Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          HQQzy56lreUeGh8ZN1F4RcKGH7rZ5ew/N+ylmOY0ljk=
Subject key identifier:   A8:F7:B5:DE:8E:31:61:D5:A5:AE:29:1E:52:99:3C:A6:31:0B:EE:CC
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       7AA231B518015DFBA808A5F00B6F54EF789CB223
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:26 +0000
ROA not before:           Mon 07 Sep 2026 15:54:26 +0000
ROA not after:            Mon 06 Sep 2027 15:59:26 +0000
asID:                     268009
IP address blocks:        2804:5690:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:31:b5:18:01:5d:fb:a8:08:a5:f0:0b:6f:54:ef:78:9c:b2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:26 2026 GMT
            Not After : Sep  6 15:59:26 2027 GMT
        Subject: CN=A8F7B5DE8E3161D5A5AE291E52993CA6310BEECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:c5:f3:7d:a2:1f:5a:de:4f:1a:e9:13:96:
                    2e:26:d3:11:c7:b5:49:df:ac:b8:8f:fe:25:ab:43:
                    4c:d5:94:39:a1:5b:92:65:ca:d6:2a:ab:1d:89:2f:
                    c6:1a:78:71:24:71:8e:b6:e1:37:bf:78:be:4a:2e:
                    27:6c:07:8a:f4:86:85:a3:7a:1e:62:87:fe:e2:27:
                    61:c1:b8:d4:48:cf:9d:e1:11:7b:bd:14:c0:e7:26:
                    e6:2c:a5:d5:3c:04:53:6b:aa:28:3f:98:70:95:4d:
                    0c:fc:af:e2:eb:cb:97:f3:51:53:38:cd:fa:b3:ea:
                    19:b2:3a:be:7f:e5:21:9e:e6:25:7c:3e:55:95:07:
                    a6:c6:49:58:98:ba:cd:ff:a8:04:31:f2:dc:a5:6d:
                    a4:69:d9:81:50:80:e4:7f:c4:4c:b6:83:45:66:34:
                    3e:f7:de:87:0b:81:93:e0:09:3a:4b:83:9b:df:6b:
                    fa:3c:4f:72:8f:52:fb:93:d7:5e:d7:f4:c1:45:06:
                    23:27:73:1e:c2:61:2f:51:b2:1c:69:66:de:9b:82:
                    ae:bb:87:dd:a4:26:9f:96:6e:f9:69:d9:26:89:52:
                    2f:64:32:cd:d0:40:d3:01:42:6b:08:92:4e:91:1e:
                    a9:5e:47:38:79:b1:bb:46:e5:31:f8:c5:91:29:f1:
                    83:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:B5:DE:8E:31:61:D5:A5:AE:29:1E:52:99:3C:A6:31:0B:EE:CC
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a653030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:b3:47:55:61:c2:4d:a5:3d:d0:e0:ee:d2:b8:a8:33:ae:
         e7:8e:e9:9b:56:4a:88:f0:ac:75:ef:a2:86:9a:28:c9:9e:de:
         91:48:10:98:d9:e7:5d:52:27:ea:81:70:8d:46:33:ac:2f:90:
         9d:32:12:50:fc:f2:0a:24:88:fb:ac:30:ea:76:e3:16:7f:db:
         e9:43:f6:dc:16:5c:8d:49:7f:dd:70:60:01:16:4a:a4:28:51:
         83:0c:0a:0c:0b:ab:09:17:ed:cd:1e:5c:a3:f7:59:3a:01:09:
         e4:0c:83:fe:82:1f:6e:c8:88:94:c8:03:24:7a:d0:62:1b:1f:
         4f:a1:c5:b1:65:e4:cb:e9:cb:5b:9f:61:67:6c:ef:68:ab:e9:
         87:61:bc:73:5a:49:55:b7:75:fe:fa:58:53:9d:9d:30:e7:50:
         21:38:4e:7e:1d:0f:4e:92:5f:0b:3b:08:98:93:9d:ff:e4:17:
         ac:f8:0e:f8:9e:10:57:63:84:bd:cc:b5:43:fe:e6:b3:04:bf:
         20:ee:22:a1:34:2c:a7:32:90:38:25:be:e7:8a:23:ed:c0:81:
         fa:09:94:62:13:ca:7a:4a:8d:8d:90:76:f2:ff:2c:ec:fb:5d:
         9c:8a:88:7a:d4:13:9f:cb:f7:71:52:83:3c:e9:96:bd:f3:bb:
         2b:4f:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:42:48 2026 by rpki-client