Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          4SUO0wjcS3AKvI/BIFnFiaUbEuAdJUHWzf5FcjbyG1Y=
Subject key identifier:   40:AC:C7:B6:27:59:19:96:1A:04:80:B0:E3:E1:40:3F:5B:A1:47:B8
Certificate issuer:       /CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
Certificate serial:       25CBAD3534A079B3645971ACA2F92C0D80FCE351
Authority key identifier: DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Thu 17 Sep 2026 18:55:26 +0000
ROA not before:           Thu 17 Sep 2026 18:50:26 +0000
ROA not after:            Thu 16 Sep 2027 18:55:26 +0000
asID:                     269566
IP address blocks:        2804:6688:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cb:ad:35:34:a0:79:b3:64:59:71:ac:a2:f9:2c:0d:80:fc:e3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81
        Validity
            Not Before: Sep 17 18:50:26 2026 GMT
            Not After : Sep 16 18:55:26 2027 GMT
        Subject: CN=40ACC7B6275919961A0480B0E3E1403F5BA147B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:e7:ac:ab:fb:90:30:39:83:c5:1b:7a:f9:
                    a7:53:a7:6c:c8:d9:87:4f:c4:e2:52:c9:42:e9:ea:
                    eb:4d:4d:3d:fd:a5:60:43:d3:c9:54:1b:e1:8c:6c:
                    e7:41:a4:e9:ad:81:46:49:49:b2:fb:1e:a2:d0:84:
                    9f:22:78:18:1a:5c:10:dc:38:0e:d0:dd:db:9e:32:
                    3b:c2:94:d3:0d:71:6c:30:f3:cf:33:9b:a8:0a:7a:
                    89:b0:db:4a:be:a9:03:f2:9c:c9:a5:67:f2:6f:45:
                    73:d3:e0:dd:e8:66:c1:a7:27:54:c0:33:8b:47:67:
                    1f:d7:47:23:63:e3:77:48:cd:ea:bb:49:2b:09:db:
                    2a:9e:72:38:d8:36:0b:a1:6c:4d:66:c4:26:5b:a3:
                    96:d7:47:8f:41:4c:01:e4:0d:c5:df:38:57:9f:29:
                    e6:3e:33:81:cc:82:f0:d6:7a:34:3b:45:24:96:44:
                    2c:e7:21:76:d5:44:ad:32:51:eb:c2:19:c8:25:12:
                    e7:19:e1:65:cd:8d:1d:5c:a9:a3:7d:1e:49:e9:3f:
                    1c:d6:50:2f:94:7c:68:08:0e:d0:22:9f:7b:78:d5:
                    9d:52:fe:b2:22:ca:1d:df:f9:20:d1:62:e1:55:db:
                    df:e9:ce:ee:7e:a3:2f:d5:91:1b:ee:cc:e9:f7:75:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AC:C7:B6:27:59:19:96:1A:04:80:B0:E3:E1:40:3F:5B:A1:47:B8
            X509v3 Authority Key Identifier:
                keyid:DD:1F:3A:84:57:3A:27:5E:2C:FD:C8:B9:C8:60:ED:E1:7F:DB:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1F3A84573A275E2CFDC8B9C860EDE17FDBEC81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:65:39:67:32:30:f5:4b:1e:db:5c:63:aa:66:a5:f2:79:04:
         b4:e2:ce:0b:0a:2e:07:b8:7f:5a:b1:48:b1:1e:49:6e:f2:1f:
         b2:28:a8:8a:cd:8a:c4:be:88:5d:39:9b:1c:ff:a3:84:80:91:
         a0:bc:78:3c:d0:4f:3d:59:26:b8:67:c5:90:6d:b6:cc:12:87:
         15:ec:f7:28:91:35:ad:76:d9:27:64:da:8e:85:5c:3e:cb:e0:
         9c:6c:dd:86:c8:0e:8e:b9:02:bf:63:f2:94:57:7d:17:74:17:
         9b:ef:c8:ec:1b:ee:47:25:f9:ff:9f:3f:93:65:55:54:54:32:
         8a:4c:23:b7:29:7f:cc:30:b1:d9:41:82:0b:57:92:13:b1:16:
         e2:0c:84:72:85:a3:f0:cb:83:b8:20:22:84:d9:14:1c:57:ef:
         10:db:61:62:0e:95:62:a6:0b:3d:ea:af:b4:6f:d5:68:86:5d:
         5b:9c:0c:fc:4b:b5:6a:66:5a:7f:93:50:3a:f0:55:11:0f:b0:
         b6:b6:cb:a3:d9:b8:04:32:a7:e5:4d:11:ff:9d:5f:3f:fb:45:
         10:a3:17:3e:6a:94:04:c1:c9:aa:19:2c:ce:ee:9b:9a:cc:d0:
         74:56:4a:f2:9e:ce:7d:cf:6a:a1:f4:dd:9d:a2:be:fe:bd:e3:
         db:9e:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:52:14 2026 by rpki-client