Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a363030303a3a2f33362d3336203d3e20323732343138.roa
File:                     323830343a383065303a363030303a3a2f33362d3336203d3e20323732343138.roa (raw, json)
Hash identifier:          HncprfOXUNXZkrzOp3UYlS/h0uElP49FP9u7ccshsK4=
Subject key identifier:   9D:20:58:8A:38:C9:2D:71:A9:97:19:F5:BF:C5:1F:46:CE:2F:67:92
Certificate issuer:       /CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
Certificate serial:       1A1C5583BECECD0A2C03E05EEA51D0B3218A1805
Authority key identifier: 39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a363030303a3a2f33362d3336203d3e20323732343138.roa
Signing time:             Tue 25 Aug 2026 11:26:10 +0000
ROA not before:           Tue 25 Aug 2026 11:21:10 +0000
ROA not after:            Tue 24 Aug 2027 11:26:10 +0000
asID:                     272418
IP address blocks:        2804:80e0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl
                          rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:55:83:be:ce:cd:0a:2c:03:e0:5e:ea:51:d0:b3:21:8a:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CD9EE6F1482AE552599C27C0466BF860C4D235
        Validity
            Not Before: Aug 25 11:21:10 2026 GMT
            Not After : Aug 24 11:26:10 2027 GMT
        Subject: CN=9D20588A38C92D71A99719F5BFC51F46CE2F6792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:4e:4b:ed:90:f9:96:9c:11:29:9a:63:ea:
                    7e:6c:00:b3:43:a7:79:eb:04:cc:5f:3d:0c:ac:c7:
                    17:b1:ab:c1:c6:89:eb:55:4e:41:7e:e4:bc:42:9b:
                    d9:ed:41:5e:12:e3:3d:2d:46:05:b5:f4:0b:b8:aa:
                    89:22:61:bc:20:ed:cd:26:78:5a:8e:34:fb:72:0a:
                    ef:69:32:be:e3:72:e2:d2:b9:2f:d2:23:8e:e8:46:
                    3a:12:e6:5f:29:d6:b0:55:54:59:05:a9:ce:0f:74:
                    34:1f:7c:01:c1:63:67:29:dc:4e:6a:3e:09:00:53:
                    26:92:e5:aa:be:c1:0a:e5:25:82:9a:24:47:c9:4d:
                    12:8a:2c:37:5a:b5:6a:af:30:b0:0b:77:cf:02:1c:
                    89:c3:62:72:c0:e1:9d:e9:3d:dd:43:00:75:c3:45:
                    2d:71:0e:ef:1b:cc:c2:c0:b1:84:f8:39:35:35:f7:
                    cb:34:20:d9:9a:9e:e5:19:6c:3e:da:50:c1:b9:1d:
                    ba:e0:f6:77:75:e6:0d:e0:3d:63:23:83:24:92:20:
                    ef:bf:8c:5c:fe:44:fd:61:c0:36:48:4e:fa:4c:60:
                    74:a6:b8:c2:cc:81:6d:3d:58:5d:43:f3:4b:a2:d9:
                    91:53:d0:95:69:69:36:41:db:b2:26:a4:5e:1a:59:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:58:8A:38:C9:2D:71:A9:97:19:F5:BF:C5:1F:46:CE:2F:67:92
            X509v3 Authority Key Identifier:
                keyid:39:CD:9E:E6:F1:48:2A:E5:52:59:9C:27:C0:46:6B:F8:60:C4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/39CD9EE6F1482AE552599C27C0466BF860C4D235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39CD9EE6F1482AE552599C27C0466BF860C4D235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LSbhB55xRXQiCkwhV7drHfjW7Ms2QTDqty7ofUxLRKp/0/323830343a383065303a363030303a3a2f33362d3336203d3e20323732343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80e0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:80:c5:fa:72:5b:7a:f8:48:23:ad:f8:06:d8:e9:45:9e:
         7d:ba:d7:71:c3:df:5b:46:f0:c0:d8:c9:71:e7:2f:99:7b:1a:
         e0:23:1e:f9:f0:55:47:28:7f:06:1a:f9:eb:f4:47:eb:d7:f4:
         a2:ea:11:8e:26:07:84:4f:c9:af:5c:0f:1b:f3:35:e0:ac:ab:
         90:61:6f:aa:01:6c:14:fd:84:d4:92:54:f8:4b:8e:19:3b:77:
         c7:53:81:b5:ed:3f:e5:5d:c9:26:c6:be:e8:37:2a:c7:09:2d:
         df:da:50:24:2f:1c:eb:f6:c9:1d:4a:d5:ed:3d:e8:3d:8a:00:
         d6:56:6b:b7:a6:09:40:ca:d5:70:d1:11:5b:6b:14:05:7a:61:
         b0:8a:08:ce:fe:f4:be:38:14:c0:49:6d:83:74:70:e9:2a:2f:
         51:1d:26:69:a1:cf:2b:be:73:97:20:1d:b0:85:b9:da:77:16:
         81:40:96:26:db:a1:a6:e6:a3:b0:d5:f4:e3:b5:94:12:1d:dd:
         08:d9:e7:f8:25:6b:19:c4:9f:b3:24:ed:28:e9:75:05:ea:73:
         ab:f8:dd:95:43:cd:dd:21:ad:d9:6b:b4:5c:bd:54:f9:d0:82:
         62:70:7d:a5:50:42:df:eb:ab:69:ac:92:0f:f6:ab:34:4d:03:
         89:f9:24:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:45:03 2026 by rpki-client