Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663130303a3a2f34312d3431203d3e20323634393532.roa
File:                     323830343a333037343a663130303a3a2f34312d3431203d3e20323634393532.roa (raw, json)
Hash identifier:          apcPUKzkqQO/55zEUxehCKrdm8TkZG+MjYWm/XImuSo=
Subject key identifier:   55:88:16:FD:21:32:FE:B7:02:CD:B4:D2:F9:0A:C3:8F:10:31:2D:55
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       37F18A01463C0E2A01D7223AA018D4155083438F
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663130303a3a2f34312d3431203d3e20323634393532.roa
Signing time:             Sat 26 Sep 2026 15:22:40 +0000
ROA not before:           Sat 26 Sep 2026 15:17:40 +0000
ROA not after:            Sat 25 Sep 2027 15:22:40 +0000
asID:                     264952
IP address blocks:        2804:3074:f100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 04:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f1:8a:01:46:3c:0e:2a:01:d7:22:3a:a0:18:d4:15:50:83:43:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Sep 26 15:17:40 2026 GMT
            Not After : Sep 25 15:22:40 2027 GMT
        Subject: CN=558816FD2132FEB702CDB4D2F90AC38F10312D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:c1:88:0f:b0:45:02:16:e6:a1:21:ba:02:
                    78:ca:ca:22:5d:31:fb:59:07:58:f3:78:a1:68:9a:
                    82:15:97:fd:d9:37:1a:24:29:e3:0e:f9:09:60:22:
                    cb:be:2c:c0:34:64:2b:11:dd:7a:9c:95:81:f4:ea:
                    e2:45:f3:72:6f:12:27:24:82:af:14:65:9d:71:7e:
                    f3:24:71:d5:70:6e:82:d7:61:8c:a2:1f:01:a1:a9:
                    5c:7c:42:a2:a3:4b:68:32:3b:a6:37:dd:cf:b2:14:
                    2f:2f:ee:aa:0f:91:b4:df:db:92:1a:9b:a7:2f:f2:
                    11:1d:82:c8:e4:c3:94:d7:56:e7:54:ba:58:74:37:
                    3d:99:d4:c8:67:35:e1:fa:c4:57:de:49:9f:d7:50:
                    c6:de:7d:a9:e4:0c:93:63:6a:71:51:6a:87:b2:d0:
                    12:a2:9a:b5:50:5d:2a:6e:fe:d1:aa:4b:38:b3:a3:
                    11:96:c8:db:cc:d8:53:2e:63:5e:e5:1a:17:3b:52:
                    68:2c:5b:4e:47:70:16:cd:f9:4f:54:8e:f9:99:b8:
                    a2:29:df:c1:68:cb:99:9c:b0:cc:2d:61:31:88:92:
                    f8:4e:7c:07:80:8a:2f:51:62:04:23:13:7e:bf:c7:
                    d7:18:95:58:1e:57:61:36:00:8b:a9:80:c7:88:f4:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:16:FD:21:32:FE:B7:02:CD:B4:D2:F9:0A:C3:8F:10:31:2D:55
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663130303a3a2f34312d3431203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:f100::/41

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:4f:55:8a:fd:6b:ed:d9:d7:ae:c4:85:22:2e:20:9a:79:
         4e:04:61:71:92:d9:59:f0:a4:94:f4:8b:50:69:bb:da:5a:76:
         e4:6f:d6:60:6d:ec:27:63:47:06:43:a1:8b:04:e5:4a:26:fd:
         c8:e3:79:1f:22:31:30:70:aa:f3:0f:c4:9f:8c:16:91:3d:43:
         ce:74:ed:b4:23:59:de:6b:36:b0:cc:98:67:95:3f:29:c3:e3:
         46:6e:e5:94:31:9a:06:50:3b:25:b7:e5:d4:ae:8a:a9:75:d6:
         d3:d7:c9:6c:55:54:a4:80:39:82:41:20:df:57:ee:8e:dc:39:
         ee:2e:d9:ca:53:c1:25:ff:db:3d:14:32:cf:48:7c:3a:60:b4:
         60:86:b4:eb:a4:7e:19:94:5c:f3:94:57:7f:c3:7b:5a:70:74:
         48:11:a4:4a:06:9c:f6:42:08:43:90:66:e3:e8:cc:01:ca:88:
         ae:0e:55:cb:bc:6a:73:c8:bb:3b:1d:97:4f:15:d4:53:97:63:
         fa:7d:47:c7:07:9a:b0:75:29:60:ef:d1:e9:08:6d:d4:7f:4c:
         9b:4b:50:e9:d0:b1:de:12:e5:6a:c2:31:b6:e7:10:57:6f:b5:
         e1:6c:c3:ae:5f:51:bb:a7:f4:ec:ba:a8:7c:9f:96:a0:8a:59:
         01:0f:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----