Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3130303a3a2f34302d3430203d3e203532373537.roa
File:                     323830343a336132303a3130303a3a2f34302d3430203d3e203532373537.roa (raw, json)
Hash identifier:          sMJHRNm4B5byhHvNMW6Qg16+Uqwa2pPo7aJWmQy+Hyc=
Subject key identifier:   B1:73:8E:D2:70:35:4B:16:3A:AB:DD:F5:3D:B0:EA:C6:26:E3:BE:33
Certificate issuer:       /CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
Certificate serial:       378104D64F952014D8E0A5971816EA1A8A98CF0A
Authority key identifier: A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3130303a3a2f34302d3430203d3e203532373537.roa
Signing time:             Thu 17 Sep 2026 15:24:25 +0000
ROA not before:           Thu 17 Sep 2026 15:19:25 +0000
ROA not after:            Thu 16 Sep 2027 15:24:25 +0000
asID:                     52757
IP address blocks:        2804:3a20:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.crl
                          rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:04:d6:4f:95:20:14:d8:e0:a5:97:18:16:ea:1a:8a:98:cf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
        Validity
            Not Before: Sep 17 15:19:25 2026 GMT
            Not After : Sep 16 15:24:25 2027 GMT
        Subject: CN=B1738ED270354B163AABDDF53DB0EAC626E3BE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:29:2c:fb:44:6b:e9:92:04:d6:5f:ba:df:
                    86:f1:ed:40:71:a0:7c:cd:65:62:ae:40:bd:5f:54:
                    20:6c:38:6f:13:81:9d:fe:93:1f:c6:7c:f5:92:e7:
                    2f:4d:9e:b9:02:f5:a1:1a:2a:dc:7b:2c:e3:85:ba:
                    64:92:53:cc:2c:af:e2:9e:3c:ae:1c:07:1a:d4:cb:
                    09:46:97:cb:96:ef:b9:79:57:c5:81:0a:a6:b6:bd:
                    79:41:25:e9:66:ae:42:8c:42:4b:8e:0a:e4:99:1a:
                    6f:5f:b6:08:6a:fe:bb:92:47:06:3b:e7:cc:4c:86:
                    13:f5:48:70:5c:21:43:e1:73:33:bd:9d:dc:3a:38:
                    93:4f:93:a2:a5:36:de:39:a1:0a:f6:50:23:d4:79:
                    10:58:2c:53:55:88:b0:bb:04:4b:6b:81:09:10:ef:
                    81:6e:6e:dd:db:f6:4e:29:20:f8:a4:e0:86:aa:4f:
                    b9:76:8d:85:35:87:87:7f:25:ee:d7:aa:72:46:b1:
                    a9:b8:75:50:3f:9e:f4:0b:3d:b7:bf:ab:df:9e:7f:
                    49:72:5a:7c:27:2f:ef:34:9b:71:82:81:59:2c:55:
                    45:c2:95:d8:f3:61:5e:9f:21:14:22:13:88:0d:f6:
                    b0:82:13:ea:5c:02:79:c1:42:3f:ab:99:54:f1:b8:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:8E:D2:70:35:4B:16:3A:AB:DD:F5:3D:B0:EA:C6:26:E3:BE:33
            X509v3 Authority Key Identifier:
                keyid:A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/323830343a336132303a3130303a3a2f34302d3430203d3e203532373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a20:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:23:1f:cf:3a:68:38:44:7a:4f:21:f3:43:99:31:18:2c:55:
         5e:56:e2:0b:e1:da:bf:7b:ab:a2:ac:60:82:ca:fc:8d:35:ec:
         c5:2c:9e:9d:fb:a4:0e:52:ea:e0:97:c0:de:99:a5:9c:39:8f:
         d4:22:2a:0b:46:5a:a6:b9:34:33:e5:b3:d4:1f:dd:47:93:b5:
         39:4e:a6:95:70:ee:93:4c:73:8a:fc:ef:7e:f6:bb:5b:99:72:
         27:be:9a:b4:ea:ce:58:28:da:c9:f5:79:3a:87:57:ed:27:db:
         9e:ba:1d:ef:5d:71:e0:57:38:a2:cf:80:c6:81:c4:e0:8d:e0:
         31:34:a2:bd:9e:01:e3:75:b5:ae:f8:ee:16:e5:93:da:9d:b4:
         41:8e:c3:72:87:cf:4c:88:8b:ff:2a:44:68:1a:ab:08:e5:f5:
         09:93:42:4b:1d:6a:c0:5c:09:28:3a:af:d3:b2:b9:33:4f:18:
         28:35:3b:10:57:2c:2e:7b:56:bf:71:24:14:46:61:56:8d:b9:
         48:fa:5d:e7:97:35:42:4d:f2:03:15:20:aa:aa:17:8f:fe:fb:
         8d:30:41:87:f9:00:99:7e:39:89:35:76:63:59:df:2d:ab:a8:
         f9:39:ed:f9:29:96:97:be:54:5a:6c:16:64:98:99:9f:33:81:
         f8:ba:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:23:55 2026 by rpki-client