Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa
File:                     323830343a373334343a3a2f33342d3334203d3e20323730393035.roa (raw, json)
Hash identifier:          1PS/+LHDdqj9Obc8DpOUOo9I7DYHmStoLlzoDZUCeZs=
Subject key identifier:   2F:DF:86:E4:7D:9E:BB:7B:46:18:9E:80:96:EC:8A:E2:A9:C7:81:20
Certificate issuer:       /CN=68DD457AFD87757729E657881786601BF56ED45F
Certificate serial:       419582B3DE5CEFB15874B6B31D72015C859E43AF
Authority key identifier: 68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa
Signing time:             Wed 02 Sep 2026 16:55:26 +0000
ROA not before:           Wed 02 Sep 2026 16:50:26 +0000
ROA not after:            Wed 01 Sep 2027 16:55:26 +0000
asID:                     270905
IP address blocks:        2804:7344::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl
                          rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 12:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:82:b3:de:5c:ef:b1:58:74:b6:b3:1d:72:01:5c:85:9e:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68DD457AFD87757729E657881786601BF56ED45F
        Validity
            Not Before: Sep  2 16:50:26 2026 GMT
            Not After : Sep  1 16:55:26 2027 GMT
        Subject: CN=2FDF86E47D9EBB7B46189E8096EC8AE2A9C78120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:e0:d0:60:ee:b6:1b:8f:15:83:99:1a:61:
                    90:0d:02:8e:ac:68:f4:8a:cd:59:c4:04:99:06:3a:
                    78:d5:11:99:f2:4f:39:08:8e:03:2e:6f:62:9d:b6:
                    26:87:d7:a3:58:be:35:91:30:15:21:ac:d6:15:84:
                    76:d5:e0:40:6a:e4:4f:c7:f4:de:1f:a5:ec:d0:46:
                    bf:54:04:0e:43:1e:c0:67:73:33:e1:81:c5:74:1c:
                    b0:31:b1:91:47:0b:74:e7:fd:46:e7:ea:ee:4d:fe:
                    a4:eb:87:da:2d:1c:2b:e6:24:8f:0b:51:6e:49:24:
                    42:66:85:3f:75:cf:53:6c:b2:bb:9b:f8:bf:1f:0a:
                    d8:10:74:11:5b:5b:db:05:bc:07:6e:4d:66:f5:27:
                    50:8f:19:f7:d7:b4:af:75:e9:8e:1a:7d:f8:14:de:
                    8a:48:33:90:da:11:27:af:90:8c:1b:cd:3d:05:b4:
                    28:32:59:d2:e6:af:9b:66:b3:40:92:f6:d4:43:cd:
                    9d:8c:b7:19:80:d7:20:b6:42:c1:c9:e5:35:d2:47:
                    05:47:6f:14:4b:6f:41:6d:a3:a1:79:f0:15:a9:34:
                    c9:9f:fd:c0:e4:22:86:a0:bc:72:1b:8b:0b:b8:00:
                    45:09:50:03:2d:0b:c6:72:e4:6c:a2:a2:eb:f7:bf:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DF:86:E4:7D:9E:BB:7B:46:18:9E:80:96:EC:8A:E2:A9:C7:81:20
            X509v3 Authority Key Identifier:
                keyid:68:DD:45:7A:FD:87:75:77:29:E6:57:88:17:86:60:1B:F5:6E:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/68DD457AFD87757729E657881786601BF56ED45F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68DD457AFD87757729E657881786601BF56ED45F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YKQ4ervPmyor6kmSuLKBPk4jcrVT5fHYi3gpezh4qhF/0/323830343a373334343a3a2f33342d3334203d3e20323730393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7344::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:d7:9e:76:01:aa:e6:9e:58:6d:65:b1:fd:87:94:78:26:
         36:e9:a5:82:99:eb:1f:21:e5:d4:63:4a:0d:6c:91:56:fb:53:
         9e:09:7c:0b:3c:63:11:cc:86:66:7e:fb:11:f5:3d:84:57:8f:
         61:1d:41:eb:28:6d:a8:e2:66:2c:ed:d3:3c:98:7f:ce:8f:0c:
         12:76:3c:53:f7:eb:b8:78:ec:b2:bb:e3:6c:61:19:2d:24:aa:
         73:c6:57:11:b1:07:df:b7:6b:ff:40:17:eb:4a:00:23:a3:1c:
         62:12:13:7d:b5:ce:63:4d:cf:23:ac:68:47:71:5b:14:d9:7c:
         80:76:1c:ad:4d:77:b0:77:c7:cf:e6:2c:76:b1:42:c6:e1:f2:
         72:da:08:41:1f:37:dd:83:5a:31:b4:ac:88:ab:42:df:15:18:
         c6:f2:d2:cc:2a:09:f4:a7:e5:1a:39:9a:9c:8c:9a:31:76:76:
         39:fa:78:27:ca:e9:21:d3:52:62:04:9f:cc:79:39:96:c0:b3:
         8c:40:44:b0:9c:3a:0e:3c:eb:83:d1:4a:f1:48:03:dc:89:9c:
         1e:6b:cc:b0:62:52:10:65:44:aa:3d:dd:38:db:ca:c5:bd:f4:
         18:ce:f1:c2:8f:d9:f6:dd:91:6b:92:d0:3b:e1:13:12:ed:4f:
         08:4b:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:26:26 2026 by rpki-client