Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/323830343a363836633a3a2f33322d313238203d3e20323639363931.roa
File:                     323830343a363836633a3a2f33322d313238203d3e20323639363931.roa (raw, json)
Hash identifier:          FLFTGM9AIZWmKCBRklEOOFKnW+ljRCi13IBRFNfRFNE=
Subject key identifier:   3E:B2:B6:0A:BB:18:C7:D2:ED:0A:AC:C6:35:FF:4A:8D:DF:01:02:03
Certificate issuer:       /CN=12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A
Certificate serial:       1EAEFFC5C20F4D758B10EC813BBAA7DBEAE84135
Authority key identifier: 12:E3:6D:0D:E2:88:3B:3D:EB:BE:89:A0:8A:8C:64:74:B8:AC:96:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/323830343a363836633a3a2f33322d313238203d3e20323639363931.roa
Signing time:             Thu 27 Aug 2026 14:33:36 +0000
ROA not before:           Thu 27 Aug 2026 14:28:36 +0000
ROA not after:            Thu 26 Aug 2027 14:33:36 +0000
asID:                     269691
IP address blocks:        2804:686c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.crl
                          rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 16:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ae:ff:c5:c2:0f:4d:75:8b:10:ec:81:3b:ba:a7:db:ea:e8:41:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A
        Validity
            Not Before: Aug 27 14:28:36 2026 GMT
            Not After : Aug 26 14:33:36 2027 GMT
        Subject: CN=3EB2B60ABB18C7D2ED0AACC635FF4A8DDF010203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:82:a6:62:6c:d5:1e:2c:c9:52:05:90:31:
                    62:31:5e:c1:27:95:ff:4f:70:02:ea:b6:57:71:74:
                    9f:53:98:74:57:4c:87:4f:be:f4:0d:43:bf:b1:1e:
                    60:23:73:9d:33:bf:d3:dc:77:c0:68:0f:cb:81:07:
                    d4:78:d4:7e:d8:90:f8:fb:3c:bf:fb:6d:ad:3d:56:
                    5d:b4:67:4a:8b:02:26:70:3a:ea:eb:cc:6a:65:50:
                    5d:fe:f7:9f:49:c2:fc:cb:41:22:0c:f3:52:aa:1a:
                    d8:ca:5d:3a:d0:4f:97:e8:6d:77:5e:46:35:67:16:
                    10:ed:30:91:2c:d6:9c:a4:e5:c9:12:a4:bc:18:fe:
                    70:2f:60:3a:60:db:fb:68:7d:2d:34:8a:c3:ec:a6:
                    40:8f:54:48:a3:18:d3:70:69:e8:b5:62:b4:a5:5b:
                    08:3a:ef:e3:e9:a3:33:fa:6e:aa:cd:00:ec:02:5a:
                    e8:c8:93:70:0a:9e:40:98:46:2d:d9:23:a7:97:da:
                    35:3c:15:6b:ce:8d:b7:0c:e4:31:2a:de:a1:84:b3:
                    05:2b:6c:40:94:a6:b2:bd:96:ff:e9:5b:59:98:8e:
                    2d:38:5f:8f:0b:16:78:98:27:73:a3:4b:a8:c2:49:
                    91:43:68:75:06:ce:3c:24:fe:2f:25:04:8c:cd:10:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:B6:0A:BB:18:C7:D2:ED:0A:AC:C6:35:FF:4A:8D:DF:01:02:03
            X509v3 Authority Key Identifier:
                keyid:12:E3:6D:0D:E2:88:3B:3D:EB:BE:89:A0:8A:8C:64:74:B8:AC:96:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12E36D0DE2883B3DEBBE89A08A8C6474B8AC960A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEWA7P9h9AE3YfT68UTbhzo7dfjTuJFdam6qG99Q9Wj/0/323830343a363836633a3a2f33322d313238203d3e20323639363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:686c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:8e:d9:05:f7:b4:13:23:eb:b5:6a:99:02:6e:9a:12:41:
         bf:99:53:23:af:2e:33:1f:be:4d:8c:83:36:cc:8a:cb:56:bc:
         f2:62:63:42:2a:ac:77:23:7b:e4:9e:51:58:27:be:19:39:b1:
         14:19:3b:1a:6e:a8:87:65:b7:43:83:43:83:8b:ab:c6:b0:ac:
         83:41:c9:14:b1:6f:5c:a0:89:78:3b:61:3b:a1:f0:4e:c1:13:
         d7:02:82:52:0b:b0:5d:8d:b9:1e:9f:c1:2c:e7:05:e5:34:aa:
         75:57:9e:0e:c3:0b:91:5b:66:95:e6:a5:ef:ac:83:b5:7e:1a:
         2d:77:8f:99:a6:8f:2a:88:39:31:b8:b1:aa:c8:65:59:0e:a7:
         7f:d5:56:8a:41:1b:c4:32:19:0c:bd:80:8f:c5:07:5f:55:18:
         39:1e:5e:9b:55:a5:b1:87:c4:cc:3c:15:27:ee:19:3f:43:97:
         4e:f1:37:7e:c3:21:b1:69:fe:a9:08:a4:7d:57:65:71:6c:be:
         7a:b0:a2:49:1c:c6:2b:cf:65:f3:f4:0b:78:63:3a:ee:72:dd:
         17:4a:47:07:bc:3b:61:42:c4:d6:ce:4a:31:4f:d4:41:fa:83:
         20:9c:03:4a:d3:8f:6b:41:43:ec:8e:96:0a:10:76:94:24:f7:
         41:c1:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:41:29 2026 by rpki-client