Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33352d3335203d3e20323635343834.roa
File:                     323830343a333464383a383030303a3a2f33352d3335203d3e20323635343834.roa (raw, json)
Hash identifier:          QFk9kbJ0yTqNFiv/7ZyDm2qS/ZBdaS1K5QBG8i8Vrhc=
Subject key identifier:   27:E1:4C:58:E5:C4:C9:D3:53:A2:04:26:BA:78:CE:F5:CF:9D:1B:C0
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       406A5CAE41101147B1B4279C76308666774CB7E4
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33352d3335203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:53 +0000
ROA not before:           Thu 08 Oct 2026 14:45:53 +0000
ROA not after:            Thu 07 Oct 2027 14:50:53 +0000
asID:                     265484
IP address blocks:        2804:34d8:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 15:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6a:5c:ae:41:10:11:47:b1:b4:27:9c:76:30:86:66:77:4c:b7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:53 2026 GMT
            Not After : Oct  7 14:50:53 2027 GMT
        Subject: CN=27E14C58E5C4C9D353A20426BA78CEF5CF9D1BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:19:a5:ea:15:e8:cc:e2:8a:28:2d:93:e5:
                    ef:fd:5c:ef:ec:97:88:26:0f:cd:f5:72:80:03:71:
                    b8:13:d3:46:d8:16:4e:c6:bd:02:b5:e7:7e:42:7a:
                    50:e2:19:6c:db:3a:8c:ab:c4:7f:c1:e8:ae:3b:7b:
                    7b:2d:94:d1:10:89:3b:24:a0:11:83:76:04:f8:fd:
                    12:61:7c:3f:f0:bf:6a:a4:fd:cd:31:8c:2d:2e:77:
                    04:38:0f:d2:13:28:e1:ee:52:a9:ad:e4:7b:90:c6:
                    25:c6:46:5a:82:b1:05:9d:61:9d:95:f0:75:02:68:
                    b8:80:94:ca:f8:ec:6e:86:38:28:c7:f3:59:bb:60:
                    6c:28:61:34:5c:ce:c4:58:c6:75:7d:74:6b:78:e1:
                    2e:7d:47:20:b0:2f:ba:41:fd:7d:32:bb:ce:f6:7b:
                    2d:25:0d:fe:91:0c:08:f8:30:44:a4:83:b5:f6:21:
                    43:bd:0e:4e:90:89:56:8f:d4:fe:72:d8:d3:93:d4:
                    0d:ed:fe:ed:a1:e0:62:d4:d0:7d:db:e2:b4:27:c4:
                    ea:17:6a:11:d0:66:57:b9:b5:2b:bc:80:27:49:63:
                    e9:37:39:0c:44:db:bb:da:dc:e1:fe:49:62:7b:30:
                    ca:24:25:7f:86:ce:18:83:ac:7e:a3:f2:a9:00:13:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:4C:58:E5:C4:C9:D3:53:A2:04:26:BA:78:CE:F5:CF:9D:1B:C0
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a383030303a3a2f33352d3335203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:7e:17:61:73:40:5f:48:0a:8e:43:d9:8c:9f:c1:4b:a7:
         54:38:00:6a:4b:61:f4:95:5c:4f:8a:3f:00:d2:56:97:f0:ad:
         07:5d:65:c4:5d:11:a9:e2:07:23:ca:52:ae:7b:34:5c:22:11:
         1a:c2:39:b7:45:3a:71:18:6c:6e:45:f1:11:32:51:1d:03:61:
         ba:4c:d1:ed:93:83:32:bc:b5:3f:f6:36:ec:70:2c:13:90:88:
         b3:80:b9:01:f8:f5:0d:a5:15:b0:98:2b:ab:ce:98:90:77:b2:
         6f:f0:53:0b:ce:11:bf:25:b3:7d:ce:4b:54:ff:6a:33:f1:59:
         ee:af:4a:77:35:93:40:ec:e6:ee:b8:34:39:5d:55:3c:bd:23:
         ed:57:bd:05:47:0d:c9:8a:95:7d:84:f7:81:cd:bb:0c:ce:b2:
         8c:12:af:64:ce:3b:04:85:ff:18:27:a3:1b:3e:6e:0c:6d:2c:
         4e:42:82:cb:f0:72:51:1a:b4:42:dc:0b:ea:6b:41:30:c6:dd:
         85:21:3f:56:cf:31:8a:4a:41:9b:a0:6e:02:f1:88:c8:49:11:
         43:0e:a6:55:df:8d:f6:21:ee:db:31:91:c3:21:eb:1e:9a:09:
         8a:df:ca:e2:4e:11:be:69:9b:d7:a7:aa:20:0d:21:63:5e:b7:
         12:2d:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:50:40 2026 by rpki-client