Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/323830343a393237383a3a2f33322d3438203d3e203138373832.roa
File:                     323830343a393237383a3a2f33322d3438203d3e203138373832.roa (raw, json)
Hash identifier:          /XYFEK1pF17xR7s/Q4dnaSnmrGbEiga4NtYtJSds3PA=
Subject key identifier:   C4:95:91:50:7C:2C:2A:0A:FE:36:B4:66:AA:49:7F:82:D4:91:97:B0
Certificate issuer:       /CN=20E95E299EB6B09D15CB649494C340CEDE1B9D48
Certificate serial:       19C889AB80909F5460284A76CD2710CDE687A3D4
Authority key identifier: 20:E9:5E:29:9E:B6:B0:9D:15:CB:64:94:94:C3:40:CE:DE:1B:9D:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E95E299EB6B09D15CB649494C340CEDE1B9D48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/323830343a393237383a3a2f33322d3438203d3e203138373832.roa
Signing time:             Mon 28 Sep 2026 18:44:12 +0000
ROA not before:           Mon 28 Sep 2026 18:39:12 +0000
ROA not after:            Mon 27 Sep 2027 18:44:12 +0000
asID:                     18782
IP address blocks:        2804:9278::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/20E95E299EB6B09D15CB649494C340CEDE1B9D48.crl
                          rsync://rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/20E95E299EB6B09D15CB649494C340CEDE1B9D48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E95E299EB6B09D15CB649494C340CEDE1B9D48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 13:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c8:89:ab:80:90:9f:54:60:28:4a:76:cd:27:10:cd:e6:87:a3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E95E299EB6B09D15CB649494C340CEDE1B9D48
        Validity
            Not Before: Sep 28 18:39:12 2026 GMT
            Not After : Sep 27 18:44:12 2027 GMT
        Subject: CN=C49591507C2C2A0AFE36B466AA497F82D49197B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:a9:bb:9c:3d:5b:99:1f:c8:1d:2e:ff:56:
                    64:15:7a:27:ea:27:e5:e8:42:26:e6:c7:db:fe:16:
                    2a:a3:6f:83:6a:7b:32:42:e5:a3:1d:56:39:e7:24:
                    07:9b:97:d5:e4:b6:7b:88:be:d7:fd:7d:3e:15:3b:
                    5a:1a:60:db:49:27:ce:45:31:77:57:57:02:56:18:
                    1d:c3:99:98:91:67:86:d5:0f:5e:6c:b8:9c:ee:06:
                    70:54:75:02:28:db:90:1b:af:bd:8a:f3:a9:56:5d:
                    a8:74:1d:3a:a3:15:1f:da:28:f4:bb:59:5f:f2:fa:
                    91:90:7b:15:91:9e:9c:59:d5:e2:1b:f0:dc:ec:30:
                    92:c9:dc:ef:7a:18:fa:06:ef:96:bb:a8:c0:55:b8:
                    f5:2a:d9:02:ed:5c:d4:8b:7f:da:2b:ce:44:f0:40:
                    7c:a4:98:c6:1a:a1:2f:1f:56:f9:79:28:46:bc:52:
                    28:27:59:3e:4d:c5:43:e4:b9:5f:d8:d3:db:88:e3:
                    fe:de:86:dc:c4:29:38:b9:da:a9:22:d2:fb:b3:a5:
                    15:93:1c:71:0c:e9:18:05:e3:60:00:d9:56:0f:fd:
                    b5:d7:b6:b6:24:53:c5:8a:ed:ac:b4:43:9e:5f:f8:
                    73:64:5e:69:3f:da:c6:97:e8:bf:21:01:f9:ba:d4:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:91:50:7C:2C:2A:0A:FE:36:B4:66:AA:49:7F:82:D4:91:97:B0
            X509v3 Authority Key Identifier:
                keyid:20:E9:5E:29:9E:B6:B0:9D:15:CB:64:94:94:C3:40:CE:DE:1B:9D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/20E95E299EB6B09D15CB649494C340CEDE1B9D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20E95E299EB6B09D15CB649494C340CEDE1B9D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJxu237J65bDWx8ww5BpTnRibDhdrjS3sxbYpHoeyhgJ/0/323830343a393237383a3a2f33322d3438203d3e203138373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9278::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:48:2d:38:9f:a4:e8:db:a5:d5:1e:a7:4d:b7:d5:35:a1:19:
         1d:d8:c3:bf:92:30:46:e2:aa:98:90:6f:dc:d2:1c:12:0f:b9:
         52:b5:59:98:43:43:f6:6b:96:67:0e:40:30:66:99:4c:48:27:
         05:bb:de:e6:e6:75:9d:f5:ab:1f:06:77:06:02:31:ff:91:af:
         98:af:9b:20:35:17:17:8e:17:e2:a7:39:be:8f:f1:98:45:ea:
         c5:3c:59:1e:91:e7:5c:23:0f:65:a8:01:ee:2e:f7:a8:b4:09:
         00:42:87:d0:6d:d7:fe:ff:4a:0f:af:80:9f:8c:82:40:aa:72:
         6f:eb:e1:0d:7b:f1:8f:7c:5b:43:bd:08:f1:a1:39:83:da:af:
         21:44:03:97:eb:b2:27:4f:ed:96:bd:c4:63:54:5f:89:c1:f6:
         d5:d3:c8:27:d7:be:82:7a:dc:ab:c8:ea:57:84:c7:59:9d:0d:
         01:d4:c1:30:b3:d6:db:30:30:b2:bc:be:d6:c2:11:89:7c:78:
         03:09:34:3f:45:19:bc:4c:40:0b:99:96:c5:33:a3:56:d7:ab:
         67:d5:b4:9c:03:3a:e0:54:0b:9a:fa:9d:3b:14:88:56:b0:92:
         1a:9b:11:74:be:e3:9e:10:99:d2:ed:85:dc:45:8d:df:5e:1f:
         49:a2:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:38:30 2026 by rpki-client