Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          wi7my/ozM35a4cImr7C5MttG41F92kBPsafJEPw6waU=
Subject key identifier:   1E:7C:B8:DA:2D:1B:2B:C3:D4:B7:A3:F3:92:17:AF:73:15:97:1C:C0
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       07DA88288DCC2FE1BB7ECC91FE776032A1113E4A
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Thu 08 Oct 2026 14:50:42 +0000
ROA not before:           Thu 08 Oct 2026 14:45:42 +0000
ROA not after:            Thu 07 Oct 2027 14:50:42 +0000
asID:                     265484
IP address blocks:        2804:34d8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 08:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:da:88:28:8d:cc:2f:e1:bb:7e:cc:91:fe:77:60:32:a1:11:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Oct  8 14:45:42 2026 GMT
            Not After : Oct  7 14:50:42 2027 GMT
        Subject: CN=1E7CB8DA2D1B2BC3D4B7A3F39217AF7315971CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:78:bb:02:29:f3:18:cb:49:de:26:34:d8:
                    78:c9:7c:56:ce:2f:ce:2f:06:4c:6e:b8:3f:10:a5:
                    aa:ed:d0:36:48:8c:f1:b5:1d:b8:05:17:51:65:7c:
                    ee:85:a4:ec:8c:78:43:70:cf:68:98:ee:7f:23:b0:
                    5f:dc:a9:d2:3a:29:36:83:7c:9f:73:89:cc:88:2f:
                    c3:41:9c:4e:35:fb:64:39:f3:56:01:cc:12:6a:55:
                    4e:51:d8:9d:b7:97:f7:0e:d8:e2:00:de:a0:5c:0b:
                    53:ea:44:b8:a8:b9:45:42:3e:dc:f6:a4:d3:8e:2a:
                    ae:f3:e8:72:ff:8c:81:b8:68:54:4d:57:c3:71:a4:
                    d6:bd:5b:77:dd:61:4f:4d:d2:48:f5:a3:ce:9d:99:
                    b1:ef:6a:18:a2:c0:ea:81:26:07:43:9f:3c:e1:25:
                    00:a7:1b:97:7c:38:1f:90:86:af:3b:60:12:e1:d3:
                    93:7e:27:9a:56:23:cd:9a:6f:7f:ee:f8:cd:56:8c:
                    3a:de:d3:f6:ee:78:7d:61:d7:0c:89:76:82:15:a6:
                    4a:24:1f:12:61:69:44:60:b4:df:82:95:32:2e:f2:
                    a0:e7:0a:5f:e9:8c:d8:45:7e:dc:1c:b9:d6:6e:46:
                    e7:92:68:ce:60:23:e3:30:43:0a:57:aa:94:da:59:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7C:B8:DA:2D:1B:2B:C3:D4:B7:A3:F3:92:17:AF:73:15:97:1C:C0
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a633030303a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:99:bc:36:3e:c1:2d:5b:b4:40:b3:97:87:13:71:fb:5e:
         b3:6d:99:ae:ae:6f:1b:d8:a0:09:9c:a5:bd:e1:68:dc:e3:d2:
         b9:88:bf:dd:8b:b9:ad:d1:00:d0:e0:2f:b8:fb:61:6f:25:01:
         e7:3c:50:69:2e:3a:a0:ca:ff:95:54:ba:7d:1f:0c:20:5f:e5:
         eb:73:25:75:cd:c8:52:a5:8a:7f:18:47:a7:64:de:0e:fc:9d:
         0f:99:f8:6f:4d:76:97:dd:00:2c:83:c8:b9:b0:b4:bc:a4:a5:
         21:10:1d:0f:0d:24:ed:90:63:37:7f:f5:95:4a:e3:a3:d8:6d:
         f3:d9:74:ae:04:b3:1b:da:5a:e9:53:6d:21:39:67:de:f2:3f:
         ad:5d:6b:29:bd:f9:49:1c:12:f6:30:6c:ee:c0:c3:aa:7f:d5:
         c8:f3:aa:f1:f2:e3:39:26:83:9e:76:22:3d:2b:2a:7a:5d:6a:
         b3:a0:c1:72:ec:dd:ec:d0:f4:13:38:9a:81:a6:0d:04:d1:86:
         aa:39:d9:c1:fc:3f:09:e3:d6:0b:33:70:a3:d3:0f:b2:98:1a:
         f2:ef:5b:d3:e0:83:4c:b3:72:12:2f:da:43:0b:95:6f:a3:cb:
         c5:31:fc:78:a1:2c:46:f9:ff:52:11:14:8f:e9:fd:be:5e:65:
         5e:c7:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:26:04 2026 by rpki-client