Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa
File:                     323830343a323766343a3a2f33322d313238203d3e20323633393331.roa (raw, json)
Hash identifier:          KXsM9kxoGYGXxQJntwNGZ+86ZsGcGInuhFgf6FzEta0=
Subject key identifier:   14:6F:6A:50:1C:F1:F8:96:A6:78:48:63:6D:62:5A:6E:F1:B8:61:EB
Certificate issuer:       /CN=FF9D718785CE6D60FBE4A3E83ADE78BA196F1202
Certificate serial:       5F85A7C567B9DBF4FDD2FE4F01877E9C40CC07DB
Authority key identifier: FF:9D:71:87:85:CE:6D:60:FB:E4:A3:E8:3A:DE:78:BA:19:6F:12:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa
Signing time:             Fri 14 Aug 2026 19:38:10 +0000
ROA not before:           Fri 14 Aug 2026 19:33:10 +0000
ROA not after:            Fri 13 Aug 2027 19:38:10 +0000
asID:                     263931
IP address blocks:        2804:27f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.crl
                          rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 01:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:a7:c5:67:b9:db:f4:fd:d2:fe:4f:01:87:7e:9c:40:cc:07:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF9D718785CE6D60FBE4A3E83ADE78BA196F1202
        Validity
            Not Before: Aug 14 19:33:10 2026 GMT
            Not After : Aug 13 19:38:10 2027 GMT
        Subject: CN=146F6A501CF1F896A67848636D625A6EF1B861EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:90:aa:c7:ce:bf:75:c5:bf:af:15:8f:7a:
                    d3:94:93:a0:af:07:9b:52:5e:e0:1f:e3:f8:ac:c4:
                    1c:26:9e:67:cc:32:4c:b0:f0:00:83:62:a6:88:4f:
                    1a:25:4e:75:1b:56:a0:82:81:84:2a:b6:d5:f0:7f:
                    3e:ba:73:3e:c8:74:44:31:59:41:f8:8a:00:66:87:
                    a4:b7:ef:6d:07:5a:3b:52:44:8a:c3:82:36:5f:f5:
                    a6:42:46:da:d8:50:d7:90:0e:42:e8:a9:70:0b:75:
                    29:b7:b1:dc:f1:80:78:14:c5:de:77:34:c6:4d:8a:
                    d8:63:54:50:f9:c2:41:a5:1e:77:f4:b2:82:9d:2a:
                    88:8f:a3:6b:54:74:2d:c1:3a:ea:4b:b0:30:85:ed:
                    7a:26:86:2e:32:c2:d2:71:ad:57:dd:21:5a:44:32:
                    82:4d:e5:43:71:78:22:69:ad:8b:62:6f:4d:f1:34:
                    c5:ed:26:7c:ef:16:ba:61:6f:d3:1b:0a:2a:10:ae:
                    a0:a1:43:07:3d:50:e8:f7:ef:97:38:fc:9b:a4:5c:
                    d6:aa:39:d0:66:87:b1:6a:77:7d:78:e0:10:e0:cc:
                    69:3d:51:ad:26:9c:8d:f2:17:16:db:ab:60:00:ab:
                    5b:25:ba:e2:9e:88:46:e4:d4:e7:ea:81:d0:56:1a:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6F:6A:50:1C:F1:F8:96:A6:78:48:63:6D:62:5A:6E:F1:B8:61:EB
            X509v3 Authority Key Identifier:
                keyid:FF:9D:71:87:85:CE:6D:60:FB:E4:A3:E8:3A:DE:78:BA:19:6F:12:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF9D718785CE6D60FBE4A3E83ADE78BA196F1202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36xLerUMPWj4Sih66NqxwERiTR5Q4BLadqioChteHDmM/0/323830343a323766343a3a2f33322d313238203d3e20323633393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:fe:cc:2e:54:21:6f:f7:4b:97:50:c2:48:5d:4a:10:92:
         43:7b:f6:a5:c9:05:39:48:99:15:56:3d:39:12:20:6d:8b:ff:
         68:7b:2c:a9:78:ec:10:31:e9:d5:f7:8d:e8:42:4e:a5:3c:0a:
         48:5d:fc:2b:4d:a9:e9:7a:0a:e0:1c:78:c9:4f:f8:e0:29:24:
         e0:54:e5:8b:c5:bc:d2:09:e0:64:8c:0e:60:78:13:ac:03:04:
         e4:ce:2b:fd:3a:a2:e3:e0:f3:8f:06:48:ef:fe:86:15:d8:6d:
         2b:90:d8:8c:fc:53:12:3a:bb:c6:c4:53:2d:bf:ae:37:c5:54:
         e5:93:75:5f:33:05:a0:3b:b0:0e:c4:8a:db:f0:9d:e1:39:4b:
         d6:54:25:20:a4:bf:84:7c:4e:41:55:3d:83:82:bc:87:0b:7d:
         78:ca:94:b7:2c:b7:b1:ea:b8:78:44:8e:e2:23:d6:a8:a2:2f:
         96:e7:6b:06:ad:6b:82:59:8c:c3:51:89:fd:16:fd:52:3f:25:
         c2:49:37:cf:75:7b:60:d2:77:0b:c6:11:71:12:63:7e:c1:e6:
         4b:b2:ac:3c:ad:e4:d3:41:36:ee:4b:11:68:14:83:6e:3f:b1:
         da:18:27:e5:62:aa:00:df:8c:7f:f6:13:b4:25:91:92:09:a3:
         a3:46:fb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:15:57 2026 by rpki-client