Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a633030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a633030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          y5GOnPGqNjK6SgsI1QMNrZmJw+xVpyzTW8KNuMfjPLI=
Subject key identifier:   E8:02:A7:4F:0B:81:04:5E:98:35:A9:23:E6:93:B1:6A:E4:67:E2:4D
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       72033F8F4AD5F04D987F683B7C9951BE2845F2EC
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a633030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:26 +0000
ROA not before:           Mon 07 Sep 2026 15:54:26 +0000
ROA not after:            Mon 06 Sep 2027 15:59:26 +0000
asID:                     268009
IP address blocks:        2804:5690:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:03:3f:8f:4a:d5:f0:4d:98:7f:68:3b:7c:99:51:be:28:45:f2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:26 2026 GMT
            Not After : Sep  6 15:59:26 2027 GMT
        Subject: CN=E802A74F0B81045E9835A923E693B16AE467E24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:a2:bc:d6:2b:cd:a2:2d:78:09:68:64:94:5e:
                    d1:b4:b2:05:0a:9c:91:31:62:c6:c5:0b:e3:70:4f:
                    74:08:46:b5:54:17:a2:ee:e9:00:ec:bc:af:36:11:
                    ca:59:66:cf:ef:1b:f1:93:80:f5:78:4b:cf:9a:b0:
                    62:e9:a6:e1:f7:df:55:1d:ca:41:8d:23:42:f2:62:
                    d5:3c:42:9a:ab:3b:06:01:28:32:fd:7d:b4:f8:85:
                    37:ec:7e:0e:db:6c:57:6c:1f:77:da:14:fa:ee:54:
                    3e:97:84:88:3f:35:a6:44:c3:ca:88:51:47:cb:5b:
                    1e:bc:ff:48:48:18:cd:cc:e0:61:76:bb:60:0e:df:
                    10:c6:ed:62:1e:e7:35:fc:19:92:54:94:a9:2d:02:
                    37:18:69:23:8a:85:8e:15:00:ee:e8:8e:0c:30:b7:
                    09:85:f3:3d:16:77:c7:a1:2b:ac:e5:d4:84:ec:75:
                    a3:7c:19:ab:d3:2c:ee:57:4c:80:99:82:e4:c0:5b:
                    6a:7b:b8:d0:79:d2:45:31:f4:40:c4:c1:32:fd:a7:
                    f3:6f:1f:af:f1:52:fc:c1:ba:ca:2c:32:29:2a:49:
                    2e:c5:ea:42:f3:e8:15:1e:d7:9f:9a:9b:e4:45:93:
                    2c:6c:75:2b:dc:39:c6:94:2e:d0:e6:74:74:04:04:
                    9d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:02:A7:4F:0B:81:04:5E:98:35:A9:23:E6:93:B1:6A:E4:67:E2:4D
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a633030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6c:e5:dd:bf:79:c9:95:a7:81:ca:d1:7a:f2:7c:65:57:43:89:
         54:09:bf:e9:4a:e3:c9:08:15:ef:2e:56:bc:09:5e:ba:e8:1b:
         ed:19:11:18:2f:eb:d9:ea:01:5f:30:95:87:33:3e:58:dc:e2:
         0f:20:6a:a6:e2:11:02:04:a3:4b:a4:15:38:fe:99:99:d8:47:
         70:59:8c:63:e4:c7:c3:9b:a1:0c:a5:c4:61:f5:89:6b:1d:1d:
         90:16:9b:1d:89:0e:31:08:00:2b:7a:8f:23:9d:dd:2a:20:37:
         87:ab:1c:ee:67:f9:38:b6:71:8c:1a:38:fc:ab:b3:ed:f9:0b:
         e7:02:36:37:68:65:75:a8:a6:77:da:06:36:71:25:fc:38:af:
         ab:b7:e5:ba:89:ee:09:37:86:e3:71:f4:dc:45:b9:c4:29:0c:
         da:7f:a5:44:03:65:36:88:59:fd:cc:d7:16:d9:04:7c:b2:89:
         28:99:15:d9:44:b9:62:62:46:a3:8d:1c:e7:6d:80:fd:4e:d3:
         47:63:30:45:14:8a:97:be:8d:35:ec:42:fa:df:1b:1d:91:c4:
         11:57:b5:d2:3c:a3:1a:33:73:0e:a0:eb:3e:b1:8c:9c:7e:e6:
         20:15:8c:a5:60:18:02:53:bc:0c:a4:01:a4:93:d7:8c:d9:a1:
         61:57:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:40:28 2026 by rpki-client