Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/323830343a343638303a3a2f33322d313238203d3e20323636393933.roa
File:                     323830343a343638303a3a2f33322d313238203d3e20323636393933.roa (raw, json)
Hash identifier:          g797gAjIokUglvaWK+Rv4qcGFkkmnQlXiTBfO1zCqDw=
Subject key identifier:   E2:46:8E:61:6B:F0:0B:05:7F:2D:79:3E:6A:D6:6E:CF:9A:E4:06:E4
Certificate issuer:       /CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5
Certificate serial:       6BB567CF8F44C3A980714FFB00FC8230D61D585D
Authority key identifier: D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/323830343a343638303a3a2f33322d313238203d3e20323636393933.roa
Signing time:             Tue 29 Sep 2026 04:02:41 +0000
ROA not before:           Tue 29 Sep 2026 03:57:41 +0000
ROA not after:            Tue 28 Sep 2027 04:02:41 +0000
asID:                     266993
IP address blocks:        2804:4680::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl
                          rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b5:67:cf:8f:44:c3:a9:80:71:4f:fb:00:fc:82:30:d6:1d:58:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29B42908CC29F329464DE38C3D03CB9E63C3DC5
        Validity
            Not Before: Sep 29 03:57:41 2026 GMT
            Not After : Sep 28 04:02:41 2027 GMT
        Subject: CN=E2468E616BF00B057F2D793E6AD66ECF9AE406E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b7:34:f1:c8:50:08:ec:75:d4:4b:5d:83:7a:
                    79:ec:fe:b3:45:77:8f:70:8a:ae:13:13:6b:73:e8:
                    9f:21:f1:64:e9:21:44:1b:00:20:38:cd:96:40:47:
                    f6:1d:40:b8:e1:59:13:de:c2:13:a0:79:a7:1d:0f:
                    cc:07:f2:b5:1d:3e:86:4a:81:e8:2b:be:1a:35:7f:
                    0f:ad:ed:88:3d:98:49:4c:8e:51:1f:85:b0:30:3a:
                    da:c1:f5:39:79:6a:3b:70:0f:68:f2:1e:70:78:aa:
                    cb:ad:d4:8f:4a:44:94:c9:e7:f3:6e:a3:38:d0:08:
                    91:c8:23:c9:02:dc:0d:be:be:ab:f5:73:2e:13:22:
                    ca:7f:df:40:07:93:9c:07:8f:8b:61:57:b8:e9:26:
                    28:24:25:e2:14:0b:5c:70:3b:7e:e6:d2:03:3c:e0:
                    c3:cd:9f:1d:76:7b:05:a0:f2:59:db:4b:83:3d:0b:
                    df:bc:12:0f:c1:28:39:19:57:b6:62:9c:91:c3:d5:
                    85:c1:5b:2d:2a:d3:45:14:05:02:6c:8d:2a:20:49:
                    8e:8b:ff:c3:c1:57:bd:12:4b:3f:5e:24:45:b6:73:
                    d6:27:39:fa:98:cf:56:3d:4e:f5:ab:ae:67:43:b8:
                    5b:27:a2:be:64:c9:f7:c3:4e:0f:d2:3e:c6:9d:53:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:8E:61:6B:F0:0B:05:7F:2D:79:3E:6A:D6:6E:CF:9A:E4:06:E4
            X509v3 Authority Key Identifier:
                keyid:D2:9B:42:90:8C:C2:9F:32:94:64:DE:38:C3:D0:3C:B9:E6:3C:3D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D29B42908CC29F329464DE38C3D03CB9E63C3DC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdW2tgvChBfisJX972XVc5fuke9FTM2cDasttYNAEx7q/0/323830343a343638303a3a2f33322d313238203d3e20323636393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:c8:a6:b0:12:8a:07:af:34:3c:a9:2c:67:f0:36:63:64:34:
         69:ca:05:39:f8:7f:c2:42:10:98:13:29:31:58:79:c5:d5:3e:
         25:53:ed:95:c4:60:c4:a8:1d:1d:e3:69:ac:3f:38:8c:82:82:
         75:d4:68:86:f7:7d:d7:57:4e:7e:3c:a6:6d:47:bc:ca:1d:1a:
         cc:c8:82:6e:e9:e7:fb:09:07:02:e1:4b:b9:d4:0e:aa:66:cb:
         0c:98:a5:89:81:dd:6e:03:70:a6:fb:2f:63:da:37:98:78:3b:
         07:92:a5:be:eb:b6:f9:8c:03:e3:e6:9b:c0:70:d1:2d:41:08:
         a6:91:a9:af:c3:6f:7f:17:60:92:ad:1b:e1:84:2f:03:29:b9:
         89:8b:b1:05:17:42:79:a0:a1:9d:f2:61:06:a9:3c:b8:4f:82:
         b7:a8:8e:92:78:3b:fb:98:bd:de:d1:c6:69:a4:ac:0d:3e:be:
         2f:40:84:de:75:d3:3a:74:4b:b7:79:90:50:1f:4a:35:9c:f0:
         0e:77:72:3f:a7:af:6f:c4:a5:9b:d5:99:c9:8c:c7:9f:28:82:
         1f:d9:19:df:00:be:c4:f8:8e:8f:d1:db:78:67:88:5c:f0:c9:
         ff:c3:c4:bc:d1:c0:d9:83:cd:3b:56:5c:eb:1e:b5:43:67:fa:
         84:29:0f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:44:42 2026 by rpki-client