Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33332d3333203d3e20323638303537.roa
File:                     323830343a353734633a3a2f33332d3333203d3e20323638303537.roa (raw, json)
Hash identifier:          i6KlhHxJjGYrLaarrotGUcH1tS/CibQRHhOEoPpj38s=
Subject key identifier:   39:FF:7C:CE:58:30:6C:6E:1B:61:FD:A7:F3:71:FA:15:F1:3B:D9:E7
Certificate issuer:       /CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
Certificate serial:       52DD80B02F0CC3492E66B103E7622421BACC7359
Authority key identifier: 91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33332d3333203d3e20323638303537.roa
Signing time:             Fri 25 Sep 2026 09:49:01 +0000
ROA not before:           Fri 25 Sep 2026 09:44:01 +0000
ROA not after:            Fri 24 Sep 2027 09:49:01 +0000
asID:                     268057
IP address blocks:        2804:574c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl
                          rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 03:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dd:80:b0:2f:0c:c3:49:2e:66:b1:03:e7:62:24:21:ba:cc:73:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5
        Validity
            Not Before: Sep 25 09:44:01 2026 GMT
            Not After : Sep 24 09:49:01 2027 GMT
        Subject: CN=39FF7CCE58306C6E1B61FDA7F371FA15F13BD9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:b5:a2:61:84:fe:98:b0:12:d3:42:8f:69:
                    31:58:a7:e8:23:a0:35:aa:99:08:73:ae:85:7e:7d:
                    4a:79:03:f4:3e:9b:78:e9:87:bf:3a:cc:d8:f3:0c:
                    2d:ee:43:0d:e4:e7:57:18:34:44:ba:34:83:30:53:
                    0f:63:85:15:c5:e7:58:04:4d:e0:d6:3c:0f:a6:48:
                    0d:99:24:37:9b:15:1c:a6:08:49:41:ef:c7:7b:6e:
                    80:75:fa:06:86:de:9b:b7:55:50:e2:b9:4a:ff:c3:
                    7c:5f:58:a7:2b:f2:c3:12:47:82:63:08:47:ff:23:
                    32:4e:66:ad:5b:b0:ff:c7:14:1e:50:47:4b:0c:51:
                    3c:dd:f1:8e:95:fd:e8:64:a9:c6:6c:60:e8:47:e7:
                    7e:1a:14:4c:38:ac:08:e7:de:85:4f:0f:c7:85:d3:
                    e3:41:29:e1:1b:1d:ec:88:81:d9:ef:1f:d7:41:96:
                    19:cc:16:21:32:3a:8f:62:29:82:c3:54:7d:2e:4b:
                    12:4d:a8:48:42:80:64:66:93:c2:e1:81:7d:b0:e3:
                    29:d4:89:90:fe:e0:67:de:60:4e:bb:b5:51:de:61:
                    f9:13:86:57:4e:f0:2e:85:3a:0c:5e:5f:1d:40:0e:
                    a8:6b:39:75:ea:23:3d:ed:51:94:04:61:c4:aa:c1:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FF:7C:CE:58:30:6C:6E:1B:61:FD:A7:F3:71:FA:15:F1:3B:D9:E7
            X509v3 Authority Key Identifier:
                keyid:91:CA:9B:A9:DC:2F:A0:AB:D8:0B:8D:D6:2B:48:5E:9B:6F:DB:00:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91CA9BA9DC2FA0ABD80B8DD62B485E9B6FDB00E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/323830343a353734633a3a2f33332d3333203d3e20323638303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574c::/33

    Signature Algorithm: sha256WithRSAEncryption
         17:11:0d:8f:f0:2e:b1:48:7a:5d:e5:0c:b5:26:40:23:b6:b4:
         b5:38:f0:c3:79:6c:80:9b:9a:7c:b7:19:ce:e3:ec:f9:5d:6e:
         0e:0a:23:e2:13:37:67:62:bb:cf:b3:c3:e3:db:19:c7:f9:05:
         63:e9:c7:9d:0a:78:7e:f6:dd:8f:48:8f:4a:46:9f:c9:e4:f5:
         2f:b4:36:f0:3d:b9:59:e1:c1:04:43:9b:ad:81:af:c6:30:5e:
         95:e6:1e:0e:89:2a:11:74:26:35:9f:c4:50:d1:9a:24:dd:c6:
         5b:b8:d3:a1:4e:e5:93:32:24:95:26:43:70:6f:68:3b:10:cc:
         4f:16:6f:55:84:d3:fd:96:b9:a3:1d:89:d3:fe:c7:33:2d:e9:
         09:44:40:2c:2c:3f:5e:b7:e4:89:71:24:10:44:72:93:1b:68:
         d6:36:04:aa:4b:f5:56:e6:10:89:7f:76:c5:1d:0e:16:16:c7:
         98:75:13:9d:7c:e5:bf:18:b7:3b:60:37:a6:a9:a8:b5:ac:dd:
         9b:74:d4:4e:b1:73:5e:97:59:46:7c:f5:a4:1e:33:d6:c7:65:
         e1:d1:b6:87:7a:2d:3a:ae:69:db:e3:66:78:58:71:a6:43:fb:
         36:32:b9:3b:e6:6b:e5:52:c6:7d:a0:98:37:2a:2c:b0:45:2d:
         69:50:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:56:40 2026 by rpki-client