Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa
File:                     323830343a326561383a3a2f33332d3333203d3e20323632363432.roa (raw, json)
Hash identifier:          uXZkKRCsrADiwM9pkfuYf1Uy76MjCNNQHJyy9vgScrY=
Subject key identifier:   04:21:F0:49:5A:09:D1:57:3C:DA:3A:9C:FB:E5:9B:17:2B:60:81:8E
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       440DDEB3B560DE0AC162681F67D4E5E10DADB0B9
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:00 +0000
ROA not before:           Fri 28 Aug 2026 17:01:00 +0000
ROA not after:            Fri 27 Aug 2027 17:06:00 +0000
asID:                     262642
IP address blocks:        2804:2ea8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 01:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0d:de:b3:b5:60:de:0a:c1:62:68:1f:67:d4:e5:e1:0d:ad:b0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:00 2026 GMT
            Not After : Aug 27 17:06:00 2027 GMT
        Subject: CN=0421F0495A09D1573CDA3A9CFBE59B172B60818E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:3e:f7:3b:d6:a9:ab:5e:11:c9:e1:7a:0c:
                    c9:ae:0d:dc:39:df:79:44:e4:90:ee:b5:3a:f7:93:
                    a1:2a:b8:c4:9a:54:8f:d1:a9:8d:0b:26:e2:61:b2:
                    db:85:44:cd:17:06:9b:41:7e:36:1c:8d:af:cb:4f:
                    9b:53:e1:b3:2e:4d:14:7a:5d:b4:10:bf:a8:b7:5c:
                    33:6a:dc:45:a1:ed:7c:37:30:ce:04:30:d8:10:10:
                    3e:9c:16:aa:05:f1:ea:17:a5:88:41:2f:03:2a:55:
                    41:dd:53:0a:e4:49:5b:08:6e:38:30:db:12:bf:95:
                    95:2c:ea:c8:02:dd:d0:19:66:33:c8:f5:fc:c7:90:
                    15:1a:94:e0:89:9c:24:ca:b7:57:0e:d6:6f:33:a2:
                    8f:2c:bb:da:80:37:53:57:11:95:2e:11:ef:85:e0:
                    0b:45:b5:a3:08:1f:bc:66:7a:5e:13:a7:ad:18:43:
                    ae:dd:b9:aa:0c:a9:53:57:ce:e3:ce:d6:4e:69:ea:
                    f9:73:36:4e:55:4f:7c:ce:b4:1b:bd:2b:c8:30:66:
                    a8:2f:41:06:b8:aa:4f:09:6b:3e:83:d2:e0:95:b1:
                    86:e5:6c:3e:f0:c5:75:24:33:c5:f4:53:55:c2:1d:
                    11:dd:dc:8b:03:95:25:e5:bf:35:08:ca:ad:2d:83:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:F0:49:5A:09:D1:57:3C:DA:3A:9C:FB:E5:9B:17:2B:60:81:8E
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/323830343a326561383a3a2f33332d3333203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:18:ae:5a:d7:8a:43:04:4b:97:c3:1a:a1:09:64:4a:28:
         e5:98:89:c2:7a:fe:6a:d9:8d:54:ee:30:56:4e:18:61:16:18:
         15:1b:3b:5b:0b:13:27:00:d0:ac:1f:ed:cb:6a:5c:52:78:2b:
         4e:d9:b2:bd:2a:37:91:a7:16:f6:2f:7d:72:31:ad:96:d0:da:
         85:41:df:58:7c:ea:5e:00:65:07:82:cc:9c:4d:c5:eb:49:0f:
         a7:b0:73:9f:30:eb:4d:ae:24:98:ba:9d:ce:b3:08:70:22:a7:
         a7:59:fd:cb:95:0e:8f:dd:7a:a9:09:c6:6f:00:38:a4:3a:ff:
         32:32:88:33:d0:4b:8a:de:2a:db:93:7b:22:47:a4:ec:4c:d9:
         8d:83:c1:92:93:2d:c8:65:8f:a5:a8:50:ad:aa:b5:c2:37:22:
         1b:83:38:3f:f4:c3:ac:5f:e8:b4:64:34:20:74:35:b6:4a:46:
         5b:2a:7b:85:4f:ca:a3:0e:4a:96:fa:c1:75:47:c7:b1:87:44:
         b1:41:b5:4b:f0:f6:9a:b4:36:85:4f:23:09:87:08:9d:36:6f:
         88:a8:dc:40:7b:41:1a:6d:f5:b9:e0:b0:21:19:7b:3c:75:cf:
         ab:4a:0e:d3:8b:09:32:ce:59:50:2f:8c:83:9a:2a:d3:c7:9f:
         91:78:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:24:14 2026 by rpki-client