Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33332d3333203d3e20323733353232.roa
File:                     323830343a386665633a3a2f33332d3333203d3e20323733353232.roa (raw, json)
Hash identifier:          B+favXdd5vwAiINvL1KKBTKj1UVAzK0YplNWYRCtqYE=
Subject key identifier:   C5:2A:83:AE:39:97:91:A9:41:55:A1:CE:2B:AB:79:0B:2D:E2:FB:B1
Certificate issuer:       /CN=DC57055B0B41158846DE94BC370510769375E362
Certificate serial:       01C34FF28A206EEDCAFF22A8F83E024ED7E96608
Authority key identifier: DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33332d3333203d3e20323733353232.roa
Signing time:             Thu 17 Sep 2026 19:23:06 +0000
ROA not before:           Thu 17 Sep 2026 19:18:06 +0000
ROA not after:            Thu 16 Sep 2027 19:23:06 +0000
asID:                     273522
IP address blocks:        2804:8fec::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl
                          rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 19:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c3:4f:f2:8a:20:6e:ed:ca:ff:22:a8:f8:3e:02:4e:d7:e9:66:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC57055B0B41158846DE94BC370510769375E362
        Validity
            Not Before: Sep 17 19:18:06 2026 GMT
            Not After : Sep 16 19:23:06 2027 GMT
        Subject: CN=C52A83AE399791A94155A1CE2BAB790B2DE2FBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:b1:85:92:a4:a6:62:25:32:8a:7a:99:40:
                    95:02:99:59:16:a0:83:ac:6b:db:e1:0a:69:d7:54:
                    ed:07:0d:60:f1:10:07:b7:ce:56:21:30:3d:81:43:
                    98:56:6a:9b:33:6e:e9:c4:0d:51:b4:e0:c0:e6:d5:
                    a0:8f:0a:8b:09:a2:ac:d2:f2:e0:1b:14:c3:2b:1e:
                    78:8a:50:f1:90:58:b3:43:ab:b4:94:d8:09:9b:85:
                    d3:ab:fb:f1:3b:f6:f6:6a:36:16:a4:53:3e:36:0a:
                    98:75:53:6d:13:ce:21:53:42:d9:5c:26:cd:6c:a8:
                    29:fa:f3:d4:19:b7:bd:e9:4d:b3:32:e7:47:1b:1e:
                    e4:1f:e1:39:7b:dc:26:e6:ca:66:e2:1a:fe:98:c5:
                    f7:15:40:59:16:9f:72:d4:3f:c3:7b:97:60:60:44:
                    79:9b:ff:14:40:35:2e:76:bc:f7:b1:34:a7:9c:b0:
                    0e:e0:56:e2:00:a5:e0:4d:5d:d5:91:b8:b6:73:78:
                    b2:47:b0:8e:56:6b:e9:13:b4:18:04:60:0e:d5:a3:
                    3d:09:2d:5e:94:75:01:5c:b4:ef:97:77:d7:cf:47:
                    6f:e9:5d:5b:b3:23:d2:a8:de:9c:e1:e3:7a:46:4e:
                    55:bf:dc:44:76:83:30:f3:ca:70:1e:7d:51:89:f0:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2A:83:AE:39:97:91:A9:41:55:A1:CE:2B:AB:79:0B:2D:E2:FB:B1
            X509v3 Authority Key Identifier:
                keyid:DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33332d3333203d3e20323733353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fec::/33

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:79:4a:77:39:52:d9:c7:ac:35:df:53:2c:98:26:3f:2d:
         03:d1:2b:1c:78:be:2e:b9:8b:89:5f:52:d8:8c:b7:81:ab:e2:
         c1:65:bf:b5:d5:e1:c4:fa:2b:2b:26:e0:3f:47:ee:e7:83:16:
         13:ad:63:78:f0:1d:dd:cc:a0:65:2b:22:54:22:1a:93:29:53:
         0c:19:e4:8c:26:60:65:85:62:71:cd:1a:a0:cd:a3:90:b8:a1:
         d9:51:d9:0d:23:49:48:26:97:d3:e7:44:e3:fb:82:7a:0d:41:
         d2:66:a4:a7:ad:a9:8a:ca:37:22:80:ec:e9:e7:b9:0c:b9:7f:
         8f:aa:39:3c:d3:bb:e4:1c:35:7f:79:cf:e5:92:80:31:13:c6:
         93:37:a7:be:1c:11:ba:08:db:54:d2:c6:65:56:56:46:91:9a:
         64:44:79:5c:1b:9c:db:db:4a:f3:4d:c4:f0:ed:78:8c:af:c6:
         54:d0:76:33:e0:47:ae:7c:6e:74:08:5f:45:18:e7:2b:37:e5:
         47:ce:4a:c2:3b:16:90:17:2c:46:87:77:46:ff:7a:05:00:9b:
         7f:ee:e1:e9:e3:78:e7:8e:f0:18:60:3b:1e:e9:4c:de:38:45:
         95:46:23:f5:82:cd:01:b1:fe:3c:f5:72:d5:d0:4a:d9:99:78:
         3c:14:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:09:36 2026 by rpki-client