Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33332d3333203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33332d3333203d3e20323639333539.roa (raw, json)
Hash identifier:          DmK763ZFmD2nnv2Hzk8ObbPfhP8p32SIXxJC7IazNBA=
Subject key identifier:   54:F5:C2:1C:56:9C:22:03:8A:CE:E4:BE:A9:69:9F:97:67:A0:21:A2
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       216FAE900F7EB3CECCD5A664BD5C33307059937C
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33332d3333203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:32 +0000
ROA not before:           Thu 03 Sep 2026 18:45:32 +0000
ROA not after:            Thu 02 Sep 2027 18:50:32 +0000
asID:                     269359
IP address blocks:        2804:6368::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6f:ae:90:0f:7e:b3:ce:cc:d5:a6:64:bd:5c:33:30:70:59:93:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:32 2026 GMT
            Not After : Sep  2 18:50:32 2027 GMT
        Subject: CN=54F5C21C569C22038ACEE4BEA9699F9767A021A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:74:76:f0:b5:d3:29:1d:88:e8:8d:11:5d:
                    c9:d1:11:54:56:a2:d5:08:b3:5c:6b:07:df:ca:59:
                    54:09:98:80:2b:b1:1d:ce:d0:72:82:42:c4:62:21:
                    d5:97:d8:2f:06:ff:9f:6c:3d:c9:18:f7:36:83:26:
                    0c:7b:98:7f:fc:c3:38:99:22:1d:c5:03:f5:c0:5f:
                    29:a3:c7:6d:ec:41:ab:e7:20:56:60:dc:f5:cd:5e:
                    c3:a5:c7:b8:63:72:2e:ae:6a:08:cd:c5:98:b6:ef:
                    9b:bb:33:be:0e:99:18:18:b3:6c:68:f2:a9:1b:b4:
                    72:f9:9a:79:bb:e7:b7:cd:18:b4:ca:36:a6:cb:e0:
                    3f:fc:99:59:b9:10:19:95:fe:15:aa:f4:6c:af:5e:
                    12:b9:e4:d5:4a:df:a1:fd:d4:1c:5c:1b:1d:36:10:
                    bf:61:d1:fe:83:77:65:ab:df:71:d5:4f:8b:73:4d:
                    eb:d4:4b:04:97:f4:01:ff:8b:63:16:1e:bc:45:64:
                    5d:81:88:86:4e:83:cb:8f:ea:8f:a5:7a:9b:18:6d:
                    7e:20:fe:27:3c:45:9f:68:c6:e3:1e:1f:e3:ff:9f:
                    f8:9f:3d:61:3a:07:cd:8e:fa:37:30:02:ec:93:86:
                    d7:39:bb:8a:c6:e8:41:63:49:5a:48:94:1c:da:00:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:C2:1C:56:9C:22:03:8A:CE:E4:BE:A9:69:9F:97:67:A0:21:A2
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33332d3333203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:b0:bd:2b:b9:f8:75:7d:14:a0:e1:bf:36:76:5c:61:a0:
         d0:e9:a4:bc:f4:9a:94:00:5e:54:81:73:5d:bc:25:5e:60:1f:
         88:d7:97:08:ed:ed:ef:e2:a1:d3:89:7d:9b:96:46:4e:1e:89:
         10:1b:20:f0:10:33:a4:2b:85:6e:ed:ea:0c:62:e2:09:b1:86:
         d0:36:10:82:6f:1b:9e:a2:ca:b5:7e:91:9c:7b:a8:45:63:c2:
         4c:43:50:57:92:68:13:b8:fd:f4:31:85:34:ff:07:36:7a:59:
         e0:b0:68:5d:31:63:58:87:2d:44:99:77:a5:7e:61:69:60:95:
         54:15:26:61:ac:4d:14:fa:02:61:23:e3:0a:aa:25:54:a5:3d:
         99:52:d5:41:64:cb:fb:f4:f0:17:c7:b6:7d:a9:a4:89:ca:e9:
         4e:ee:06:02:60:03:61:52:2c:28:b6:e1:35:c1:25:47:f5:e7:
         57:f0:55:a2:1c:36:31:a0:dc:55:36:8c:7c:fa:ab:2f:e3:2e:
         5e:88:59:57:ac:09:7e:e0:43:8d:c9:a1:d3:e4:82:5a:5f:f3:
         c2:7a:58:4d:43:09:b1:ba:df:36:7f:d0:67:e1:00:3d:17:02:
         e6:aa:9b:ee:0d:a8:d5:f3:fd:05:df:a1:1c:1e:c3:d1:7f:7f:
         f2:88:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:53 2026 by rpki-client