Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33332d3333203d3e20323638323936.roa (raw, json)
Hash identifier:          rKd0rpgr07/HjdgBGJ3o5FJt3HKcYyP3jsUuKl7YMDQ=
Subject key identifier:   B3:2D:34:1F:89:5F:C9:4A:55:F8:7E:4C:CA:A9:86:C8:B5:BC:F7:3E
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       592E171A29EC95FA59E09029FA623AFBB7B0D521
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:46 +0000
ROA not before:           Mon 28 Sep 2026 15:02:46 +0000
ROA not after:            Mon 27 Sep 2027 15:07:46 +0000
asID:                     268296
IP address blocks:        2804:4efc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2e:17:1a:29:ec:95:fa:59:e0:90:29:fa:62:3a:fb:b7:b0:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:46 2026 GMT
            Not After : Sep 27 15:07:46 2027 GMT
        Subject: CN=B32D341F895FC94A55F87E4CCAA986C8B5BCF73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:44:12:cc:e7:4f:9b:20:55:dc:7d:cd:9a:
                    b5:5c:fa:80:78:38:72:74:60:7e:95:40:ef:42:11:
                    94:9d:23:90:ef:b5:8f:7d:42:68:42:31:1d:20:6f:
                    2c:3a:fa:3c:77:0a:48:e3:57:f4:8f:4c:e4:d5:ff:
                    f1:af:f1:08:56:6d:00:f8:48:be:e1:59:80:05:5d:
                    e9:25:18:04:1f:50:74:a1:e3:6e:01:ea:16:f2:80:
                    c9:bf:53:7c:04:e6:56:7d:5c:fb:fa:95:6b:3f:77:
                    66:bd:f0:71:ee:22:22:1f:4a:94:ee:a4:7a:5a:34:
                    bf:a8:3e:d0:39:c4:ae:33:50:7a:fd:61:a7:45:6c:
                    1b:7b:28:39:c6:93:cd:1e:26:8a:3d:5d:d5:90:65:
                    d0:ce:a9:d2:c5:d2:b8:07:ff:b3:c5:33:d9:ea:a4:
                    95:09:bd:77:1a:55:5d:0f:56:32:e5:ed:28:80:bc:
                    a9:41:30:73:46:cc:6e:ee:43:0f:ff:7f:6d:85:1e:
                    f0:fc:a7:f3:83:77:58:83:fa:ad:31:55:a1:7e:8b:
                    ea:a2:96:de:8d:9d:91:5b:e0:1f:d8:f0:a1:69:b3:
                    63:c6:ee:af:2b:19:65:f1:de:76:c9:94:0f:76:74:
                    96:b0:56:f2:d5:73:e3:4f:59:ce:4a:78:b4:96:65:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:34:1F:89:5F:C9:4A:55:F8:7E:4C:CA:A9:86:C8:B5:BC:F7:3E
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33332d3333203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:d7:d5:2f:bb:54:30:ee:b3:ba:5e:7f:a2:5e:5c:74:84:
         86:4c:51:a3:c4:4b:6e:9e:b6:8f:b4:b9:d9:cd:fc:c5:aa:b2:
         00:89:de:7a:27:92:fd:9f:e3:96:23:e0:66:da:f5:5c:e6:0f:
         d5:63:c0:4c:aa:5e:d0:d0:bc:19:51:05:6c:f0:ae:e2:07:27:
         0e:a4:c2:2c:cf:69:6a:01:df:09:f7:91:3b:95:aa:26:a6:e5:
         1b:6a:7a:93:77:b9:ac:69:79:60:26:11:c7:9c:67:d3:d8:cf:
         9f:8b:e7:d0:2d:f9:0a:43:07:ba:9b:de:59:15:e1:4d:be:d7:
         63:44:0a:84:bf:bd:bc:61:d4:49:ed:3b:78:0f:8f:0a:60:99:
         1c:58:43:08:44:1f:eb:1a:dd:da:99:1c:64:f1:eb:52:5d:49:
         a0:78:5c:01:1a:67:12:57:4c:71:f5:5c:21:e0:c2:dc:69:b6:
         cb:66:50:54:26:2c:cd:4e:f5:f8:3a:02:5b:22:38:ee:be:14:
         8b:3c:43:cb:04:bc:4a:e2:09:74:b8:46:52:96:33:2d:42:d6:
         47:b4:05:de:d2:a3:59:b3:98:5a:67:15:ab:52:9b:9f:e5:6e:
         2c:32:0b:5f:70:de:28:f5:2c:c1:a6:91:da:14:be:30:f2:ff:
         5b:fc:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:46:47 2026 by rpki-client