Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          1bIdrbcg+m+Ocib+YMFj0HK1fgQx5cP5trAWjzGJJ8k=
Subject key identifier:   CF:93:54:BB:07:08:ED:E7:34:97:FD:73:C5:65:DA:E9:F4:CF:58:87
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       1BCCE66D174D186A01D262FE56B0DB54DA27F404
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 15:00:36 +0000
ROA not before:           Fri 28 Aug 2026 14:55:36 +0000
ROA not after:            Fri 27 Aug 2027 15:00:36 +0000
asID:                     264589
IP address blocks:        2804:2210::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cc:e6:6d:17:4d:18:6a:01:d2:62:fe:56:b0:db:54:da:27:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:55:36 2026 GMT
            Not After : Aug 27 15:00:36 2027 GMT
        Subject: CN=CF9354BB0708EDE73497FD73C565DAE9F4CF5887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:73:16:b3:5d:8d:b6:15:5b:70:ce:b2:27:
                    b4:ba:4d:04:03:d8:1b:a8:1f:86:cc:56:8d:12:45:
                    a4:9d:da:1b:67:4e:45:19:f9:69:f2:21:a7:12:2f:
                    03:ff:12:ff:26:8f:c1:47:b1:af:f9:3b:a5:85:91:
                    3a:a3:05:3a:f0:eb:e3:f4:e0:fe:b2:62:1d:90:04:
                    96:41:0a:44:85:5d:40:03:0a:56:cb:7f:6f:98:05:
                    a3:ad:e3:12:fa:57:7f:81:11:b0:c3:bf:b9:9f:09:
                    71:bc:05:28:2c:2b:92:19:5b:d8:93:77:f5:be:55:
                    a0:45:75:74:1a:01:8c:7e:6c:7c:a6:cb:4c:44:ac:
                    1e:00:4c:1a:bf:b1:ba:47:0c:5d:1f:ee:e1:1e:e9:
                    2e:e8:55:76:6f:6c:34:b6:c3:51:fb:3f:74:d8:7f:
                    74:12:69:92:cf:42:a7:34:d8:06:1a:b2:16:25:f4:
                    9a:4f:ce:ff:43:33:2f:cb:a9:28:2b:d6:50:cc:2f:
                    21:7a:7c:51:3a:8a:ec:d7:fa:6f:ce:54:73:bb:79:
                    93:ff:90:c7:fd:4c:9b:82:97:57:4e:f8:7c:e6:a7:
                    4a:04:30:ca:c1:3a:d7:26:65:18:65:ae:e5:97:92:
                    da:13:03:4c:b9:ce:85:a3:45:93:70:cb:a3:7d:ae:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:93:54:BB:07:08:ED:E7:34:97:FD:73:C5:65:DA:E9:F4:CF:58:87
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:36:71:2e:e1:7e:c2:c2:e3:0d:59:53:2e:88:10:2f:b6:0c:
         9e:7b:ee:14:59:34:c9:e0:28:c0:f4:2f:59:70:c0:88:a1:6d:
         0f:4d:2e:ae:1d:c2:36:99:9d:26:01:82:21:63:7c:6a:c1:32:
         f9:7f:ef:b8:0e:31:79:37:10:8c:2b:07:f8:94:d0:c9:1e:29:
         50:ef:94:d2:ac:97:2a:89:f0:17:fc:12:34:85:a7:7d:4c:3e:
         9a:b6:02:89:c1:ac:35:76:b8:bb:70:b5:a2:61:bc:b4:da:a6:
         01:2e:12:37:76:2a:82:65:e5:24:00:b5:67:bb:78:eb:35:21:
         4c:2e:22:e3:f0:39:64:00:c4:df:69:a4:12:df:7a:8b:86:99:
         be:bc:ae:c8:15:bf:21:62:ca:63:8f:15:e1:7e:d2:69:27:b4:
         f4:79:67:0b:0c:13:8c:72:ff:62:e6:33:50:5d:2b:1c:2a:09:
         4a:ca:89:0a:ce:dc:67:30:b2:41:03:fd:a7:19:fd:ac:01:3d:
         1a:74:dd:f9:ff:35:d5:62:c0:62:e8:65:0d:c3:a9:6f:c3:f7:
         bb:ea:d0:67:e2:21:e4:28:42:85:c5:a4:a1:23:73:73:8d:ec:
         3b:35:34:36:f0:fd:63:68:33:ec:19:1c:63:e3:37:cc:c7:6c:
         a7:d2:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:09:38 2026 by rpki-client