Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          LuYF6yTb4xsnYQQFjBU9Hcf4hn4UX+BeSDDxJ4PTSGg=
Subject key identifier:   4D:6C:58:38:78:28:A9:94:1A:CF:86:C8:32:E0:BE:04:CD:54:36:96
Certificate issuer:       /CN=827D965704E253482E03B27A810CA99521D92AE0
Certificate serial:       34FF8515D094F8029C39F71E990E0121C33B1C03
Authority key identifier: 82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Fri 28 Aug 2026 18:41:22 +0000
ROA not before:           Fri 28 Aug 2026 18:36:22 +0000
ROA not after:            Fri 27 Aug 2027 18:41:22 +0000
asID:                     264996
IP address blocks:        2804:3124:c00d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ff:85:15:d0:94:f8:02:9c:39:f7:1e:99:0e:01:21:c3:3b:1c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827D965704E253482E03B27A810CA99521D92AE0
        Validity
            Not Before: Aug 28 18:36:22 2026 GMT
            Not After : Aug 27 18:41:22 2027 GMT
        Subject: CN=4D6C58387828A9941ACF86C832E0BE04CD543696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:f2:29:69:53:46:2a:5d:ca:1c:70:eb:cd:
                    96:23:6d:a4:c9:28:01:f0:55:79:ed:ed:85:25:87:
                    4a:00:9b:04:8d:42:ef:ba:c9:45:48:09:43:ee:a9:
                    56:20:f0:ac:14:9a:53:15:ca:df:85:8b:b4:d6:7e:
                    36:73:20:8c:6f:b4:e2:d0:8a:96:4e:de:c4:aa:c1:
                    df:8d:40:0b:4f:4d:c6:77:b1:26:d5:19:9a:cb:ec:
                    df:f6:6d:25:35:cb:37:e8:0d:81:d1:8b:cb:3b:76:
                    81:9f:bb:e1:ea:af:33:b9:24:a0:ff:20:aa:ee:bf:
                    68:ad:7d:71:cf:09:8f:a4:c7:1a:ba:16:28:55:23:
                    12:c4:a9:2a:ad:7d:98:0b:b3:91:7b:fb:43:90:44:
                    e7:c2:7b:55:ff:17:00:04:81:0c:28:34:1d:82:ad:
                    62:01:d1:7e:0e:9a:0c:26:09:1a:78:05:39:70:30:
                    e3:7c:01:c1:06:a0:13:ba:0f:9e:79:0a:74:aa:18:
                    35:32:2f:fe:a3:6c:58:21:8b:0c:55:91:ff:fc:e4:
                    64:b7:3f:aa:80:39:0d:18:fa:61:09:43:3d:85:94:
                    4a:23:64:c9:7b:82:72:d9:d9:5c:8f:ec:0d:cc:30:
                    93:4e:4a:21:a8:37:19:e7:9d:11:c0:43:71:67:4f:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:58:38:78:28:A9:94:1A:CF:86:C8:32:E0:BE:04:CD:54:36:96
            X509v3 Authority Key Identifier:
                keyid:82:7D:96:57:04:E2:53:48:2E:03:B2:7A:81:0C:A9:95:21:D9:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/827D965704E253482E03B27A810CA99521D92AE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/827D965704E253482E03B27A810CA99521D92AE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/0/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:a4:e3:c5:44:39:f5:c7:f1:1d:bf:d0:f2:e8:74:75:6a:f6:
         71:5e:f4:cd:8d:fb:1b:f6:af:1c:83:f2:9a:9f:f0:95:bc:4e:
         84:68:be:a2:0f:2a:79:58:c6:91:9f:4b:81:6f:41:8c:3d:85:
         c5:d1:dc:77:2e:d0:56:3c:3b:dc:5f:3f:d9:2b:5a:9b:6b:33:
         69:01:fe:54:25:1d:1e:a0:6e:76:53:58:69:90:3f:08:dc:4e:
         84:62:9e:55:36:8a:d2:c0:f6:1a:ae:59:4e:3f:10:1c:73:a7:
         7e:e8:ba:93:28:2c:77:cc:a3:3e:6b:61:3e:ba:e4:6a:c0:06:
         d3:c0:4e:b1:96:c5:a4:fa:c9:e6:12:85:86:87:a8:85:14:e0:
         97:dc:85:48:2b:1f:83:1d:4b:75:d1:37:2c:54:09:99:90:65:
         59:a2:81:b0:e9:0a:ab:15:9d:da:30:62:3e:22:69:2e:d4:fc:
         53:d8:41:1c:c4:98:f6:47:3f:ba:36:d7:68:9b:fc:19:38:32:
         48:ba:6f:2b:33:25:18:66:5e:5e:8e:ef:08:90:96:f7:16:a5:
         80:75:47:c2:6a:98:65:9b:b0:bd:f4:2b:48:4c:3b:5d:2d:2c:
         5d:a6:a3:92:6e:db:db:6c:0b:9a:2a:21:8f:4f:86:c3:75:c1:
         cf:de:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:34 2026 by rpki-client