Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/323830343a393237343a3a2f33322d313238203d3e20323734373133.roa
File:                     323830343a393237343a3a2f33322d313238203d3e20323734373133.roa (raw, json)
Hash identifier:          nQMSFz2Ol4E0jWpr0A64DALt75ZU3CpoyN40QTHl3fo=
Subject key identifier:   A0:86:DC:14:6C:BB:BF:6B:FB:F6:E4:BD:92:11:BE:8D:C4:1D:93:CF
Certificate issuer:       /CN=339912378B69A4318260C6F2C3D6E285FC8978A5
Certificate serial:       5C08936304A9EED906615FA5ADD7544A859508B1
Authority key identifier: 33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/323830343a393237343a3a2f33322d313238203d3e20323734373133.roa
Signing time:             Tue 06 Oct 2026 17:36:08 +0000
ROA not before:           Tue 06 Oct 2026 17:31:08 +0000
ROA not after:            Tue 05 Oct 2027 17:36:08 +0000
asID:                     274713
IP address blocks:        2804:9274::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl
                          rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 20:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:93:63:04:a9:ee:d9:06:61:5f:a5:ad:d7:54:4a:85:95:08:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339912378B69A4318260C6F2C3D6E285FC8978A5
        Validity
            Not Before: Oct  6 17:31:08 2026 GMT
            Not After : Oct  5 17:36:08 2027 GMT
        Subject: CN=A086DC146CBBBF6BFBF6E4BD9211BE8DC41D93CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:f1:79:9a:1c:45:1f:70:7a:1a:68:ee:21:
                    a5:ef:62:1e:59:2f:fe:08:95:53:9a:98:d9:52:78:
                    5a:da:a1:f7:69:96:44:af:50:ab:20:52:dc:be:02:
                    05:3b:87:22:8d:c0:97:81:8e:d3:98:a7:90:35:fc:
                    aa:c6:c4:f0:45:53:dd:69:19:c9:88:b4:f6:4a:2d:
                    6e:82:af:8e:65:9e:c1:eb:54:11:d9:0e:08:39:76:
                    f8:74:5a:a4:78:d6:2d:55:45:8d:e2:f3:da:f3:bd:
                    bf:ce:3f:40:20:92:2d:37:c8:b4:3f:8f:c7:47:3c:
                    c9:af:a6:50:d5:26:69:5c:38:ee:36:4a:cb:62:e5:
                    aa:3c:30:0b:c7:3d:e7:aa:57:d3:6e:a1:50:39:c3:
                    72:8a:27:13:28:5f:1f:8c:17:59:7a:56:d9:53:00:
                    95:27:af:5a:3e:54:cd:0c:3e:a6:66:5d:b3:61:f8:
                    51:a9:c6:32:61:2a:b8:7e:d7:f9:a6:79:e4:f7:fd:
                    e8:03:19:bb:b6:c7:ee:14:97:de:de:82:6e:c7:c4:
                    4f:a9:4b:89:3c:93:ba:4b:6d:42:61:2f:da:25:80:
                    4c:6b:a3:1f:ba:8d:a3:bd:17:0a:a2:5a:52:83:cd:
                    11:63:bb:dc:ce:61:d1:ec:76:5b:8a:23:7b:27:b3:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:DC:14:6C:BB:BF:6B:FB:F6:E4:BD:92:11:BE:8D:C4:1D:93:CF
            X509v3 Authority Key Identifier:
                keyid:33:99:12:37:8B:69:A4:31:82:60:C6:F2:C3:D6:E2:85:FC:89:78:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/339912378B69A4318260C6F2C3D6E285FC8978A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/339912378B69A4318260C6F2C3D6E285FC8978A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Df3Vbg1FNQqNeT3YbwDdr3SsvyDk1XgnKspdLcmoKrZP/0/323830343a393237343a3a2f33322d313238203d3e20323734373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9274::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:24:61:3c:03:30:6e:22:e4:5f:f4:99:db:2a:84:46:81:
         30:59:a5:0d:2b:33:1c:c3:90:71:58:61:58:eb:4d:57:bf:30:
         7b:c7:29:03:4e:c2:43:bf:e8:f1:e7:37:44:bb:12:3b:42:8b:
         f8:74:8a:b6:0a:4f:19:73:b3:35:28:5f:68:f8:ab:bd:79:a9:
         1b:ad:02:5d:b1:54:b6:42:fb:72:53:09:4d:ff:8f:10:74:b5:
         93:0b:a6:06:5d:05:f1:c9:73:00:ee:4b:c1:9b:3f:fd:3f:f0:
         02:c9:5d:2c:36:76:9f:86:75:48:9b:9c:95:72:69:15:0d:b3:
         d0:4a:56:a0:69:ba:a2:cf:9c:0a:31:33:df:74:04:3c:9c:74:
         e5:38:c2:3f:1e:75:12:79:e7:23:ea:35:25:f4:ab:45:f9:03:
         1f:37:da:25:58:01:16:cf:b2:d8:35:8c:cd:cf:0c:b2:5b:74:
         f3:62:5c:8c:16:5d:1e:1a:3f:06:24:a7:57:7b:63:99:d0:aa:
         1a:57:13:87:fb:eb:9b:9d:32:a6:d8:7d:94:75:da:90:f2:8e:
         f3:e5:9b:87:9e:7d:ab:f6:f7:ff:57:b8:19:aa:38:4e:44:fb:
         dc:56:44:e1:9c:7e:ed:c5:3a:ba:6f:c8:4e:62:20:b3:76:79:
         96:19:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:52:20 2026 by rpki-client