Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d3332203d3e20323638353738.roa
File:                     323830343a353335383a3a2f33322d3332203d3e20323638353738.roa (raw, json)
Hash identifier:          5WlxJ4NKT6mRjdeMhqbX8K3ObzFdl7Z2HRmljHPTNjo=
Subject key identifier:   D6:2B:29:65:B8:ED:C9:1E:B0:7F:F1:E8:1E:89:16:52:A6:16:7D:70
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       747C913EC0C04BFD0F3E6F75F767833C1282DC18
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d3332203d3e20323638353738.roa
Signing time:             Thu 17 Sep 2026 02:31:07 +0000
ROA not before:           Thu 17 Sep 2026 02:26:07 +0000
ROA not after:            Thu 16 Sep 2027 02:31:07 +0000
asID:                     268578
IP address blocks:        2804:5358::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7c:91:3e:c0:c0:4b:fd:0f:3e:6f:75:f7:67:83:3c:12:82:dc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 17 02:26:07 2026 GMT
            Not After : Sep 16 02:31:07 2027 GMT
        Subject: CN=D62B2965B8EDC91EB07FF1E81E891652A6167D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:05:55:d2:a1:73:08:84:bb:aa:d6:44:50:17:
                    06:10:f3:11:d1:7d:09:c2:71:66:bd:5b:9c:8a:43:
                    59:b8:28:04:27:f7:7c:a6:e8:ae:66:d2:15:74:ab:
                    39:9e:fe:83:2c:90:6c:b7:7b:5c:23:86:25:9a:34:
                    04:3a:55:ef:ee:0b:4b:82:dd:47:ac:aa:c7:65:98:
                    42:ea:43:3c:dd:74:f5:75:a7:f8:35:e3:d9:c8:bd:
                    8b:c8:14:d8:5a:ee:46:2c:a2:92:18:ff:05:62:b2:
                    64:d1:99:16:9a:02:39:6b:cd:d1:b4:42:61:24:8a:
                    eb:10:52:0a:e3:1e:92:7e:78:a9:6d:cd:1e:fd:42:
                    87:17:81:2e:7b:ab:cc:90:85:54:05:bf:04:62:81:
                    7c:60:58:3d:dd:76:c2:73:f1:ab:46:f8:1d:2d:9f:
                    7d:9c:00:cd:8a:f4:02:35:c8:a7:6a:31:1d:a2:7e:
                    e0:df:1b:e1:5a:6a:ef:2d:91:b9:dd:1d:8b:48:8d:
                    cd:46:cc:88:7c:45:62:47:c8:2b:5a:89:b2:eb:56:
                    52:9f:03:fd:fb:37:34:c3:ab:77:0f:d0:0f:5b:79:
                    7b:8f:9a:1a:ce:d6:7b:14:4b:b1:ab:eb:06:27:5b:
                    47:82:29:c9:28:76:13:69:ed:d6:40:90:cd:10:98:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2B:29:65:B8:ED:C9:1E:B0:7F:F1:E8:1E:89:16:52:A6:16:7D:70
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d3332203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:78:83:b7:70:ac:4d:04:09:2b:b0:78:6f:f2:bc:f4:cb:
         85:2a:3c:10:7f:2c:34:99:63:10:26:70:ab:3f:cb:fb:08:10:
         c5:74:b1:57:5e:d0:28:69:73:7a:01:41:78:d5:a2:5a:78:a3:
         c2:78:e6:d8:c0:1a:ea:67:7b:26:7d:c6:3a:50:1e:11:fd:23:
         51:68:18:ff:b9:1e:35:b8:f0:5d:42:de:97:e4:8b:0b:a6:8e:
         0f:e0:e4:65:20:49:bf:22:c5:f5:27:94:b8:67:50:ba:8c:f4:
         7b:9e:cb:99:67:01:09:51:0f:c4:7d:b4:2d:11:02:f8:a1:ba:
         a5:96:2d:34:ae:e9:7a:32:73:46:a3:41:88:c6:06:3d:47:3f:
         30:30:da:b2:bf:3e:37:b3:2b:ec:02:17:a4:4a:2a:54:bf:94:
         92:d2:5d:73:3f:c4:fe:16:ed:9f:e9:df:49:86:50:09:b5:98:
         d5:93:c5:c5:13:42:70:dd:89:2d:ea:44:7a:64:ec:7d:16:3a:
         42:aa:c4:61:d5:2a:b8:87:f8:e5:77:c7:ca:72:5c:6b:4b:64:
         f3:b6:fb:29:84:e9:92:c8:7d:4f:6b:2c:26:14:bc:25:a6:e5:
         df:8d:ea:f2:e7:a7:87:13:69:04:d4:5d:b9:b6:40:45:46:06:
         83:9a:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:25 2026 by rpki-client