Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633030303a3a2f33392d3339203d3e20323635393139.roa
File:                     323830343a336664383a633030303a3a2f33392d3339203d3e20323635393139.roa (raw, json)
Hash identifier:          GC0UgbCEZaGpOiuqyFcW0ECM1Tvm3m6B20sPTkc/8Z8=
Subject key identifier:   EC:0B:0B:50:B4:D0:42:A0:B5:16:DD:51:6C:72:EE:3F:61:89:C3:A5
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       3BA71CBB9EB096CB1B3FC38C308A32AE63D1BA99
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633030303a3a2f33392d3339203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        2804:3fd8:c000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:1c:bb:9e:b0:96:cb:1b:3f:c3:8c:30:8a:32:ae:63:d1:ba:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=EC0B0B50B4D042A0B516DD516C72EE3F6189C3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:75:ec:fb:88:c7:da:dd:4a:3d:13:b5:af:
                    3f:c4:14:25:35:a9:50:4b:03:c8:f7:7e:f0:47:89:
                    5b:59:c3:bc:15:c0:ee:b5:24:26:93:97:80:ce:d7:
                    96:55:38:6a:83:fe:6a:4a:cf:73:2e:3d:6b:47:8c:
                    eb:7a:ef:d8:2f:89:4a:5b:91:a6:66:6c:c7:29:1b:
                    87:43:45:55:cf:73:17:68:ed:16:5c:58:c6:45:9c:
                    42:57:db:2c:df:c2:64:55:69:fc:1d:0d:ce:37:4f:
                    23:a1:65:52:b7:09:0d:98:89:7e:6a:26:9c:57:64:
                    5f:58:7c:9a:dc:b7:79:29:6b:81:e3:4d:7c:a3:49:
                    b5:ff:00:31:2f:b8:83:01:3e:74:4b:fe:fe:ca:62:
                    e1:81:b5:30:12:db:2e:88:29:d5:4f:12:53:f0:49:
                    b8:d1:09:79:b1:ea:6a:ae:df:08:5d:fd:f7:19:ac:
                    6b:4a:10:c3:e0:68:69:c8:0e:c8:c1:c7:5f:ac:aa:
                    1a:fd:4d:ce:ae:03:d9:c4:72:02:01:3f:53:cd:d4:
                    4e:ed:77:7a:88:56:ac:a0:9b:ee:87:03:9e:5b:50:
                    e6:b6:8e:95:74:5e:57:79:17:60:0a:ee:8f:8a:31:
                    ac:05:4e:fd:30:26:d2:ae:cf:8d:c8:68:eb:de:ac:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0B:0B:50:B4:D0:42:A0:B5:16:DD:51:6C:72:EE:3F:61:89:C3:A5
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a633030303a3a2f33392d3339203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:c000::/39

    Signature Algorithm: sha256WithRSAEncryption
         33:97:ac:0d:f6:a2:11:f4:b3:f4:80:53:d0:c6:89:63:5b:9a:
         01:ba:52:02:de:3a:d8:b3:a6:3a:fa:05:e7:61:ce:68:d9:3d:
         55:a2:8b:80:d5:28:85:9c:de:2d:cf:93:83:af:b8:9f:17:59:
         da:c3:45:e5:0e:db:b5:c8:64:d1:99:f4:84:5e:6a:f7:38:b7:
         6b:96:32:6a:ed:d9:1e:c3:ba:ef:db:28:3e:43:2a:87:e9:46:
         47:b3:39:e2:77:2b:a2:40:cf:04:5f:b3:89:c4:be:38:ae:18:
         fc:41:3a:65:10:1f:75:1a:f5:e9:4b:79:0a:5f:5d:1f:8f:a1:
         b0:ed:e7:26:c6:e5:97:87:70:02:07:72:2d:1c:47:e0:f7:87:
         b1:f4:50:50:7d:1c:01:bd:49:0b:15:48:fc:9b:94:b4:1b:df:
         b1:f5:63:95:a9:fb:dc:b9:23:e9:69:70:1a:df:9c:d6:b7:c0:
         0b:3a:a0:f4:ee:8c:ce:dd:d9:42:44:0c:ec:26:31:b3:21:54:
         3f:20:99:8e:66:6b:9e:73:94:0d:f3:66:0d:a1:e0:04:97:1f:
         8a:9a:33:3a:55:71:d8:7b:79:35:42:72:d6:8a:d8:d3:5d:d1:
         7d:72:e2:a5:38:b2:95:76:28:a4:04:be:ad:b4:56:e4:67:5b:
         78:95:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:29:17 2026 by rpki-client