Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/323830343a366531633a3a2f33322d3336203d3e20323730353736.roa
File:                     323830343a366531633a3a2f33322d3336203d3e20323730353736.roa (raw, json)
Hash identifier:          dFaqc77Z7CVQETb/ZBYer0r7sqhOkXPETb9YepjqO/A=
Subject key identifier:   22:D3:4A:94:5A:D9:80:60:69:C0:3F:37:30:50:17:6E:B4:A3:90:68
Certificate issuer:       /CN=2FF15ED0CC5979A010C01B40E662E7F6005E4168
Certificate serial:       17A2677BF3AE7474B27FB17883E6D3B8A3CD5A6E
Authority key identifier: 2F:F1:5E:D0:CC:59:79:A0:10:C0:1B:40:E6:62:E7:F6:00:5E:41:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/323830343a366531633a3a2f33322d3336203d3e20323730353736.roa
Signing time:             Tue 22 Sep 2026 13:16:19 +0000
ROA not before:           Tue 22 Sep 2026 13:11:19 +0000
ROA not after:            Tue 21 Sep 2027 13:16:19 +0000
asID:                     270576
IP address blocks:        2804:6e1c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.crl
                          rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a2:67:7b:f3:ae:74:74:b2:7f:b1:78:83:e6:d3:b8:a3:cd:5a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF15ED0CC5979A010C01B40E662E7F6005E4168
        Validity
            Not Before: Sep 22 13:11:19 2026 GMT
            Not After : Sep 21 13:16:19 2027 GMT
        Subject: CN=22D34A945AD9806069C03F373050176EB4A39068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:5f:33:94:db:2c:81:ad:97:85:78:4f:d1:
                    e8:22:47:e7:fd:fc:b6:c8:3c:77:9e:cd:25:82:34:
                    a8:4c:20:ce:54:3d:e6:70:1f:9b:6c:0d:55:d4:b7:
                    d5:5d:06:16:70:73:05:89:d3:9f:7f:e7:14:2e:82:
                    5a:c4:19:cb:4c:ac:5d:b9:4e:50:bc:0a:44:e4:d8:
                    9f:92:16:d6:d9:3e:9f:e4:6f:1d:05:33:88:e2:e1:
                    4f:5b:63:99:6c:c0:03:6a:76:93:53:88:5b:46:fa:
                    ba:e9:fc:46:d1:a2:53:e0:e6:e5:60:68:9b:65:56:
                    2e:60:9b:05:b2:43:14:99:49:e3:b2:ad:1e:13:10:
                    ca:fb:3c:e6:2e:69:88:b0:0e:ea:27:26:30:2b:20:
                    24:f7:0a:40:22:b8:7d:b4:e9:97:79:2c:7f:d4:14:
                    24:f5:87:90:1e:1c:37:2a:8c:2a:1c:b4:be:94:cb:
                    22:28:46:f6:5a:04:aa:f3:90:4d:1b:78:69:6f:9b:
                    9d:e7:60:4a:2f:49:b6:0e:0c:68:5f:f2:2a:7a:22:
                    78:2b:cd:31:c2:f6:d2:97:d7:b1:65:43:65:58:03:
                    65:25:66:c6:ef:f5:a8:80:96:27:52:2e:69:9d:47:
                    12:05:fb:7a:7d:20:6f:ae:92:c4:79:7f:98:58:39:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:4A:94:5A:D9:80:60:69:C0:3F:37:30:50:17:6E:B4:A3:90:68
            X509v3 Authority Key Identifier:
                keyid:2F:F1:5E:D0:CC:59:79:A0:10:C0:1B:40:E6:62:E7:F6:00:5E:41:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/2FF15ED0CC5979A010C01B40E662E7F6005E4168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF15ED0CC5979A010C01B40E662E7F6005E4168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBSuCmQesbVxaxjn7Arm3fx4aowZu5jpoL5wSWTxf7Nq/0/323830343a366531633a3a2f33322d3336203d3e20323730353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:b5:d8:8b:8f:a7:e0:75:4a:2e:08:91:4c:c2:2b:c4:10:08:
         82:b4:00:6d:0f:c3:58:ad:e3:c8:10:8d:26:b0:ee:98:83:3a:
         3b:18:74:87:67:1e:04:6c:e3:d4:95:a5:db:35:31:e1:fa:3c:
         c7:c6:a9:97:9a:34:ee:c5:4e:54:9a:a4:84:a7:14:b8:4a:a0:
         3e:79:d6:22:c9:ac:49:6d:82:42:12:f6:56:16:59:9f:a7:0b:
         f4:9f:d1:8e:8e:20:d4:34:1e:e8:70:06:d1:17:fd:b5:e1:77:
         70:74:30:e8:33:ac:53:70:e2:1d:78:d9:b5:7c:ab:71:ca:27:
         72:a2:33:be:7d:b9:c0:07:1e:f4:8c:3f:b9:40:47:ed:66:78:
         62:66:45:2f:64:f3:ca:04:e6:c4:59:aa:d0:26:ec:2e:86:45:
         53:a3:01:28:1c:65:8f:a1:64:89:fc:fd:8d:35:be:df:a3:29:
         e5:6f:1d:a3:25:ea:32:0b:ed:94:46:73:68:e5:ab:b8:c0:9c:
         ef:ea:88:80:32:e1:01:74:8c:8b:f1:cb:53:cd:4d:4a:0f:35:
         2d:c8:18:2b:4f:97:61:7a:d3:cd:20:a5:7f:16:e0:51:1c:76:
         40:51:79:0f:70:ef:cf:56:48:09:e0:2e:9c:0d:e7:03:d3:e5:
         a2:c2:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:57 2026 by rpki-client