Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          8OlzyVuARkZvO3LPvV2JkPSWM95pZ/zbh+fNFrR5dfo=
Subject key identifier:   0A:4D:97:95:74:57:44:03:FD:3A:76:41:62:6F:BF:01:F9:5A:79:BC
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       46FBC963D8FDB93214FB904EC7C37FA9A48A1D14
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:26 +0000
ROA not before:           Mon 07 Sep 2026 15:54:26 +0000
ROA not after:            Mon 06 Sep 2027 15:59:26 +0000
asID:                     268009
IP address blocks:        2804:5690:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fb:c9:63:d8:fd:b9:32:14:fb:90:4e:c7:c3:7f:a9:a4:8a:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:26 2026 GMT
            Not After : Sep  6 15:59:26 2027 GMT
        Subject: CN=0A4D979574574403FD3A7641626FBF01F95A79BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:03:f6:be:16:72:76:30:d6:c0:1c:14:00:
                    46:47:96:ce:5f:e8:7a:9c:36:47:04:b7:34:c3:e7:
                    af:6d:7d:4a:0e:03:49:13:78:ed:02:c6:56:3d:52:
                    a4:89:8c:d6:76:53:34:ae:6e:fe:fe:f2:ae:73:48:
                    64:05:d1:57:52:68:83:ba:c8:67:3b:ea:d3:7d:f8:
                    04:aa:64:f9:b0:f7:f9:ad:72:4b:27:df:b3:3d:b1:
                    b3:94:43:e4:9d:a4:1f:41:71:0f:4d:ac:88:6d:62:
                    5b:6e:e5:a6:ac:03:6a:ea:12:6c:4c:dc:2b:02:37:
                    00:4a:bc:31:08:fb:97:00:ec:c9:0c:0a:22:9c:94:
                    91:b6:ad:1c:6f:b7:d3:31:a6:d3:bd:fc:05:b1:d1:
                    ef:c6:39:38:d1:8f:7d:f6:15:ea:a4:63:f5:79:10:
                    de:d6:0c:e3:04:7d:6c:c5:34:32:83:3a:3b:41:a1:
                    a8:51:e8:b8:30:e9:bd:89:42:fb:91:38:3d:35:58:
                    25:b4:2d:16:df:11:aa:d2:08:ab:1c:48:2a:5e:98:
                    81:bf:cd:e1:41:3f:e8:50:c7:2b:ef:fa:4f:54:37:
                    29:96:e7:26:2c:29:ae:f8:ea:8b:6b:66:ad:2d:8f:
                    37:4a:ff:2f:62:ea:77:a0:b7:3c:43:f4:69:71:fe:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:97:95:74:57:44:03:FD:3A:76:41:62:6F:BF:01:F9:5A:79:BC
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a393030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:bc:b7:58:c5:f4:da:66:c3:b0:65:43:de:e6:2c:77:25:
         ba:cb:bc:b0:18:24:df:8f:72:0e:ea:90:83:1c:cc:fc:b3:23:
         01:3c:a5:3a:fc:d8:ef:18:17:70:a3:59:5d:12:18:31:de:b3:
         e4:5d:3a:12:df:10:66:b2:f8:92:93:60:a8:81:48:c8:db:5d:
         0f:48:ab:e3:c7:75:29:8f:40:c9:ad:c7:2a:d7:26:15:48:a4:
         7e:62:4e:c0:d6:98:91:be:dd:31:e9:e9:98:a3:78:23:ba:5f:
         11:a3:d1:f8:53:76:a6:5c:66:6c:ef:21:b5:cb:af:6c:20:48:
         d9:94:8b:42:b1:9e:89:ba:45:bf:bb:de:ea:1a:fc:ad:f8:cb:
         69:e9:17:83:b8:25:a9:a3:56:71:d8:0a:c9:6c:4c:74:4b:06:
         3f:e1:a2:cd:9e:f2:da:32:05:b6:e9:a5:3e:1c:da:ff:54:96:
         57:25:04:82:d2:66:78:2f:f7:dd:9d:3d:ed:e3:f5:41:ef:e9:
         fa:ce:01:c0:db:36:25:99:65:d4:01:e7:2a:62:ed:e3:bc:11:
         04:fe:bb:1c:d0:4a:e1:46:1a:49:bc:48:85:e6:a3:01:af:a7:
         1f:d3:23:e9:68:22:f3:57:33:21:3c:4e:20:cd:39:46:ba:13:
         b6:8a:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:39:00 2026 by rpki-client