Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
File:                     323830343a313164303a3a2f33322d313238203d3e20323633343431.roa (raw, json)
Hash identifier:          z8TRiKzbXEAjSjXi5EYZQR91Lv1zH4aOfmkZ8i+iqnA=
Subject key identifier:   C1:6A:16:B1:5D:25:A6:98:DF:FD:6B:03:4E:3C:67:F3:81:56:51:C8
Certificate issuer:       /CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
Certificate serial:       3E5E46B0B7D4A977E0EA304A5603E4EFDBAE572F
Authority key identifier: 26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa
Signing time:             Sat 12 Sep 2026 15:28:38 +0000
ROA not before:           Sat 12 Sep 2026 15:23:38 +0000
ROA not after:            Sat 11 Sep 2027 15:28:38 +0000
asID:                     263441
IP address blocks:        2804:11d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl
                          rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5e:46:b0:b7:d4:a9:77:e0:ea:30:4a:56:03:e4:ef:db:ae:57:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26E3D1B009E7A8557F73668315C1AA6376A4A0C1
        Validity
            Not Before: Sep 12 15:23:38 2026 GMT
            Not After : Sep 11 15:28:38 2027 GMT
        Subject: CN=C16A16B15D25A698DFFD6B034E3C67F3815651C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:62:16:6d:5a:ff:59:71:7b:5f:0c:19:02:
                    cb:bd:61:42:70:8a:af:47:5a:96:6e:f8:ba:df:11:
                    6c:7d:fb:4d:0a:7c:fa:1c:37:fa:99:61:1d:9b:2c:
                    4c:85:c1:5c:d7:af:cb:92:b8:2f:67:c3:d2:d2:50:
                    45:bd:91:c0:b2:38:e8:29:58:45:14:b5:4b:f0:03:
                    64:ac:9f:80:52:d8:15:ee:31:37:27:17:39:24:a4:
                    31:66:cc:ea:50:58:2d:d2:18:de:52:b3:e1:59:4f:
                    0a:be:0b:0f:76:2d:bb:2a:8b:79:ab:20:22:ab:5b:
                    92:17:8f:5f:9f:25:43:a6:fc:83:77:69:7d:1f:cf:
                    96:67:bf:ff:2e:e1:88:b7:6a:31:60:d6:a4:70:05:
                    27:bc:42:3e:64:cf:74:b6:c3:82:0d:03:87:3d:69:
                    60:52:67:b2:47:a9:88:d2:dc:09:83:44:ee:84:bc:
                    37:23:25:82:1c:19:e6:a7:d4:ed:41:3b:e6:3e:f5:
                    93:83:61:d6:1f:5a:f9:6b:8e:bc:53:ba:1e:e4:19:
                    49:d3:22:22:1a:dc:ec:aa:58:66:5b:cf:b0:50:ee:
                    bd:c5:20:f0:2a:f5:4f:2a:04:17:bf:0c:67:ff:17:
                    f0:b1:8d:c1:42:28:da:4b:3f:04:e1:d0:d6:87:ee:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:16:B1:5D:25:A6:98:DF:FD:6B:03:4E:3C:67:F3:81:56:51:C8
            X509v3 Authority Key Identifier:
                keyid:26:E3:D1:B0:09:E7:A8:55:7F:73:66:83:15:C1:AA:63:76:A4:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26E3D1B009E7A8557F73668315C1AA6376A4A0C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/323830343a313164303a3a2f33322d313238203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:11d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:1f:2a:ca:c1:37:cc:bf:62:ce:58:0b:fe:dd:6b:f3:c0:
         0e:b5:63:1c:b2:1a:86:a5:8b:26:42:b0:41:4b:91:b1:18:52:
         58:42:0c:88:e4:04:a0:03:76:16:fc:d7:b1:24:1e:28:18:94:
         bd:72:cc:07:d6:d3:31:18:24:1f:79:64:65:6e:20:35:55:ce:
         b9:5a:25:84:b9:ae:77:a7:b1:e3:d5:04:bf:e8:f8:9e:da:67:
         ea:2f:de:f1:40:e0:63:16:cb:3f:b6:6a:56:cc:1d:23:f3:27:
         59:e0:cd:d0:c0:1e:36:ed:1e:f6:81:01:23:ff:c9:e0:01:13:
         3e:67:0c:ba:b2:f9:19:af:40:a1:a9:bc:29:9f:80:38:c9:6c:
         af:eb:75:c3:44:54:31:50:80:45:7d:06:7f:02:9d:42:65:ab:
         36:ee:c9:59:33:e1:8b:cc:b9:45:67:03:62:1e:0a:99:21:6c:
         ef:bc:3b:fb:11:88:79:31:4f:86:87:8e:5b:72:92:16:59:65:
         6a:d1:6c:39:f4:39:0d:bb:5f:c7:97:18:cb:34:17:0c:bb:70:
         59:0f:c2:e8:bb:91:de:2e:a1:0a:fd:9d:1f:6b:97:0e:2a:af:
         d0:91:2a:c2:21:33:03:bc:2f:04:b3:49:f3:0e:84:01:b6:9d:
         8b:10:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:42:25 2026 by rpki-client