Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          2jXfVKYc3Bq11qmmCbmNCe9JIFOfxcOR5E6Z3SXnsrM=
Subject key identifier:   9F:62:BE:10:15:A4:3E:D2:DF:E1:1B:88:76:68:7F:3D:78:C5:D9:2D
Certificate issuer:       /CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
Certificate serial:       4912839387D1837C85CACC610771470F8C30ACE1
Authority key identifier: 62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Tue 13 Oct 2026 15:22:41 +0000
ROA not before:           Tue 13 Oct 2026 15:17:41 +0000
ROA not after:            Tue 12 Oct 2027 15:22:41 +0000
asID:                     268296
IP address blocks:        2804:4efc:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 16:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:12:83:93:87:d1:83:7c:85:ca:cc:61:07:71:47:0f:8c:30:ac:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F
        Validity
            Not Before: Oct 13 15:17:41 2026 GMT
            Not After : Oct 12 15:22:41 2027 GMT
        Subject: CN=9F62BE1015A43ED2DFE11B8876687F3D78C5D92D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:45:c0:dc:13:f6:ba:8c:21:b3:59:6b:77:
                    93:94:79:b8:db:bf:3b:15:ae:d0:c3:ab:3c:26:55:
                    b7:65:6e:93:1b:bb:3c:31:7b:fa:65:85:d6:11:2a:
                    b2:56:fc:8a:ee:0f:0b:24:2e:71:80:e7:3a:9a:43:
                    ed:5b:00:32:09:69:4f:75:eb:b7:38:ae:15:4f:57:
                    59:6a:13:02:0f:2d:7b:c9:11:aa:d4:d9:62:52:6d:
                    9b:64:9f:61:0e:9b:61:75:db:91:00:e3:43:11:ea:
                    08:1b:37:72:09:e2:25:34:f3:13:0b:2d:7e:b8:e5:
                    33:88:09:a8:14:2c:4e:49:c5:b0:ca:ae:c0:7d:d3:
                    2e:fb:d3:91:5b:11:e4:bf:d1:f2:aa:80:3b:90:bc:
                    af:a8:8a:3d:a0:60:69:87:16:0b:ea:01:4f:de:a6:
                    2e:b4:fd:f6:2c:3f:45:0f:9a:13:60:36:1b:c3:b5:
                    c3:6c:ac:b3:3f:2e:42:ea:a7:6d:90:a7:0c:82:9d:
                    5d:32:5c:37:5e:ee:82:3d:44:72:c6:85:fc:5f:07:
                    50:6b:b8:19:66:c3:91:3f:d9:47:a6:58:3c:5d:74:
                    54:ff:64:db:91:a0:50:90:8e:06:a1:db:35:94:d0:
                    bf:a5:af:0e:cc:04:49:09:4e:46:bf:c5:b9:0e:95:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:BE:10:15:A4:3E:D2:DF:E1:1B:88:76:68:7F:3D:78:C5:D9:2D
            X509v3 Authority Key Identifier:
                keyid:62:04:0E:0F:83:8A:09:ED:AD:38:CB:7E:6B:6B:BB:DC:23:B1:CB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62040E0F838A09EDAD38CB7E6B6BBBDC23B1CB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a623030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:e2:4a:81:c6:8d:be:26:cc:47:e0:00:b8:28:48:75:2b:32:
         8b:3a:42:8f:46:0c:46:b3:2d:d3:e1:9e:ad:e0:8c:f0:cf:4d:
         94:7c:ec:fb:51:27:67:4f:a4:0a:bb:e9:2a:f3:cf:85:93:b9:
         f8:3c:aa:77:e5:f8:cc:e7:cc:36:0c:f3:71:db:d8:b1:e5:50:
         6d:09:40:4b:4a:d8:e3:e6:30:83:f1:8c:0b:3c:50:04:dd:f3:
         db:56:ec:03:84:60:9d:3e:1c:d2:2a:89:13:d2:98:aa:8f:0c:
         8f:7a:a9:c8:ff:17:d2:99:c5:78:9d:18:c9:57:e2:cf:2a:bc:
         06:d1:48:f1:e6:ea:8d:10:d5:20:27:59:56:8a:78:1f:c7:d9:
         b1:8e:0b:00:d2:b1:b8:55:78:79:6a:d0:9b:4c:ed:ca:5d:f6:
         01:b4:2c:1d:81:06:36:4e:47:bc:bd:25:06:da:16:d7:8d:8d:
         7f:1b:77:6c:bc:d1:55:99:89:c4:d4:a3:e9:9b:53:6f:11:61:
         1f:ef:c9:05:04:7d:d6:63:73:19:67:72:a5:5d:a2:81:0d:42:
         33:d9:5f:41:1a:c6:4a:ed:40:18:95:1c:44:dd:8b:90:a6:c4:
         b7:8b:1c:1e:cf:d4:27:77:52:90:b5:90:91:6f:22:30:ee:f5:
         41:24:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:10:48 2026 by rpki-client