Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/323830343a383966343a3a2f33322d313238203d3e20323733363337.roa
File:                     323830343a383966343a3a2f33322d313238203d3e20323733363337.roa (raw, json)
Hash identifier:          bTpbWjtwdqUOD7tR0OnhwpYeWnRNsB2FPI3SPIZdL+U=
Subject key identifier:   99:BC:C2:78:17:81:A8:2E:5B:DD:32:66:9D:4C:14:39:4B:1D:F6:58
Certificate issuer:       /CN=D70DFF7F142709578CA194217E583E38F1885AEB
Certificate serial:       588CC53F5EA2BBB9530D79AFD7472FEC60FD88E6
Authority key identifier: D7:0D:FF:7F:14:27:09:57:8C:A1:94:21:7E:58:3E:38:F1:88:5A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/323830343a383966343a3a2f33322d313238203d3e20323733363337.roa
Signing time:             Wed 02 Sep 2026 00:39:00 +0000
ROA not before:           Wed 02 Sep 2026 00:34:00 +0000
ROA not after:            Wed 01 Sep 2027 00:39:00 +0000
asID:                     273637
IP address blocks:        2804:89f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.crl
                          rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 00:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:c5:3f:5e:a2:bb:b9:53:0d:79:af:d7:47:2f:ec:60:fd:88:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D70DFF7F142709578CA194217E583E38F1885AEB
        Validity
            Not Before: Sep  2 00:34:00 2026 GMT
            Not After : Sep  1 00:39:00 2027 GMT
        Subject: CN=99BCC2781781A82E5BDD32669D4C14394B1DF658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:74:8d:d2:48:ab:fc:6a:11:97:f9:26:77:
                    17:fc:b6:05:64:04:c3:cd:9a:17:fd:70:f1:2b:2d:
                    0b:6f:de:3f:49:79:77:c3:b6:bb:f7:60:9d:8f:5d:
                    19:09:65:1c:77:bf:7c:9f:0d:d0:6d:47:c8:97:2c:
                    fe:c4:c3:31:44:3d:9f:ad:4b:ad:a8:7e:76:4e:db:
                    09:2a:5f:62:de:f3:a3:c3:e1:92:c2:72:74:cf:33:
                    09:97:22:08:fd:66:35:24:c8:ee:0f:5b:25:f4:7c:
                    a2:75:4b:7d:33:d1:26:51:34:5c:e5:23:f8:ea:23:
                    6c:36:e9:36:06:61:91:11:3e:f3:07:4a:f7:b8:72:
                    d6:a6:b4:e3:66:c0:9a:42:f8:e4:45:cf:2c:31:f4:
                    d8:b7:21:ef:19:fc:b2:9d:c3:1a:5f:e6:b6:7b:ec:
                    34:08:e9:b1:1e:b6:e5:07:1b:39:74:be:1a:85:5a:
                    85:b1:68:e4:34:6a:17:b0:9d:2b:9a:ce:bd:23:ba:
                    6a:ff:15:bb:95:c3:cd:c8:fc:a0:84:3d:19:fd:6c:
                    10:79:17:cd:fa:4b:c3:7b:3e:19:66:a4:86:dc:12:
                    f0:e6:7c:00:0f:9f:f7:bb:2a:a8:3c:ec:b1:a7:4a:
                    a2:84:6b:55:8a:cf:aa:95:6c:bd:47:9e:24:0a:e8:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BC:C2:78:17:81:A8:2E:5B:DD:32:66:9D:4C:14:39:4B:1D:F6:58
            X509v3 Authority Key Identifier:
                keyid:D7:0D:FF:7F:14:27:09:57:8C:A1:94:21:7E:58:3E:38:F1:88:5A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/D70DFF7F142709578CA194217E583E38F1885AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D70DFF7F142709578CA194217E583E38F1885AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BqY9FxT9YXwAjVoQx8zHqv7HLSA4hguDDwuQUTTiwmvC/0/323830343a383966343a3a2f33322d313238203d3e20323733363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:df:7e:f0:5b:c7:10:eb:d2:f9:e1:0a:83:db:6f:52:03:8a:
         5d:70:0b:2a:6a:7e:d8:ec:69:30:ef:fe:02:df:37:00:13:b4:
         95:3a:cc:d4:08:a4:a2:6b:e0:92:32:b1:ec:b1:cd:db:8d:3a:
         b5:fd:90:d7:6e:7c:d9:06:bf:18:90:71:85:92:7b:76:ef:71:
         30:69:8f:68:85:63:21:d4:01:e9:74:80:b5:b1:6e:29:30:bf:
         88:7e:3a:c5:34:09:7b:1f:b3:ba:69:87:15:1b:66:c5:cb:c9:
         2f:b2:b7:a2:40:77:18:06:16:ed:88:13:83:d1:bb:2a:e1:53:
         ba:31:e5:ec:62:cb:8d:31:7d:0a:a8:10:80:9f:41:2b:f8:57:
         cf:d7:67:ba:f5:04:7e:df:9b:74:b6:49:6d:de:e3:b1:0c:b2:
         71:b8:98:b5:b1:f6:a4:87:6d:ec:9e:33:77:46:7b:d0:88:d6:
         a6:7a:1a:0d:83:91:6f:6f:51:f7:b0:af:4c:cc:7b:03:41:4e:
         c4:3f:a7:5c:f5:74:be:b0:fa:a8:15:4b:b4:1f:d8:df:c2:5e:
         64:67:f4:b6:2b:75:b2:75:e1:73:33:74:c5:bc:71:f2:79:7d:
         b3:8f:a7:74:bf:fd:bd:e8:20:39:cc:05:56:46:d2:42:08:93:
         c3:c8:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:23:34 2026 by rpki-client