Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa
File:                     323830343a3263383a3a2f33322d3438203d3e20323632383337.roa (raw, json)
Hash identifier:          TAYIXU2BkMbqjW5gRB0lF6LtQM5b/fEIUbxr0ii+Ybk=
Subject key identifier:   93:E8:98:17:5F:69:64:D1:13:88:85:30:2C:64:3D:27:3F:DA:6C:C5
Certificate issuer:       /CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
Certificate serial:       33294B825AFBA10C71329372BB8C1EB87B1BB456
Authority key identifier: 81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa
Signing time:             Wed 02 Sep 2026 18:03:04 +0000
ROA not before:           Wed 02 Sep 2026 17:58:04 +0000
ROA not after:            Wed 01 Sep 2027 18:03:04 +0000
asID:                     262837
IP address blocks:        2804:2c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl
                          rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:29:4b:82:5a:fb:a1:0c:71:32:93:72:bb:8c:1e:b8:7b:1b:b4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8141E7C75D3371F4891856DDE87486ECDF37AC3B
        Validity
            Not Before: Sep  2 17:58:04 2026 GMT
            Not After : Sep  1 18:03:04 2027 GMT
        Subject: CN=93E898175F6964D1138885302C643D273FDA6CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:a7:a9:fc:b0:01:be:3e:be:7e:86:2e:68:
                    13:47:b1:4f:6f:52:72:b0:85:51:ce:ae:2f:a8:a8:
                    f1:1a:c2:08:ee:43:bf:30:ce:dc:da:54:37:36:19:
                    d7:d3:77:f2:f7:10:e9:01:bd:6d:93:fd:c2:1a:9b:
                    5f:e5:04:7e:86:6d:3f:33:8e:1a:7d:37:d7:26:cd:
                    6a:67:97:e5:64:d1:47:99:0b:ff:59:88:c5:e3:19:
                    af:35:6b:07:79:c6:de:2f:ce:58:1e:5d:4e:26:a2:
                    f3:49:fb:06:73:d9:ae:82:f4:21:fa:eb:42:db:9a:
                    d6:20:b7:34:f1:bd:29:c2:37:e2:74:8d:fd:8c:48:
                    9c:38:6c:0b:13:b3:46:f9:c8:c6:8e:f4:13:50:02:
                    cd:60:1b:e1:7c:8b:b4:38:1c:04:46:4a:3c:02:10:
                    54:4d:72:2b:f1:d7:e8:2e:b1:43:5d:ef:9a:94:3a:
                    9a:a7:b2:f1:60:8c:c4:25:3a:4d:f5:ab:71:0f:bc:
                    d4:7d:4e:e0:41:3b:60:04:ae:90:21:72:2f:46:0b:
                    e1:a6:a1:78:d2:77:95:9e:f4:79:43:f4:fc:15:1f:
                    c9:d0:46:ab:d5:69:1f:64:f5:8f:a8:49:71:72:1c:
                    ba:9b:78:c7:0c:cc:27:45:f5:63:7f:a5:f2:fe:c2:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:98:17:5F:69:64:D1:13:88:85:30:2C:64:3D:27:3F:DA:6C:C5
            X509v3 Authority Key Identifier:
                keyid:81:41:E7:C7:5D:33:71:F4:89:18:56:DD:E8:74:86:EC:DF:37:AC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/8141E7C75D3371F4891856DDE87486ECDF37AC3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8141E7C75D3371F4891856DDE87486ECDF37AC3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AnujZMv6u1zoTXgU5mPEgUBKEZqHpdVUgSCcnCG7NTKM/0/323830343a3263383a3a2f33322d3438203d3e20323632383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:16:f5:62:fa:c1:b1:d4:d5:97:21:f9:ea:0b:18:38:12:
         e2:75:25:17:9f:02:34:7a:45:67:d6:df:fd:27:eb:a3:bb:ae:
         fb:02:df:24:2a:7c:72:90:e8:a3:35:8a:b7:a7:33:77:b9:fb:
         db:79:07:8a:03:00:2e:fc:05:6e:45:f2:bf:6f:06:66:40:03:
         66:38:f4:77:ab:b0:48:16:31:10:58:12:bb:c1:24:39:cc:92:
         a1:49:cb:04:2b:a5:54:ad:f3:1a:58:fe:74:5f:2a:34:93:a1:
         3a:80:62:84:f5:f6:31:3b:6a:a6:96:f6:fd:43:93:6b:03:27:
         66:f7:6a:02:a4:4f:80:e8:bd:2a:98:15:7a:ff:23:26:72:d8:
         86:91:93:5d:ae:72:82:99:8c:28:e0:93:8b:0e:e7:06:a1:f8:
         40:2d:e5:9d:45:ab:3d:1a:3d:be:1b:e1:5f:80:b7:52:1d:b3:
         af:49:92:a9:33:c4:80:e3:f4:05:19:e7:92:64:c2:d6:b6:67:
         de:a1:88:fd:78:a1:e2:ab:d5:dc:0a:00:8d:ce:29:99:e4:ec:
         e1:d0:6a:ac:c4:3e:fd:13:69:52:d9:d3:5c:d5:fc:b9:6c:b8:
         3d:1e:a5:39:3c:b1:9c:dd:60:fb:8b:99:f5:3b:16:90:eb:18:
         3b:cf:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:12:12 2026 by rpki-client