Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3438203d3e20323634353632.roa
File:                     323830343a323139303a3a2f33322d3438203d3e20323634353632.roa (raw, json)
Hash identifier:          4tyUOVZN8NSg7BgHdA8VN+AfDlWI9nyB7Iu3UCAIPDQ=
Subject key identifier:   9B:0D:C5:3C:EC:3B:7D:E0:F8:E3:12:27:00:1B:D7:0E:02:39:C6:00
Certificate issuer:       /CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
Certificate serial:       0D08BE0D493E5C3135C25754F47CFC4E3836121C
Authority key identifier: 0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3438203d3e20323634353632.roa
Signing time:             Sat 05 Sep 2026 18:46:28 +0000
ROA not before:           Sat 05 Sep 2026 18:41:28 +0000
ROA not after:            Sat 04 Sep 2027 18:46:28 +0000
asID:                     264562
IP address blocks:        2804:2190::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl
                          rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Sep 2026 00:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:08:be:0d:49:3e:5c:31:35:c2:57:54:f4:7c:fc:4e:38:36:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED
        Validity
            Not Before: Sep  5 18:41:28 2026 GMT
            Not After : Sep  4 18:46:28 2027 GMT
        Subject: CN=9B0DC53CEC3B7DE0F8E31227001BD70E0239C600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b5:31:70:82:61:65:f8:a6:89:f0:80:34:c3:
                    b6:2e:f9:52:bb:53:dc:18:17:41:6f:ce:00:2d:3c:
                    3f:31:53:31:3c:c1:31:c8:24:5e:ee:f6:3f:38:e3:
                    cc:fe:e6:52:7d:73:0f:e4:af:a4:32:f2:92:5c:4d:
                    1a:4f:cc:f8:ab:d1:9d:b7:d6:47:f6:3e:d4:40:e3:
                    14:aa:20:1a:b6:55:9e:49:29:a4:50:b6:5f:5e:ff:
                    7c:18:54:6e:73:17:c8:41:d4:e2:6f:85:7c:bc:cf:
                    b9:8b:0b:11:a9:99:c3:f7:34:5e:27:d8:cd:fa:de:
                    9a:0f:5d:aa:e0:7e:65:c4:25:39:c3:6c:94:dc:b7:
                    2c:21:c1:04:49:d4:5a:e4:10:d4:6a:b5:3a:8a:cc:
                    dd:6e:7c:6c:30:ee:cc:96:c5:51:df:a4:78:f5:9f:
                    1f:34:85:e8:64:f3:4d:44:97:d4:0f:c5:1e:87:37:
                    1b:93:bb:46:8b:33:c7:2f:02:ee:8c:b0:e1:bd:26:
                    8f:6f:c5:99:3e:56:5c:e3:de:1b:eb:3a:0e:57:52:
                    97:f5:ae:42:46:04:13:66:aa:77:b3:29:39:4d:83:
                    af:b1:bb:94:53:0f:00:d4:5a:d9:ec:ef:bd:8c:89:
                    f7:6d:ec:52:af:94:53:3c:56:52:77:27:a3:0d:a9:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:C5:3C:EC:3B:7D:E0:F8:E3:12:27:00:1B:D7:0E:02:39:C6:00
            X509v3 Authority Key Identifier:
                keyid:0E:9B:78:5A:BA:21:7C:8B:7E:15:D6:6B:03:66:F6:7C:2B:7B:19:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E9B785ABA217C8B7E15D66B0366F67C2B7B19ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/323830343a323139303a3a2f33322d3438203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2190::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:af:ac:b5:46:63:7d:63:9d:d3:d2:62:2c:06:cd:c3:2a:
         8b:92:06:dd:10:cd:2a:a7:d9:06:cb:7b:23:b6:dd:41:78:d5:
         da:11:7b:be:23:8f:da:68:e1:de:3c:66:1c:cd:a0:40:be:1e:
         d0:a3:44:52:96:43:8d:6f:c6:8e:ca:7c:a6:05:b4:8d:61:b9:
         2f:1e:a6:3f:9b:94:0a:56:a8:48:bf:d0:82:d3:59:79:b7:e2:
         2a:b5:05:d3:7b:e4:41:ee:89:02:b4:50:24:3b:dc:55:e6:71:
         f1:72:24:14:a3:ae:63:01:fd:8e:ec:a8:33:72:31:c8:a8:12:
         f4:23:fc:70:9d:90:34:05:41:bd:16:4f:ab:ce:88:90:59:d4:
         5c:5d:86:9d:8a:ea:07:67:7e:f9:e0:16:38:10:7a:b9:3a:d1:
         73:72:fe:5e:a4:c9:de:ec:f9:60:73:1c:c7:ed:8f:0f:76:e9:
         de:63:31:6a:5a:90:3a:5f:86:66:02:22:07:82:e3:ce:8a:ec:
         09:f2:d9:47:07:63:ea:5f:ff:c9:af:8f:c7:7b:0b:15:b4:c4:
         3d:27:d9:fb:e6:fa:85:2f:c3:e5:26:0d:5e:aa:3a:55:c4:0e:
         cd:92:a3:38:3a:a3:ac:46:9f:09:8d:96:3d:f4:48:56:15:bc:
         ca:21:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:45:25 2026 by rpki-client