Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          LmUpMsA8fN+TSEiRhVYvRG0w6lboVb5mEnC8zS4/XMY=
Subject key identifier:   E9:F7:EB:CC:1D:9F:95:1F:9D:C5:B2:80:11:E2:9A:8A:13:F6:A4:85
Certificate issuer:       /CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
Certificate serial:       61102E495C88C4554F957D6A3CE96E64286BBBBA
Authority key identifier: 9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Tue 27 Oct 2026 01:33:35 +0000
ROA not before:           Tue 27 Oct 2026 01:28:35 +0000
ROA not after:            Tue 26 Oct 2027 01:33:35 +0000
asID:                     271612
IP address blocks:        2804:7e40:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:10:2e:49:5c:88:c4:55:4f:95:7d:6a:3c:e9:6e:64:28:6b:bb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569
        Validity
            Not Before: Oct 27 01:28:35 2026 GMT
            Not After : Oct 26 01:33:35 2027 GMT
        Subject: CN=E9F7EBCC1D9F951F9DC5B28011E29A8A13F6A485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:03:18:74:11:04:ae:86:e9:20:5d:f5:80:63:
                    ff:1c:e3:f7:2d:c6:e3:14:41:0c:6b:c9:06:54:7b:
                    58:f2:7b:2d:45:c1:d4:7f:d4:ea:5e:05:59:d7:3d:
                    47:56:59:19:f2:b6:69:4f:4f:f3:89:30:4d:3d:af:
                    5d:9c:64:b4:f1:31:e5:76:a3:00:36:67:fb:26:37:
                    a1:19:07:9e:9f:8e:a8:cc:1d:e5:a7:78:76:3f:7b:
                    df:69:97:89:3a:49:f4:71:fa:15:ad:bc:3d:1d:0f:
                    21:9b:f9:9e:48:87:e9:b2:63:23:ab:64:7d:71:c0:
                    06:84:36:7f:9b:31:1f:a6:9a:ce:c0:dd:71:81:be:
                    ac:82:3b:ea:c9:29:7c:03:60:50:60:cd:b4:f6:80:
                    62:35:3b:45:2b:ce:f9:71:24:15:86:bc:dd:fe:97:
                    b7:64:f7:ef:2b:1c:4e:26:a8:c7:a2:85:43:7f:0e:
                    6f:6a:57:1b:a0:e8:d5:48:fb:dd:25:29:11:99:56:
                    ad:e5:b0:db:15:c6:7a:66:7a:30:eb:1b:be:b3:16:
                    ed:5c:6c:91:f3:20:c2:d6:d1:55:84:fd:a4:97:6b:
                    35:27:d6:93:29:91:73:28:89:48:74:d2:81:21:1c:
                    34:19:d7:b8:56:54:bc:ef:1f:f3:eb:44:d4:b6:bd:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F7:EB:CC:1D:9F:95:1F:9D:C5:B2:80:11:E2:9A:8A:13:F6:A4:85
            X509v3 Authority Key Identifier:
                keyid:9A:2E:3E:99:D0:BC:E7:93:A2:AC:7A:E6:8A:EB:44:6A:78:F5:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A2E3E99D0BCE793A2AC7AE68AEB446A78F5B569.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a3230303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:ec:e7:c2:47:ba:7f:d8:60:13:da:75:62:7b:a7:24:ca:d2:
         e4:a8:26:a4:44:dd:20:56:da:11:1e:40:93:08:1e:db:fe:f1:
         11:52:a2:55:87:fc:7d:55:26:68:35:b8:f0:dc:15:13:29:86:
         21:0e:85:cf:c0:e8:29:ca:02:09:2c:fb:af:bf:0f:a5:e7:ab:
         41:c8:83:4b:0b:7e:c5:04:33:0e:cc:76:00:9b:09:d4:37:5d:
         d4:d9:31:9c:44:c5:57:0a:ec:38:33:5c:59:a3:f6:34:87:13:
         65:17:d6:19:27:8d:d1:79:2c:b7:6b:75:28:bd:ae:bd:cc:64:
         26:a5:57:a0:3c:c9:0e:58:30:25:e4:68:dd:33:e1:3b:07:0c:
         db:60:b7:45:e4:a0:e1:2c:d1:64:69:7d:63:7a:e7:1c:51:3a:
         eb:23:aa:08:b4:0a:7b:74:62:a1:32:5d:6d:50:2c:88:50:f4:
         cb:5a:38:97:d3:d7:e6:5f:01:65:cb:b0:01:60:58:bd:b0:00:
         cd:0c:b0:a1:1c:4b:bb:9f:df:72:03:be:95:58:23:d2:e5:2d:
         88:61:3f:53:ef:dc:2c:f7:8e:19:44:79:af:d2:b7:17:0a:6d:
         50:2e:e5:2e:5f:a3:12:82:a8:a5:de:46:4e:9c:15:fa:56:ca:
         07:ea:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 15:22:36 2026 by rpki-client