Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3438203d3e20323632333531.roa
File:                     323830343a336633343a3a2f33322d3438203d3e20323632333531.roa (raw, json)
Hash identifier:          gTG/3BG5iMRFn+wxIzUFtPnlVmhtPYcnzlA0+lFYdCc=
Subject key identifier:   64:B6:D1:5A:E9:EC:86:F0:83:2E:D3:E4:A8:A6:60:C8:D8:2B:8F:56
Certificate issuer:       /CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
Certificate serial:       2A3C2CB97645532843F1D146215CC57185E9994E
Authority key identifier: E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3438203d3e20323632333531.roa
Signing time:             Fri 09 Oct 2026 13:42:36 +0000
ROA not before:           Fri 09 Oct 2026 13:37:36 +0000
ROA not after:            Fri 08 Oct 2027 13:42:36 +0000
asID:                     262351
IP address blocks:        2804:3f34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl
                          rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 08:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3c:2c:b9:76:45:53:28:43:f1:d1:46:21:5c:c5:71:85:e9:99:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E114F59DC23A30872D43EF9D4D7FE4611207E709
        Validity
            Not Before: Oct  9 13:37:36 2026 GMT
            Not After : Oct  8 13:42:36 2027 GMT
        Subject: CN=64B6D15AE9EC86F0832ED3E4A8A660C8D82B8F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:bd:a2:b9:dc:cb:5b:59:2f:e4:65:97:b4:
                    5e:ad:04:00:e2:50:cb:2f:2c:99:5f:61:98:26:0c:
                    b1:34:93:a3:9d:82:06:6f:a0:d4:a5:e6:8a:0b:73:
                    87:04:d2:7d:cb:0a:03:2c:64:9b:1e:07:67:5f:49:
                    cd:98:7c:bb:70:67:79:7e:42:0b:f5:46:e4:e8:bc:
                    89:bb:8d:50:44:d3:93:72:41:3e:a4:17:20:98:1f:
                    72:d9:81:bd:66:8e:60:42:51:c7:c6:d6:79:33:7f:
                    a2:30:ec:ce:0a:37:e7:1a:52:76:6e:2f:e7:fd:45:
                    cd:b2:f5:8d:7e:2b:d8:af:a8:48:0e:08:96:c1:ec:
                    43:d7:24:9a:27:02:bd:84:26:e3:76:3e:12:7a:59:
                    35:04:31:b1:52:b6:59:db:b1:3b:78:af:67:51:70:
                    bc:6e:b7:b7:41:af:00:ef:bd:37:e1:3c:38:2c:c7:
                    42:79:06:5a:44:a0:f4:82:ae:93:8c:94:f4:30:e3:
                    36:d2:a4:f5:f7:89:4a:63:ba:55:7c:fc:9d:d7:c6:
                    d2:1f:c3:8c:fa:a9:b9:72:37:02:5f:65:45:df:54:
                    4a:f7:e8:8e:47:d2:b6:86:26:38:d1:c5:d7:7e:22:
                    56:14:7c:03:35:21:fe:a1:18:9e:81:56:6a:2c:68:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B6:D1:5A:E9:EC:86:F0:83:2E:D3:E4:A8:A6:60:C8:D8:2B:8F:56
            X509v3 Authority Key Identifier:
                keyid:E1:14:F5:9D:C2:3A:30:87:2D:43:EF:9D:4D:7F:E4:61:12:07:E7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/E114F59DC23A30872D43EF9D4D7FE4611207E709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E114F59DC23A30872D43EF9D4D7FE4611207E709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4URka6FBw8ZiJaYzgTdQLmRuMrPuvarBidVL8R3fgbW/0/323830343a336633343a3a2f33322d3438203d3e20323632333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f34::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:ef:da:6c:8a:8c:71:c9:60:59:27:9e:43:9c:0b:71:25:
         9f:36:2f:c1:08:6f:e6:7e:a7:bd:2c:44:da:ba:85:0e:e4:e7:
         30:0e:c7:04:fe:4c:25:a9:a4:9f:e5:7b:b5:af:a4:12:77:bf:
         e8:17:ad:5d:05:5b:ff:d2:68:51:f8:f8:67:90:c4:28:15:69:
         07:5f:47:29:b8:c7:92:11:f0:b2:0e:d7:2d:3e:13:3b:48:06:
         05:db:12:24:e8:f0:17:34:1b:8a:51:5e:fa:7b:1a:11:cb:6d:
         58:29:23:f3:e6:70:ad:b7:e8:23:7b:ed:d8:f7:74:e5:d7:78:
         cf:8b:3c:74:84:a9:ce:bf:43:17:7f:47:a8:98:13:e2:e7:9c:
         96:cb:36:e7:e9:2b:8b:c0:84:42:94:43:9e:a3:b3:a4:59:b6:
         26:cb:8a:75:38:d3:1d:3f:aa:68:20:e8:30:d8:dc:0f:50:12:
         ce:39:ef:a1:b5:e9:99:81:12:7d:c8:de:28:69:94:10:ea:96:
         75:ae:08:b6:7b:69:ca:db:58:6d:4d:de:c6:08:04:c8:34:bb:
         8f:0d:4a:c4:5a:54:60:b2:f6:fe:68:98:09:50:0c:b3:74:87:
         88:8f:32:39:c5:72:a6:c4:23:ca:fa:63:fa:22:d6:fe:2e:cf:
         36:ba:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:42 2026 by rpki-client