Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          B9pp75FOj+w/2/Ze+cFx3EQQYWF82IsWP65deagCVDI=
Subject key identifier:   52:F9:50:4D:95:4C:F6:E4:C1:79:43:74:19:CA:D5:2E:A9:7A:89:EC
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       3F91E622A5A235E48E9CDE800A5DB90D52B006FF
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:42 +0000
ROA not before:           Tue 13 Oct 2026 15:17:42 +0000
ROA not after:            Tue 12 Oct 2027 15:22:42 +0000
asID:                     268296
IP address blocks:        2804:4efc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:91:e6:22:a5:a2:35:e4:8e:9c:de:80:0a:5d:b9:0d:52:b0:06:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:42 2026 GMT
            Not After : Oct 12 15:22:42 2027 GMT
        Subject: CN=52F9504D954CF6E4C179437419CAD52EA97A89EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:4f:a4:72:cf:84:65:88:3a:0c:1d:b9:b1:1e:
                    b3:40:13:c1:67:89:4a:9c:0c:77:1e:9c:11:ec:70:
                    d9:40:70:f8:16:e7:ac:01:1a:30:f3:7e:62:d8:31:
                    37:61:58:d3:1a:e3:53:86:00:86:af:0c:88:15:d1:
                    3e:53:fb:8d:56:1e:af:78:4c:dd:da:ce:65:59:b3:
                    c8:52:25:c0:b3:3b:68:76:02:b4:b2:01:c7:c5:84:
                    c0:b1:8c:ce:44:89:0f:8a:30:e7:34:c1:18:f4:66:
                    b9:32:23:d2:da:04:00:5f:7a:fa:2a:93:7c:27:a7:
                    98:1a:c1:dc:06:e3:1e:5e:72:f0:27:b6:55:7a:29:
                    6b:3d:10:82:32:8f:16:87:b7:4f:a0:e7:60:b2:16:
                    00:31:d6:56:23:34:c7:a1:57:a8:fc:36:35:95:a9:
                    69:2d:a2:9b:cb:dd:c3:36:ab:e4:38:16:7c:6b:7a:
                    24:5a:05:45:f4:a8:fc:b0:47:9c:6d:65:aa:d2:1f:
                    cb:c9:de:6b:74:03:12:f8:1e:8e:53:3b:e5:4f:5d:
                    a7:a3:55:a8:a7:58:2e:3e:9e:af:c9:ed:b3:82:e6:
                    61:4a:49:dc:91:bf:fd:d6:0f:a8:ae:5c:11:3d:1c:
                    fe:ed:9e:6d:69:88:cb:5f:6c:d1:cc:d6:b7:47:63:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:50:4D:95:4C:F6:E4:C1:79:43:74:19:CA:D5:2E:A9:7A:89:EC
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         00:60:1a:31:78:d7:60:5c:d4:4e:49:da:58:85:39:28:10:8b:
         0c:27:1d:96:5b:5c:fe:c7:0f:83:33:55:be:03:f2:ab:6f:4f:
         99:fc:b1:8f:2c:63:7c:02:d5:66:25:c1:f1:81:32:ed:8b:cb:
         48:b9:18:28:f0:e5:75:06:d1:59:44:4a:de:71:9c:d2:c5:6f:
         2c:75:85:79:2d:11:f6:3c:53:ac:9f:cc:d3:f6:4a:0a:39:f2:
         e1:5d:5b:e6:f3:ba:34:94:7a:7a:b3:75:b0:8f:46:e7:f4:7c:
         04:d6:05:08:ba:68:65:6b:0c:7c:11:2a:9c:84:51:8e:7c:38:
         7a:41:64:a4:b6:81:91:da:68:ac:00:df:0a:92:32:2c:d1:2a:
         27:9d:98:bb:24:28:fc:3f:e8:16:c9:aa:31:1e:9a:64:59:15:
         4e:52:ef:62:9e:12:c1:5e:20:f3:43:7f:59:bc:25:c6:a2:dd:
         d6:62:22:06:63:5d:95:bf:f4:dc:b3:1f:34:7a:2d:96:36:c7:
         4a:09:38:3e:f0:e4:c1:87:4e:c7:07:ba:f8:b6:80:10:23:6c:
         8f:49:9b:bf:15:cd:cb:ee:bd:f2:aa:88:cd:6b:1c:e7:60:e2:
         de:87:71:0e:04:a1:a3:6c:0a:e4:81:be:82:b6:1e:e3:0b:31:
         c5:cf:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:43:20 2026 by rpki-client