Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          9Iyli/uIEvZigxRu171KIl27FSKoJkRHqhTQWKujtso=
Subject key identifier:   76:B1:3F:AC:C6:E8:9C:29:E8:64:61:62:87:3B:4C:06:A6:EA:44:CF
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       6F581DFDEF45B2B2A28A1244BEB19E56F9F5F1C7
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:31:01 +0000
ROA not before:           Fri 28 Aug 2026 18:26:01 +0000
ROA not after:            Fri 27 Aug 2027 18:31:01 +0000
asID:                     264996
IP address blocks:        2804:3124:c00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:58:1d:fd:ef:45:b2:b2:a2:8a:12:44:be:b1:9e:56:f9:f5:f1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:26:01 2026 GMT
            Not After : Aug 27 18:31:01 2027 GMT
        Subject: CN=76B13FACC6E89C29E8646162873B4C06A6EA44CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:e2:95:2c:db:29:fb:7d:24:1e:5b:5a:eb:
                    90:f7:be:8f:73:56:03:5e:0b:c8:00:0c:79:22:9d:
                    47:f6:67:a6:63:3b:e0:3a:2c:b8:70:10:f4:65:65:
                    59:30:87:ca:a5:5a:96:69:18:53:b7:d1:fa:96:9f:
                    c8:47:c4:b0:aa:56:fd:6a:e7:80:2a:c9:5b:95:29:
                    dc:36:45:e2:0b:e3:09:d6:67:cf:0f:38:8d:15:87:
                    03:e7:db:6c:32:15:b4:2d:b1:5e:84:7a:92:9c:98:
                    13:d9:3d:62:d0:cb:f5:2d:e2:9f:41:78:d9:eb:d4:
                    68:75:81:74:ea:60:ee:83:03:0c:bf:d7:60:21:14:
                    95:52:bb:7c:82:b2:84:b0:89:b7:54:13:fb:6c:ea:
                    a4:59:01:7a:8a:74:0b:d5:83:e0:d4:6b:83:a1:1a:
                    57:c6:f4:80:2a:e8:3b:ef:bc:fe:ca:48:49:4c:72:
                    10:3c:d8:d9:61:b7:10:85:45:cc:d9:22:36:78:3b:
                    6d:15:50:73:bf:12:20:71:8f:0c:17:84:71:a3:8f:
                    e2:89:e7:4f:6c:2e:a6:53:9c:69:8c:36:9d:3b:b6:
                    ae:db:fb:f9:50:b0:3b:c2:81:78:7e:24:e1:5f:ea:
                    1f:1c:de:8b:6a:2c:68:b0:5b:4b:c2:9d:20:fa:17:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:3F:AC:C6:E8:9C:29:E8:64:61:62:87:3B:4C:06:A6:EA:44:CF
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:83:73:cb:c5:6d:c2:07:9f:3c:a2:4d:bd:ee:a3:0f:37:8f:
         cb:73:df:07:1c:73:58:88:64:8d:1e:dc:fd:21:a9:1b:18:e7:
         b3:40:86:57:fc:37:90:1c:da:de:93:d2:80:f5:2b:71:ba:20:
         a8:dc:1d:88:2d:86:24:c5:e5:d4:42:f4:29:3e:3e:60:b9:20:
         7e:09:65:74:86:98:35:1e:78:a2:dc:6a:29:96:73:29:af:c2:
         0a:55:b9:30:76:4c:62:4f:96:45:5d:07:be:85:01:40:3c:24:
         43:8a:a7:30:7c:b3:b4:91:0e:7b:71:01:08:99:27:01:ca:b7:
         84:38:8f:69:57:60:3d:3b:9e:aa:80:95:a3:47:20:8c:25:63:
         31:9e:fc:e8:30:7b:0d:32:c4:2d:2d:ec:aa:3c:8b:2b:20:13:
         e5:26:a0:1f:3a:6b:25:49:6f:8a:14:ac:12:77:64:33:fb:0e:
         a8:09:a5:c8:18:d8:ff:a4:26:f9:6b:22:8c:df:05:c2:3a:02:
         5e:e1:f0:55:13:bb:6f:34:8d:ce:fc:cb:2d:4f:37:4c:fb:b9:
         b4:6a:79:76:65:5a:9d:ef:8e:44:ba:d4:99:d6:3b:50:6b:ff:
         d3:f3:c8:a9:50:e6:85:a0:eb:80:7f:b2:63:61:d8:74:cd:f4:
         72:d8:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:42:08 2026 by rpki-client