Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a3a2f33372d3337203d3e20323634323332.roa
File:                     323830343a323439383a3a2f33372d3337203d3e20323634323332.roa (raw, json)
Hash identifier:          A3qvA95PpdTQd0IpnfwHqR3Na9xev4UeQ1wyJv9Nx1g=
Subject key identifier:   77:29:9E:90:6A:9B:24:FF:7F:6D:79:A2:E6:0B:1F:40:62:FA:D6:09
Certificate issuer:       /CN=B2771D29A01562AAA95113C615088B87C19EEA71
Certificate serial:       5980DE99504D2C3CC1360803987524F098904A5A
Authority key identifier: B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a3a2f33372d3337203d3e20323634323332.roa
Signing time:             Fri 11 Sep 2026 20:11:38 +0000
ROA not before:           Fri 11 Sep 2026 20:06:38 +0000
ROA not after:            Fri 10 Sep 2027 20:11:38 +0000
asID:                     264232
IP address blocks:        2804:2498::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl
                          rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:80:de:99:50:4d:2c:3c:c1:36:08:03:98:75:24:f0:98:90:4a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2771D29A01562AAA95113C615088B87C19EEA71
        Validity
            Not Before: Sep 11 20:06:38 2026 GMT
            Not After : Sep 10 20:11:38 2027 GMT
        Subject: CN=77299E906A9B24FF7F6D79A2E60B1F4062FAD609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:40:33:24:ca:62:e4:12:24:4f:46:75:cd:
                    37:4d:bf:06:4f:d6:af:f3:cf:45:f2:4f:da:3d:9d:
                    16:a0:38:50:af:4a:a2:57:e8:4e:1c:f7:6a:70:76:
                    e0:5a:eb:73:b0:7c:04:2a:c2:19:09:62:b3:6f:e7:
                    49:99:ad:39:ec:58:a8:e2:50:26:d7:e2:28:4f:ec:
                    03:2d:cf:81:0c:dc:15:e7:d1:b4:e8:97:73:6a:c6:
                    a6:8b:97:ab:d3:03:27:e1:c1:aa:f9:c3:d4:25:33:
                    ca:3d:09:dd:07:29:c0:57:bb:2c:d3:62:77:5d:a7:
                    df:b0:d4:b7:f6:64:b7:ae:99:f6:76:35:be:cb:fd:
                    46:bb:99:60:ae:0d:57:f6:a8:97:02:3c:4f:11:4d:
                    7b:d0:b7:54:ef:da:60:bd:dc:b3:3d:93:76:e7:33:
                    ae:85:7d:17:db:a9:ee:a5:8d:e3:19:13:b2:e9:02:
                    92:2d:21:cf:7a:ca:e6:e6:9b:b0:17:39:af:da:84:
                    8d:c1:ed:2f:f4:10:7b:1c:5d:9e:a5:bf:8e:7f:c3:
                    4f:db:f6:84:4a:eb:61:48:27:a0:7d:99:c4:8c:c3:
                    47:9b:d0:65:ef:27:6f:40:2c:8f:4d:fb:04:13:62:
                    6d:ab:7a:25:77:0a:0a:e3:24:8f:ad:ff:ad:64:50:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:29:9E:90:6A:9B:24:FF:7F:6D:79:A2:E6:0B:1F:40:62:FA:D6:09
            X509v3 Authority Key Identifier:
                keyid:B2:77:1D:29:A0:15:62:AA:A9:51:13:C6:15:08:8B:87:C1:9E:EA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/B2771D29A01562AAA95113C615088B87C19EEA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2771D29A01562AAA95113C615088B87C19EEA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a3a2f33372d3337203d3e20323634323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2498::/37

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:22:cb:c0:bb:99:14:53:08:ff:77:dd:a7:86:0f:9f:9a:
         47:29:6f:55:2d:a2:5c:1c:b7:ea:6c:5a:46:ec:3e:66:92:85:
         71:1a:9c:46:be:59:28:82:dd:f2:e7:67:fb:6d:ff:17:2c:d6:
         98:4c:bf:5c:77:ed:6d:85:79:fd:0c:d0:bc:da:47:7a:98:1e:
         58:c0:44:e5:88:8d:af:54:d7:68:40:df:07:14:d8:16:59:ef:
         22:7a:2b:5c:85:6b:a1:15:ed:f9:ec:9d:82:32:f5:74:51:af:
         c0:4d:7f:93:b1:79:3f:d3:6f:e8:a5:00:3f:88:25:71:ee:6d:
         20:10:73:24:f7:06:2d:55:9a:53:20:16:bc:f9:1d:e6:ad:f5:
         3c:e9:8f:b4:f2:95:48:71:3d:11:c8:b4:b5:33:8b:59:72:66:
         bb:c0:7d:76:b1:00:ac:b4:32:91:53:00:30:28:79:98:6a:09:
         8e:29:1f:8b:5c:25:ec:a9:1b:14:2e:c0:d4:55:e7:2b:66:95:
         9e:d5:13:8b:a7:c2:8f:fa:23:b3:83:af:7d:97:ba:8d:47:46:
         f1:c5:7e:be:b1:9a:80:d4:d4:06:3b:d4:a8:54:87:c4:ac:2c:
         d8:17:39:83:5d:42:c8:e7:5b:dc:3a:c7:d6:07:c4:96:f3:1e:
         e5:c1:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:31:04 2026 by rpki-client