Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33342d3334203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33342d3334203d3e20323639333539.roa (raw, json)
Hash identifier:          tMjdNKkQUVjjGba14xrAFaSs/vdUM8tkdv1mT8yxqIA=
Subject key identifier:   08:42:07:44:6B:7F:FE:AD:E0:B6:13:01:F9:9F:4E:3E:B0:71:CA:65
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       022A9FE587373D483A68250CCE7D010DD2C86EF0
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33342d3334203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:34 +0000
ROA not before:           Thu 03 Sep 2026 18:45:34 +0000
ROA not after:            Thu 02 Sep 2027 18:50:34 +0000
asID:                     269359
IP address blocks:        2804:6368::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2a:9f:e5:87:37:3d:48:3a:68:25:0c:ce:7d:01:0d:d2:c8:6e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:34 2026 GMT
            Not After : Sep  2 18:50:34 2027 GMT
        Subject: CN=084207446B7FFEADE0B61301F99F4E3EB071CA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:bd:15:df:34:41:43:0c:25:91:ab:3c:f6:
                    37:2e:36:15:07:0c:7a:f5:f2:da:43:6d:24:bc:54:
                    4d:1f:7b:e1:46:3b:fc:90:18:46:1b:f6:09:5d:18:
                    dd:19:a2:25:f6:97:ec:6d:7f:0b:8d:fc:02:7a:36:
                    25:14:5d:20:5e:b7:87:14:93:a7:d0:39:b1:79:d7:
                    1d:1b:fd:1f:11:1a:b4:3a:cf:b9:ab:7d:54:61:c8:
                    20:a9:6d:3f:f8:0d:4a:26:6b:c8:f1:1e:d1:78:77:
                    c1:c2:eb:27:3a:96:48:1c:26:05:8b:8a:95:e1:75:
                    1b:3d:bb:09:29:11:cd:06:6b:a4:11:ac:51:8c:7f:
                    ce:0e:b5:66:f2:8b:f1:97:be:15:25:84:d2:04:1c:
                    d2:32:63:21:0d:0d:fe:07:45:68:57:87:e8:ae:e6:
                    6a:c5:bd:a5:ad:bb:be:88:73:60:65:41:72:30:b5:
                    9b:68:d8:14:3e:5d:38:5a:2e:4b:24:d8:f9:90:24:
                    b4:cc:e6:26:4c:26:7c:49:98:e6:fa:fb:f0:b1:3c:
                    e5:49:b0:4c:4a:02:fb:af:9f:ff:b1:aa:54:22:f5:
                    50:bf:a6:44:a4:8e:2e:dd:71:a5:59:a1:3a:ea:18:
                    05:c2:88:5f:7e:45:db:a8:ec:96:87:91:67:42:e1:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:07:44:6B:7F:FE:AD:E0:B6:13:01:F9:9F:4E:3E:B0:71:CA:65
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33342d3334203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/34

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:23:ff:c7:03:b5:9b:fb:a5:0d:0c:cc:d0:66:c5:b8:5a:
         33:df:46:bd:cc:53:cb:0c:ec:80:aa:2e:5f:bd:41:c1:35:af:
         f8:97:21:7e:91:38:51:4f:68:6e:cc:9d:14:83:e8:e8:5f:de:
         25:61:3a:02:24:29:f8:7b:ba:12:4d:6c:cf:d9:f6:9b:2b:f6:
         2e:fb:68:f4:77:6c:31:20:98:18:9d:a9:9b:e1:66:cd:c8:e1:
         3f:f7:69:49:e7:86:83:66:e3:c3:10:a7:d1:be:a4:ba:09:1a:
         85:74:9a:0a:dc:65:d5:57:7b:c7:d9:f7:2c:16:72:23:39:5f:
         27:eb:3c:6b:b0:b7:6e:35:b0:d6:7d:70:9f:da:10:2a:4a:9c:
         5d:57:b7:e9:ad:d8:d2:ab:3b:82:92:62:17:a8:f7:c2:9e:ba:
         ff:02:8b:33:c2:93:16:7f:78:ee:9f:6f:fb:0f:e7:aa:82:72:
         f9:3c:11:30:69:12:41:bd:50:2f:b6:3c:84:4c:10:d0:89:9c:
         40:25:be:b1:2d:e7:98:50:53:95:04:15:6c:4e:71:e2:d3:81:
         52:df:7b:0b:5f:4b:22:47:1a:3a:7e:1d:45:ce:79:31:9c:ed:
         99:89:70:93:e8:29:5f:e0:eb:87:a7:45:0e:b3:b7:08:b7:05:
         ee:ae:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:47 2026 by rpki-client