Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa
File:                     323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa (raw, json)
Hash identifier:          Y2G01DmT00L2JCZKIwNz6PtWJKMNfjKZvSXKvMZTsiA=
Subject key identifier:   CC:F1:55:BE:A4:02:6C:E7:FF:81:37:1F:05:37:03:47:66:44:25:BB
Certificate issuer:       /CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
Certificate serial:       0C7B395521332DA83716A5056BBDF9583AF9DD24
Authority key identifier: 7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa
Signing time:             Mon 07 Sep 2026 15:59:25 +0000
ROA not before:           Mon 07 Sep 2026 15:54:25 +0000
ROA not after:            Mon 06 Sep 2027 15:59:25 +0000
asID:                     268009
IP address blocks:        2804:5690:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl
                          rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7b:39:55:21:33:2d:a8:37:16:a5:05:6b:bd:f9:58:3a:f9:dd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568
        Validity
            Not Before: Sep  7 15:54:25 2026 GMT
            Not After : Sep  6 15:59:25 2027 GMT
        Subject: CN=CCF155BEA4026CE7FF81371F05370347664425BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:f1:00:e3:b9:c4:3d:2f:ff:dd:de:26:aa:
                    36:56:3d:0c:34:35:41:ca:59:cb:76:bb:1f:f9:39:
                    c5:7f:e5:a1:52:e0:ff:56:1a:ed:2a:e1:f2:4b:d7:
                    31:79:a0:61:3b:97:e8:e7:be:53:47:be:31:64:51:
                    a2:b2:ff:0f:08:73:8c:16:af:8e:50:f6:25:ae:06:
                    3b:63:40:2c:08:38:18:2c:57:48:15:11:7b:11:9b:
                    3e:17:83:11:b7:ec:cb:82:d5:32:7d:f1:77:3c:42:
                    0d:28:4e:ad:47:8f:e8:ae:04:08:30:c4:47:02:83:
                    f1:6e:78:6e:83:e7:0d:f7:cf:09:5c:aa:95:5c:c7:
                    9b:5d:e5:2f:b5:fb:61:79:10:ff:7c:1f:8a:b8:b1:
                    5a:c2:00:71:38:44:d3:39:80:d5:cd:96:64:5b:91:
                    bf:dc:19:fe:52:07:0b:87:81:4f:fe:5e:1f:f8:eb:
                    b2:e1:cf:33:44:e4:dd:79:74:f0:a6:42:68:89:65:
                    58:e8:f0:cb:52:ef:cc:e7:aa:fc:33:ac:4f:f2:73:
                    ab:d8:89:f7:9f:d3:1d:72:25:5b:a0:29:4e:7c:36:
                    b7:a6:35:2d:62:75:20:40:df:14:57:d6:4c:e6:1b:
                    66:82:a8:6c:fc:49:b7:74:18:93:39:81:cf:34:45:
                    1b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F1:55:BE:A4:02:6C:E7:FF:81:37:1F:05:37:03:47:66:44:25:BB
            X509v3 Authority Key Identifier:
                keyid:7B:D2:00:59:58:A0:D7:D9:FD:2F:6D:D3:AF:AD:D2:71:D6:2C:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BD2005958A0D7D9FD2F6DD3AFADD271D62CD568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qdevXhtZzzdaVikHdTncuZnEDCPWBac5bmXEXAq7y43/0/323830343a353639303a663030303a3a2f33362d3336203d3e20323638303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5690:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:de:5c:f5:48:cc:7d:1e:6a:e9:fc:69:04:d3:db:87:3b:7a:
         0a:16:38:91:5b:6b:4c:e9:0b:08:7a:99:b1:6b:92:88:78:e9:
         8a:f8:cb:e9:57:e9:10:fc:2c:80:7d:51:83:df:38:d5:71:b4:
         91:20:f3:d3:67:80:52:39:04:a2:cc:6f:53:ab:67:e7:5d:7d:
         1f:31:1a:ac:e5:1c:93:db:67:9b:d3:b3:0a:e1:77:77:83:d2:
         b9:7b:33:53:e4:df:21:30:37:95:aa:be:74:42:a1:03:f1:a2:
         b0:fe:55:72:c9:c4:66:cb:dd:c3:37:fc:34:a0:0f:db:57:13:
         f0:4d:49:b0:8f:d6:73:bc:8f:f8:e0:0c:10:5d:f4:73:8e:d9:
         fd:0c:50:ad:23:4c:7b:06:7f:d8:4c:5b:f9:3b:e2:35:ec:c3:
         a3:8f:a2:f4:be:97:aa:ef:d6:43:ec:9d:2f:6d:df:01:65:b2:
         6c:17:51:2c:fb:e0:bb:fc:e6:25:76:4b:85:c1:a5:9e:47:1a:
         58:24:6b:bf:ad:73:64:fa:58:10:28:f6:53:72:02:8d:9d:26:
         b6:04:6e:48:b2:f7:d3:ea:ad:a4:6a:d7:2b:eb:6a:a2:3a:70:
         6a:5d:d9:7d:11:ec:f9:78:e8:47:c1:d5:6a:5b:84:a1:3c:62:
         77:84:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:52:37 2026 by rpki-client