Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
File:                     323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (raw, json)
Hash identifier:          VcUes8pyMfnqY1ivIdqCWS2hYk087WzJrg8UxLGOTKg=
Subject key identifier:   C9:94:4C:A7:67:FE:C3:CD:06:AF:DE:5F:D1:94:D8:51:89:65:BD:B9
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       7F85FECA782766455E45BE49AB2544BB095242DE
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 14:43:50 +0000
ROA not before:           Fri 28 Aug 2026 14:38:50 +0000
ROA not after:            Fri 27 Aug 2027 14:43:50 +0000
asID:                     264589
IP address blocks:        2804:2210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:fe:ca:78:27:66:45:5e:45:be:49:ab:25:44:bb:09:52:42:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:38:50 2026 GMT
            Not After : Aug 27 14:43:50 2027 GMT
        Subject: CN=C9944CA767FEC3CD06AFDE5FD194D8518965BDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:51:17:3a:14:71:90:a7:0b:71:00:79:79:
                    f2:91:10:c6:39:51:e6:df:06:5b:8f:2e:72:e2:d7:
                    6e:9a:b9:57:d1:e7:20:aa:9a:ba:c7:e1:c5:51:a0:
                    29:f5:00:fd:e9:35:a3:f4:a7:5a:91:f3:89:d0:2d:
                    d6:37:8b:91:60:5b:eb:4e:1d:c2:5e:b7:b9:d5:ea:
                    c3:35:8a:18:db:21:81:a8:3d:56:96:bf:1f:79:52:
                    17:1b:0c:8e:d4:38:9a:ff:3d:bc:51:0c:cf:c6:0b:
                    16:3e:e2:b5:37:a7:5c:9f:e9:4e:4b:87:a4:77:c3:
                    9d:8e:c9:a8:88:d0:a5:55:e0:89:a4:16:57:ad:7d:
                    b3:80:ee:6e:f0:4b:17:52:d4:81:84:34:1c:8a:7b:
                    ae:57:8c:63:85:5e:de:49:06:17:00:ee:cb:64:64:
                    38:01:e0:62:f3:b4:d7:d9:a5:8b:ea:dc:19:f3:72:
                    af:a5:68:17:7d:92:9f:3c:2a:5c:cd:1d:52:39:b3:
                    1a:69:53:00:59:78:e6:a8:e7:25:fe:ab:96:35:2e:
                    67:4c:0d:fa:d1:b3:e5:df:79:da:ce:9d:5c:7d:aa:
                    4d:43:02:eb:c9:9b:7d:9a:56:37:1c:53:70:f8:09:
                    94:24:e1:0f:27:cd:6f:f2:64:9c:fd:7a:d4:ac:0b:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:4C:A7:67:FE:C3:CD:06:AF:DE:5F:D1:94:D8:51:89:65:BD:B9
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:21:78:ab:83:13:c9:04:43:fc:34:f4:85:f6:d1:dc:26:
         94:25:b4:12:95:84:c8:88:a2:9e:a0:a4:06:dd:51:dc:9d:e9:
         85:4c:7f:44:8e:c7:30:81:39:72:10:be:fc:b1:fc:21:db:cb:
         ec:fe:58:7c:ef:2b:c8:f7:d5:af:ac:a2:6f:2f:aa:ad:1f:e8:
         79:96:0c:3b:d1:40:a0:26:0b:df:cb:1e:61:22:41:d3:73:19:
         bb:e0:1f:43:ea:33:63:0a:a6:b9:28:26:83:d5:85:bc:2c:e7:
         40:71:6a:b3:fb:d0:bd:8e:32:9b:90:11:9d:89:f1:90:98:c8:
         0b:0c:96:70:74:17:61:a2:ff:2e:ff:ed:1e:a2:03:bc:d1:b8:
         f1:4c:d0:ca:0e:5c:46:17:68:56:fe:40:de:d7:d0:2a:24:52:
         74:7d:a7:41:39:8f:bc:65:c3:a2:0f:ca:06:24:59:1d:1e:8d:
         fb:90:f3:db:10:9c:b6:ea:57:78:59:4e:cf:37:f7:67:f7:87:
         c6:8a:52:40:42:ee:4a:35:c1:36:86:b5:47:02:5e:98:ff:16:
         a0:85:f2:99:60:e1:7e:dd:c4:8f:53:5c:3f:a0:77:99:a3:bc:
         31:51:48:0d:19:2e:75:eb:51:d5:e6:2b:7b:ca:83:99:53:9c:
         f2:04:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:22:29 2026 by rpki-client