Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          oSxQAymujljftIKG8dkkLb3gyCZhh9zm6Nv02pR+kek=
Subject key identifier:   5A:3C:CB:78:13:10:A9:1B:C1:A4:BF:83:0A:D1:44:D4:A5:AE:D0:E8
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       4942907CE4CB2E46FE42103B8D16AC5286DB4834
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:43 +0000
ROA not before:           Tue 13 Oct 2026 15:17:43 +0000
ROA not after:            Tue 12 Oct 2027 15:22:43 +0000
asID:                     268296
IP address blocks:        2804:4efc::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:42:90:7c:e4:cb:2e:46:fe:42:10:3b:8d:16:ac:52:86:db:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:43 2026 GMT
            Not After : Oct 12 15:22:43 2027 GMT
        Subject: CN=5A3CCB781310A91BC1A4BF830AD144D4A5AED0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:23:9e:4f:1d:39:bf:1e:50:a2:55:37:ac:
                    4d:6b:bd:94:b4:f5:f3:cb:47:d0:6f:c3:da:cd:af:
                    91:00:2f:a8:68:40:58:c0:76:3a:b6:54:da:05:71:
                    d5:71:77:db:f0:65:db:5d:0a:b7:02:ca:73:c0:4a:
                    66:64:4e:89:78:90:a3:4d:3c:42:d3:f6:8a:00:97:
                    fe:fb:d4:d5:94:ca:81:33:6a:2c:cc:30:0c:61:ae:
                    f0:cc:ab:38:ef:91:ba:82:02:e2:ea:70:48:32:fc:
                    0e:73:b1:a3:a6:4c:0f:c8:5d:74:61:b0:60:c4:6b:
                    52:05:83:e7:3f:58:ba:39:b2:e2:28:80:11:77:e5:
                    e5:ea:a1:c1:7b:3b:96:8c:dc:b8:44:be:95:cc:d9:
                    55:ea:c6:e7:de:ac:94:95:a5:81:51:d7:de:ff:92:
                    68:f3:d8:8b:1b:1f:41:ae:32:6f:f2:cd:aa:ec:78:
                    42:0e:03:29:5b:16:ea:ad:a2:e0:83:d0:5b:7e:73:
                    a8:89:a4:b2:32:49:e9:31:24:16:7b:82:5a:95:54:
                    a3:45:99:80:09:39:01:f6:56:c1:55:3c:2c:37:65:
                    c8:1c:1b:8f:ea:b3:f6:b4:15:e8:94:5e:23:19:2f:
                    44:94:03:fd:9b:1c:81:42:f9:66:e7:26:80:a6:9f:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:CB:78:13:10:A9:1B:C1:A4:BF:83:0A:D1:44:D4:A5:AE:D0:E8
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:24:e1:a3:0c:e7:42:a2:1f:a5:79:5a:d0:9b:c7:3b:91:29:
         a6:de:f4:4f:28:f6:df:09:8c:7e:d2:91:70:49:f5:ee:0d:05:
         d8:af:db:63:5e:05:56:b0:46:be:81:ac:b1:c0:1e:ff:20:21:
         41:79:e3:c3:00:9a:08:58:40:76:34:82:28:d5:7b:24:0b:23:
         63:60:5e:ce:7d:a0:46:67:0b:d3:55:ad:58:f7:2c:5e:ac:f0:
         ec:4f:de:91:25:5a:f1:15:13:18:4b:d4:27:ef:5f:b8:fa:df:
         7a:b3:ec:8e:c9:4d:e8:e3:49:ba:da:7d:cf:88:f6:99:8c:bd:
         bf:9e:f8:b8:d7:1f:52:07:9f:cd:39:9b:2c:ab:a8:ed:e4:d8:
         33:f7:e3:b7:d9:92:79:63:b7:80:3f:24:82:f2:a0:8a:df:07:
         a8:c9:fa:88:20:24:32:49:32:1f:69:98:15:e5:60:6f:47:44:
         e6:21:24:1d:b4:8e:03:f8:b2:4e:b4:08:d2:14:24:36:b1:ff:
         2b:51:23:8c:94:34:27:be:90:5a:fb:d9:5a:a9:69:5d:ee:ba:
         13:c2:c2:85:0d:60:c6:01:50:ca:ae:71:7b:97:43:64:43:24:
         6e:3d:c6:b2:af:25:c3:6f:ce:39:6c:55:25:92:d8:4e:18:97:
         89:15:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:49:12 2026 by rpki-client