DE5398C6BF0C084C
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:27 +0000
ROA not before:           Mon 07 Sep 2026 15:54:27 +0000
ROA not after:            Mon 06 Sep 2027 15:59:27 +0000
asID:                     268009
IP address blocks:        2804:5690:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ad:b9:70:8d:8a:27:7f:30:1a:0d:58:de:53:98:c6:bf:0c:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:27 2026 GMT
            Not After : Sep  6 15:59:27 2027 GMT
        Subject: CN=33F6079FA1D716FF909F971636920A4C2B899A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:3c:28:a5:44:fc:b8:f1:d5:7d:21:c6:89:
                    df:bb:5c:5d:bd:30:d4:23:15:84:c9:7d:94:21:dc:
                    32:9d:52:91:3d:e5:31:e8:af:83:be:a3:be:54:ce:
                    a3:5d:ad:a6:10:c5:e5:ec:fc:19:53:89:78:5d:04:
                    e6:f8:19:4d:af:ba:95:95:e1:7b:1e:a0:10:91:ec:
                    cb:9c:59:5b:d2:80:5b:6a:a0:c2:5f:28:13:4e:fe:
                    e1:b2:f4:33:e9:f4:d5:43:0b:5d:ed:8d:1d:95:46:
                    72:80:7b:8e:80:53:97:3b:a2:ef:98:06:05:d2:21:
                    33:be:c8:7c:10:ad:7b:30:4e:6b:ff:f6:c0:d1:d5:
                    ff:16:50:3c:26:31:74:33:72:f5:bb:b5:7e:7c:74:
                    9a:c5:a4:21:fa:7d:4e:8a:cd:63:7e:eb:df:41:7d:
                    87:61:78:75:bd:97:28:5c:a0:72:72:5b:8b:26:d1:
                    7c:4e:3a:5d:73:52:ce:58:88:78:f7:b2:4c:8b:ba:
                    af:08:a6:65:bb:6a:99:00:fd:54:65:58:4a:f4:77:
                    63:78:b3:ac:44:1f:70:e5:26:b7:dd:a8:c9:d7:56:
                    41:b7:68:35:e6:a9:d3:d5:38:40:e6:9f:d4:6c:06:
                    4e:75:03:2f:4d:0a:29:b6:11:c7:e9:a7:c1:71:5e:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:07:9F:A1:D7:16:FF:90:9F:97:16:36:92:0A:4C:2B:89:9A:96
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a343030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:70:80:80:2d:c3:25:58:db:5b:63:88:48:50:67:34:f8:
         e9:b4:0a:c0:d5:6a:63:77:f3:32:44:2a:2a:77:d6:cc:91:d1:
         bd:af:61:be:61:95:22:19:16:f2:d7:a9:1e:e8:9a:c1:cf:a4:
         02:e2:5c:73:9d:c0:1e:4b:7a:ce:3c:2d:ad:8c:e7:33:da:4b:
         d3:1e:1a:71:59:2c:5e:ab:29:83:ce:77:57:d1:ce:f2:e2:26:
         c0:1d:52:10:38:c6:ce:42:b6:e1:e7:31:df:3b:20:bf:66:b2:
         1a:f2:26:c2:02:6a:85:05:dd:b7:a8:d8:01:a7:bf:75:85:ad:
         f8:32:6e:2d:e9:eb:83:79:6b:c0:16:1a:ba:3a:c8:13:d6:c3:
         d8:56:8f:2f:fd:83:e1:54:41:a4:3e:07:56:31:89:bf:1d:94:
         bb:32:b7:88:10:ef:1b:24:98:cb:89:e1:d9:09:4e:aa:84:2d:
         e9:61:5c:44:6c:3a:6e:d5:c7:2d:7d:ab:bf:93:f4:4e:73:1e:
         29:63:84:56:8d:21:fa:21:68:34:a3:90:ae:d9:29:bb:c0:8b:
         3b:2b:9c:b7:11:74:8b:d3:67:36:02:97:37:37:ce:65:b0:74:
         dc:18:f0:49:29:c8:86:34:01:61:08:49:47:b1:45:f4:7c:40:
         63:4d:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:40:50 2026 by rpki-client