Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
File:                     323830343a376635633a3a2f33322d3438203d3e20323731363833.roa (raw, json)
Hash identifier:          MF44ODnpy5aFPge/2TSJUAUHv5yyIcQ1UN98ghM0zD8=
Subject key identifier:   F7:29:CF:D6:8F:53:50:87:22:46:53:C2:E7:0B:DA:69:C9:D8:23:B2
Certificate issuer:       /CN=12160C865E8914AF8B1FCA40CE51744A67B1E7CC
Certificate serial:       3146FEBD8D5B8AFEB9242E0EEC3531A46203F941
Authority key identifier: 12:16:0C:86:5E:89:14:AF:8B:1F:CA:40:CE:51:74:4A:67:B1:E7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa
Signing time:             Mon 14 Sep 2026 12:59:22 +0000
ROA not before:           Mon 14 Sep 2026 12:54:22 +0000
ROA not after:            Mon 13 Sep 2027 12:59:22 +0000
asID:                     271683
IP address blocks:        2804:7f5c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.crl
                          rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:fe:bd:8d:5b:8a:fe:b9:24:2e:0e:ec:35:31:a4:62:03:f9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12160C865E8914AF8B1FCA40CE51744A67B1E7CC
        Validity
            Not Before: Sep 14 12:54:22 2026 GMT
            Not After : Sep 13 12:59:22 2027 GMT
        Subject: CN=F729CFD68F535087224653C2E70BDA69C9D823B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:ff:a2:16:67:5f:e3:45:b2:7e:d6:f2:92:
                    92:c9:6e:93:1e:7b:ee:63:7c:fe:55:f9:09:68:ac:
                    8b:2b:ef:64:44:65:14:4d:35:60:75:41:69:41:f1:
                    33:24:6b:dd:1f:79:4b:75:ee:3f:da:52:a5:6f:55:
                    b2:c3:d6:4c:93:bd:48:59:85:e8:01:1b:b3:33:b9:
                    f8:d4:e4:1c:13:3d:29:ce:d8:7b:aa:dc:09:c7:53:
                    89:19:44:fb:7f:81:d1:3d:75:35:64:4b:78:62:0e:
                    ab:f2:5c:c2:f4:76:a4:9a:53:b2:e8:6b:78:37:95:
                    9c:97:ea:b0:fe:03:e5:ca:1f:7e:fc:76:ae:17:b1:
                    7c:e2:47:95:2b:4e:db:4d:9f:20:e1:68:f9:77:9d:
                    1d:a9:5f:72:b7:51:63:fe:aa:aa:fd:24:3f:58:94:
                    d2:1a:fe:d4:38:b4:d4:2c:40:97:98:99:ed:0d:3b:
                    32:42:fc:fb:10:c8:a3:1a:24:34:67:13:ad:a5:38:
                    3a:2f:8d:2e:9e:de:ef:0c:00:ba:b6:de:43:cc:ca:
                    e9:6a:aa:0b:66:1a:db:60:1d:6a:ba:ff:0d:75:03:
                    0d:21:90:a0:c4:7a:a0:06:b6:49:bd:cc:c3:fb:fb:
                    05:30:7d:2d:84:88:90:c5:a0:24:4d:17:c2:9b:44:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:29:CF:D6:8F:53:50:87:22:46:53:C2:E7:0B:DA:69:C9:D8:23:B2
            X509v3 Authority Key Identifier:
                keyid:12:16:0C:86:5E:89:14:AF:8B:1F:CA:40:CE:51:74:4A:67:B1:E7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12160C865E8914AF8B1FCA40CE51744A67B1E7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/323830343a376635633a3a2f33322d3438203d3e20323731363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:eb:45:d0:f3:6d:8b:52:62:06:c1:c0:4d:be:f7:ea:c1:
         99:e5:e4:cc:19:04:fc:1c:cc:db:55:a9:35:1b:0c:ec:cb:97:
         c5:a6:ed:58:a3:ef:81:04:c3:66:74:a7:0b:0d:bd:eb:65:cb:
         7a:d5:dc:06:3a:d4:09:5c:c3:4e:51:97:a6:ea:b4:7c:dd:28:
         b1:6d:97:b9:ed:af:62:8c:b2:af:5d:77:a5:50:92:b5:6e:dc:
         22:e2:f1:71:97:d5:b7:44:26:71:43:8a:23:68:36:57:af:11:
         43:23:0e:fb:b0:2a:21:d4:79:0d:1b:fd:0b:3c:d7:a6:05:14:
         68:78:0f:13:12:e2:4c:4c:62:be:bf:3c:6f:d3:3d:5d:66:83:
         4c:a3:c8:b6:08:7a:db:74:8e:b3:4d:02:bf:08:22:3f:a5:65:
         eb:76:97:d4:6c:32:d0:24:d4:b6:a3:2e:ef:8a:2e:86:86:e8:
         45:24:79:ea:2e:14:9c:f8:8e:6a:34:a0:b5:ac:0e:0e:2b:f4:
         93:0d:9d:5b:57:d3:ac:62:e2:78:07:10:2d:13:a4:91:f4:7c:
         9e:fd:b0:84:c7:53:92:81:74:02:74:d6:6e:f0:c1:06:e1:b7:
         d4:04:1f:e3:6b:99:9d:fb:29:06:2b:9b:99:69:83:82:67:3e:
         83:4d:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:04:28 2026 by rpki-client