Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa
File:                     323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (raw, json)
Hash identifier:          J5oA5wvmVvGgO2IHCsuQutrbicjnOYjCscxT6wEmru8=
Subject key identifier:   DB:57:17:E6:42:63:9E:18:CF:2F:42:48:88:0C:43:01:DB:A6:05:80
Certificate issuer:       /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
Certificate serial:       2719CCD8E19E8C640CBCD906E9A7CADC386B8C6A
Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa
Signing time:             Tue 15 Sep 2026 16:46:47 +0000
ROA not before:           Tue 15 Sep 2026 16:41:47 +0000
ROA not after:            Tue 14 Sep 2027 16:46:47 +0000
asID:                     262725
IP address blocks:        2804:3360:0:200::/55 maxlen: 55
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl
                          rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:19:cc:d8:e1:9e:8c:64:0c:bc:d9:06:e9:a7:ca:dc:38:6b:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768
        Validity
            Not Before: Sep 15 16:41:47 2026 GMT
            Not After : Sep 14 16:46:47 2027 GMT
        Subject: CN=DB5717E642639E18CF2F4248880C4301DBA60580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:a0:7a:83:bb:37:b8:17:91:32:fa:7d:6b:
                    87:d9:c7:a4:f6:9d:04:ed:89:00:ff:f7:13:b4:34:
                    52:11:c4:10:37:3b:25:6d:55:e6:46:4c:03:d5:a3:
                    80:c7:cd:67:85:bf:40:71:2d:db:e1:8d:ba:ca:40:
                    68:4d:2d:d8:63:2e:40:5b:c4:90:8e:49:b2:be:d3:
                    03:a3:f2:3b:5a:af:de:19:06:c7:ce:67:68:c6:e0:
                    73:6e:99:aa:d2:71:66:d3:91:c5:ba:43:7e:f5:0f:
                    39:9f:69:3e:06:83:2a:56:17:ce:58:b3:72:3e:78:
                    22:6a:c5:0a:7b:5d:f2:ab:e2:26:d8:30:ef:46:f8:
                    7b:4b:fa:99:31:72:7d:d3:26:ff:62:91:79:37:ad:
                    08:8a:b5:8f:01:3e:13:4b:15:6b:66:18:6a:d9:8d:
                    9a:60:48:b3:d3:67:82:f6:50:21:03:08:96:28:31:
                    af:16:47:f7:dc:4a:7b:d1:06:3b:ce:f7:ea:8f:22:
                    eb:99:c1:78:fd:d8:93:e2:9c:c3:d9:ef:06:98:d6:
                    09:b3:3b:06:f6:68:2d:d9:71:f7:b3:13:89:85:66:
                    c6:82:e9:3b:2d:6b:90:c3:67:23:0a:96:f9:0a:5c:
                    b5:a0:d1:52:6f:d3:1d:95:6c:f1:62:b1:c8:72:2a:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:57:17:E6:42:63:9E:18:CF:2F:42:48:88:0C:43:01:DB:A6:05:80
            X509v3 Authority Key Identifier:
                keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3360:0:200::/55

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:f8:ad:5f:46:09:35:b9:9d:70:9f:12:92:9e:ec:b2:90:
         99:64:87:20:eb:c5:67:a0:f4:4a:83:3c:04:fe:67:b9:1f:31:
         f5:81:83:94:dc:18:f0:24:b2:39:66:d1:84:50:ce:e3:df:21:
         59:86:96:29:c8:97:f2:42:03:a9:2f:fa:87:28:4a:4f:c9:4d:
         9e:0c:ee:82:18:c4:b4:4d:1d:92:e7:ac:49:e8:fa:02:b8:3a:
         e4:35:da:53:18:35:8b:a0:a6:78:3b:d1:01:0f:b5:16:d7:90:
         83:a5:26:74:ae:37:3d:36:40:44:2b:93:59:ce:b2:43:39:b1:
         42:bd:59:0b:04:11:69:82:50:58:be:62:81:32:d5:10:c7:55:
         30:22:51:78:c6:04:d4:9f:fe:88:c2:a3:0d:0b:6e:c7:7e:e7:
         10:6d:8b:14:6a:7f:ed:bc:f3:1a:61:66:75:14:51:4d:e2:48:
         e9:8c:ac:bf:ee:8a:d1:7c:e0:bd:6d:c7:b2:b8:39:d1:b5:e5:
         57:79:cd:03:1d:66:8a:72:64:77:d0:bd:1d:0a:dd:2f:7a:c1:
         eb:ed:e7:f2:dc:51:52:31:4a:55:24:19:fe:96:dd:c7:10:75:
         d5:d7:ba:a0:2b:62:9c:d6:2c:4f:a5:3d:fd:4e:de:68:af:86:
         1c:95:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:29:18 2026 by rpki-client