Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/323830343a386438343a3a2f33322d3438203d3e20323733333632.roa
File:                     323830343a386438343a3a2f33322d3438203d3e20323733333632.roa (raw, json)
Hash identifier:          ViLaHtV6Yk4IDR3qcOCOhR5UE94QFZwgjaIuAhxSgoc=
Subject key identifier:   86:9F:64:9D:D1:20:F2:D5:99:7D:52:CF:F4:29:38:94:99:7F:AE:D2
Certificate issuer:       /CN=040EF4179B818F193FC21E9010EDB21DD3FD6262
Certificate serial:       77EA9D52DD5FFAECB0C813E10C6D268A63F3E6E3
Authority key identifier: 04:0E:F4:17:9B:81:8F:19:3F:C2:1E:90:10:ED:B2:1D:D3:FD:62:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040EF4179B818F193FC21E9010EDB21DD3FD6262.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/323830343a386438343a3a2f33322d3438203d3e20323733333632.roa
Signing time:             Tue 06 Oct 2026 19:45:54 +0000
ROA not before:           Tue 06 Oct 2026 19:40:54 +0000
ROA not after:            Tue 05 Oct 2027 19:45:54 +0000
asID:                     273362
IP address blocks:        2804:8d84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/040EF4179B818F193FC21E9010EDB21DD3FD6262.crl
                          rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/040EF4179B818F193FC21E9010EDB21DD3FD6262.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040EF4179B818F193FC21E9010EDB21DD3FD6262.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 03:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ea:9d:52:dd:5f:fa:ec:b0:c8:13:e1:0c:6d:26:8a:63:f3:e6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040EF4179B818F193FC21E9010EDB21DD3FD6262
        Validity
            Not Before: Oct  6 19:40:54 2026 GMT
            Not After : Oct  5 19:45:54 2027 GMT
        Subject: CN=869F649DD120F2D5997D52CFF4293894997FAED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:f5:f0:1c:30:91:2e:96:56:7e:cb:fe:28:
                    18:86:03:e4:f7:3f:aa:33:41:af:7f:45:83:14:83:
                    02:c6:73:8e:53:27:60:6b:52:d3:40:aa:ba:03:82:
                    28:a0:f1:92:07:d1:62:94:be:34:75:13:59:b9:af:
                    bc:9a:ad:59:6a:cb:a3:74:14:1f:a2:77:5e:26:f8:
                    b2:a8:d6:a6:bd:32:a0:66:61:e9:fc:3f:01:f1:42:
                    66:bb:ec:04:af:d9:82:b9:84:00:49:b1:fa:c8:f1:
                    1a:1a:92:46:1c:01:33:99:3c:f0:30:34:bf:d2:5d:
                    ba:e1:4b:5f:43:56:68:d3:f8:de:76:bf:1a:d2:01:
                    e4:cd:ca:e6:75:d4:0c:88:c3:80:8a:79:04:dc:6e:
                    06:38:b1:11:7c:4c:6d:06:d2:c9:47:dc:8f:9d:92:
                    99:48:6c:d5:fb:34:f2:fc:94:86:c3:a5:5f:f0:3b:
                    dc:30:48:df:50:9e:42:ee:41:de:2d:3b:97:38:14:
                    8d:fe:6f:41:89:5a:b3:a7:d8:6f:f7:32:29:dc:e2:
                    27:3a:e6:f7:24:08:84:ea:d8:2d:92:06:7a:ab:23:
                    b4:97:6b:e7:98:e6:e3:8a:29:55:1d:66:7d:67:fc:
                    c7:96:3f:81:85:28:76:02:ca:22:e2:29:75:10:71:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9F:64:9D:D1:20:F2:D5:99:7D:52:CF:F4:29:38:94:99:7F:AE:D2
            X509v3 Authority Key Identifier:
                keyid:04:0E:F4:17:9B:81:8F:19:3F:C2:1E:90:10:ED:B2:1D:D3:FD:62:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/040EF4179B818F193FC21E9010EDB21DD3FD6262.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040EF4179B818F193FC21E9010EDB21DD3FD6262.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZWnRU5BoJNPNkyyj9SNy1hCnxdFX4HXfkoqShsy1D2e/0/323830343a386438343a3a2f33322d3438203d3e20323733333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d84::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:bb:59:d4:d6:d5:41:47:ef:da:43:ea:6e:bb:b7:50:9a:
         ab:4d:c9:ac:ac:5c:a4:34:15:45:3d:40:4f:35:ff:55:e5:a6:
         81:0c:c9:e4:9a:48:ea:0b:5f:17:f0:20:43:ef:61:6a:48:d2:
         a9:e5:2e:05:81:70:61:e3:3a:73:b2:05:6f:da:73:3b:f8:b4:
         5a:12:d1:28:2e:06:e7:fc:66:83:ec:52:cd:b7:87:76:ac:bf:
         b6:3f:aa:e0:e1:b6:06:9d:98:7d:b1:40:a7:31:07:83:a2:bb:
         7e:04:10:80:fb:d9:c5:96:54:9e:0f:05:83:45:0f:d1:28:af:
         8c:f6:f1:d1:ab:92:1d:9b:94:3c:02:b2:3f:3a:c5:6a:31:38:
         75:56:96:f0:45:1a:91:2b:a8:3b:c8:05:1c:7c:fa:ed:f6:4c:
         db:ca:9b:e1:f5:10:79:49:a3:45:32:1c:a1:3a:e1:cc:bf:e3:
         a5:a7:cd:ff:d4:f0:87:16:f2:ab:76:1c:9d:7a:b5:a9:91:c4:
         c5:47:06:83:8c:40:23:dc:4d:db:75:85:a2:8e:22:7f:8a:8c:
         0c:c5:c2:c4:2a:91:cb:7d:c9:dd:67:1d:51:4c:0d:e2:75:3c:
         1b:87:6b:bf:36:a8:9b:d0:91:c0:9b:b6:f7:b9:44:dc:44:dc:
         75:47:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:37:04 2026 by rpki-client