Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          ncBla3eea93bmVcR6x86vu2noBhtk1WlY6xsJJYPJV8=
Subject key identifier:   F3:25:06:CB:38:EC:12:E4:69:42:71:A3:42:D6:28:36:11:F4:A8:1D
Certificate issuer:       /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial:       2B90D81B045D1F944772404CD75D8551C84EF759
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Tue 27 Oct 2026 01:33:45 +0000
ROA not before:           Tue 27 Oct 2026 01:28:45 +0000
ROA not after:            Tue 26 Oct 2027 01:33:45 +0000
asID:                     271612
IP address blocks:        2804:7e40:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 12:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:d8:1b:04:5d:1f:94:47:72:40:4c:d7:5d:85:51:c8:4e:f7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
        Validity
            Not Before: Oct 27 01:28:45 2026 GMT
            Not After : Oct 26 01:33:45 2027 GMT
        Subject: CN=F32506CB38EC12E4694271A342D6283611F4A81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:e7:cf:02:a1:56:91:23:90:e1:64:26:0a:
                    ab:ab:ca:12:e3:c7:68:58:dc:90:84:00:12:ca:b5:
                    ed:c0:74:e7:80:b2:ff:62:ee:21:56:72:42:f2:c3:
                    e4:ea:b2:54:90:5b:b3:2d:1a:14:1f:25:a5:67:2a:
                    9f:18:f9:74:40:54:75:cc:d2:4b:a7:e2:20:e3:9b:
                    41:83:3c:2a:0b:66:b5:c1:9a:80:15:56:66:19:82:
                    07:25:73:46:f6:5e:a8:3e:f0:34:66:2b:7c:40:d4:
                    0f:e7:87:77:62:36:c2:59:a4:21:7b:13:08:69:18:
                    f8:94:ac:63:7d:72:92:59:70:a5:db:40:5f:62:5d:
                    fd:d8:38:c4:52:5c:0c:35:a9:de:e8:fe:10:1b:3d:
                    cd:28:51:dc:ff:93:85:14:38:a4:a9:90:05:0b:38:
                    75:59:96:7a:f7:f0:c7:37:ec:fa:96:97:1a:41:d8:
                    98:99:fb:78:da:7b:a0:2d:ea:44:81:10:87:c0:e3:
                    02:a3:ef:55:1a:2e:c8:ee:ed:aa:42:5e:2c:d9:3c:
                    87:16:d3:2b:ec:18:72:a2:2c:5a:57:53:c9:84:69:
                    bf:4d:c7:6d:8b:00:5f:06:c7:cd:67:d4:11:2f:65:
                    ec:d7:64:50:99:1b:4b:e7:48:44:30:43:18:c9:95:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:06:CB:38:EC:12:E4:69:42:71:A3:42:D6:28:36:11:F4:A8:1D
            X509v3 Authority Key Identifier:
                keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:9e:45:02:54:76:49:21:96:c2:84:2c:30:a0:2a:be:07:
         5a:f7:87:d3:1e:3f:f3:3a:b6:8f:61:a4:a4:51:bb:12:c9:79:
         90:8c:9d:78:b0:c2:19:05:0d:73:a7:cb:1c:22:6e:b2:3a:05:
         bd:ad:b9:9e:1e:c6:96:e9:4e:e1:4b:7b:2c:fb:61:05:4e:db:
         60:b5:17:a9:4a:68:53:65:1c:24:1d:97:fe:b3:66:62:4d:e4:
         87:e6:5c:ed:e1:0b:c3:8f:d6:fe:b2:95:ae:ac:38:af:b8:1b:
         a8:ac:df:33:8f:bd:f3:c4:d6:b4:51:5c:f1:b7:91:29:a9:bd:
         57:15:5e:18:2d:16:16:7c:e4:90:ee:59:76:bc:c8:5a:a3:59:
         a6:94:a1:ae:35:c7:e8:4d:93:0c:97:e4:f6:c8:31:07:4d:98:
         5b:75:67:b5:da:ab:18:c4:b5:35:86:5b:e5:3c:ce:aa:1b:a3:
         6d:c1:b7:f5:92:e5:98:66:da:01:68:f4:a0:b4:7c:b6:c0:1d:
         34:d8:18:44:e9:a8:ca:78:c1:0c:cd:a1:80:d5:bd:74:71:93:
         53:61:21:53:48:a8:cb:ef:89:03:d1:a4:f0:70:ba:83:30:6a:
         e3:4f:e3:9c:fb:60:d8:2a:5a:d7:90:71:d4:ba:57:1d:98:3f:
         c5:e1:6b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 06:59:05 2026 by rpki-client