Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33342d3334203d3e20323733353232.roa
File:                     323830343a386665633a3a2f33342d3334203d3e20323733353232.roa (raw, json)
Hash identifier:          QSM6DZGhpDwW26D4JF5dQDJHUvYB8Rp+p5r0UDrJOS4=
Subject key identifier:   3C:3D:A6:47:25:91:A8:D1:17:72:D7:D5:64:ED:D2:76:FE:F6:32:A0
Certificate issuer:       /CN=DC57055B0B41158846DE94BC370510769375E362
Certificate serial:       62CBFA72B9286904E3BF0B62E7AE2D282603852C
Authority key identifier: DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33342d3334203d3e20323733353232.roa
Signing time:             Thu 17 Sep 2026 19:23:04 +0000
ROA not before:           Thu 17 Sep 2026 19:18:04 +0000
ROA not after:            Thu 16 Sep 2027 19:23:04 +0000
asID:                     273522
IP address blocks:        2804:8fec::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl
                          rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cb:fa:72:b9:28:69:04:e3:bf:0b:62:e7:ae:2d:28:26:03:85:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC57055B0B41158846DE94BC370510769375E362
        Validity
            Not Before: Sep 17 19:18:04 2026 GMT
            Not After : Sep 16 19:23:04 2027 GMT
        Subject: CN=3C3DA6472591A8D11772D7D564EDD276FEF632A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:68:d7:67:62:bc:23:f3:dd:29:e8:4a:19:
                    f3:cd:dd:23:89:23:cc:1d:a2:1b:fb:8b:49:9c:3d:
                    68:f2:79:52:8f:c9:dc:98:8f:aa:c5:14:60:43:83:
                    9e:9b:2f:2b:17:b5:bb:fc:fe:de:78:30:4a:9d:13:
                    e3:0d:23:32:af:0d:e7:53:b5:d6:9b:3a:fb:9e:a2:
                    75:ef:9c:5a:37:c4:60:37:47:84:31:b3:f4:ed:aa:
                    64:e9:b2:11:e7:e3:5f:f1:e9:43:f0:0b:ee:dc:43:
                    ce:19:ea:80:43:25:a1:a2:9b:ce:9d:a7:cb:f5:b1:
                    e6:94:67:ef:c6:fd:c3:2b:69:36:5e:35:68:49:93:
                    6c:33:6d:69:53:6a:03:d5:3a:a7:95:05:43:72:0e:
                    1f:d6:10:0c:8d:ca:1c:9f:ad:0c:4d:76:bf:ec:41:
                    b8:43:b0:8d:f1:56:14:50:bb:5f:e8:6a:57:64:e4:
                    ca:b6:44:b3:be:d1:45:d1:e2:f1:33:5b:c6:6a:b2:
                    df:79:92:de:42:6a:0f:dd:6f:7a:72:4a:50:d7:8f:
                    4f:de:f5:f5:eb:48:aa:3e:c8:78:9a:30:0a:dc:5c:
                    06:bf:25:aa:a4:a4:c1:75:91:93:15:f3:21:95:17:
                    51:3d:ac:29:d1:5c:b6:1d:13:ae:3e:03:03:32:10:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3D:A6:47:25:91:A8:D1:17:72:D7:D5:64:ED:D2:76:FE:F6:32:A0
            X509v3 Authority Key Identifier:
                keyid:DC:57:05:5B:0B:41:15:88:46:DE:94:BC:37:05:10:76:93:75:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/DC57055B0B41158846DE94BC370510769375E362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC57055B0B41158846DE94BC370510769375E362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XenBWbn3N5tcHMbgPoe9zQDyeKPTZ6nomjaXnFqomnp/0/323830343a386665633a3a2f33342d3334203d3e20323733353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fec::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:ff:19:2d:50:8e:8b:a2:3d:9b:6f:cb:f6:3a:5d:21:19:
         c4:f8:86:03:67:6a:bb:d9:f5:23:c4:8b:f0:88:a8:27:c0:2a:
         59:73:d9:dc:ff:53:43:33:18:6a:a4:92:44:5c:5a:31:e0:72:
         a3:f9:be:19:b2:f1:41:dc:e5:49:7d:64:36:c8:ef:e7:bf:68:
         8b:3f:e2:70:7c:27:fa:67:bd:72:59:e6:cf:59:83:10:1c:40:
         b4:b5:e5:87:5e:6e:4a:77:77:e7:9a:f2:29:97:b8:49:34:7f:
         72:e0:e9:99:52:6b:e1:a1:29:3d:d2:eb:17:8c:7c:46:5f:f2:
         22:e8:f7:f6:3f:0b:8b:25:34:3c:77:f6:d1:eb:25:3e:78:d7:
         01:c1:15:e2:ce:ec:90:34:56:6b:f2:cd:56:fb:0a:33:3b:1f:
         9c:a9:e6:b0:cc:7e:0d:8d:1e:64:ce:b9:b8:f1:59:57:46:d5:
         08:01:06:6b:a3:39:ce:b2:7a:5c:ac:80:de:ab:f5:a0:45:3a:
         5d:69:74:cc:2a:83:34:8f:22:f7:a4:48:00:2c:c3:19:0e:f4:
         c8:e1:4a:84:3a:dc:40:0f:85:4e:42:80:91:ff:7b:a4:76:9a:
         1c:bf:c5:1a:43:62:02:9a:f2:4f:64:91:f3:fc:89:2c:6f:7e:
         fb:94:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:06:16 2026 by rpki-client