Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa
File:                     323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa (raw, json)
Hash identifier:          mqGM8BXSGgQK+jcm1d2AUpB5cj+UVDPCIhPLu1Oni2g=
Subject key identifier:   91:43:2E:1D:72:C5:3D:C2:5B:6F:8E:BA:9A:FD:07:1B:F2:F1:60:40
Certificate issuer:       /CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
Certificate serial:       3CED242B179C5F7B21813E9474B372F42A8C0C1F
Authority key identifier: DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa
Signing time:             Tue 11 Aug 2026 14:50:26 +0000
ROA not before:           Tue 11 Aug 2026 14:45:26 +0000
ROA not after:            Tue 10 Aug 2027 14:50:26 +0000
asID:                     266453
IP address blocks:        2804:3810:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ed:24:2b:17:9c:5f:7b:21:81:3e:94:74:b3:72:f4:2a:8c:0c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD86ADCC30F2916A776478CCA8F839939F66C37F
        Validity
            Not Before: Aug 11 14:45:26 2026 GMT
            Not After : Aug 10 14:50:26 2027 GMT
        Subject: CN=91432E1D72C53DC25B6F8EBA9AFD071BF2F16040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:b4:ce:c5:11:5f:0b:c0:bd:0e:c9:29:de:
                    df:22:5d:f3:7f:57:a4:e8:22:19:3d:9a:00:75:73:
                    fa:59:a9:a8:e2:d1:da:ce:9e:d6:46:8e:04:b7:b4:
                    b0:94:86:b3:2e:79:03:2d:a1:9f:bd:c2:ab:36:8d:
                    ca:18:ed:8a:55:de:e8:e6:c9:94:5a:3e:82:86:0f:
                    51:73:4d:52:31:aa:05:29:24:1d:96:04:7e:bc:ee:
                    d3:72:cb:d4:41:ee:17:31:42:0a:9b:e7:49:d4:7b:
                    c7:0c:a1:11:90:1b:6b:9c:54:66:37:2e:dc:8e:c0:
                    95:42:30:3e:7d:c5:9b:df:1b:32:e4:9f:1e:53:30:
                    f7:6b:e7:27:31:77:82:16:09:ac:30:78:bc:ba:ac:
                    33:07:25:b6:02:6d:93:5a:71:6b:6e:66:80:5a:43:
                    cc:3a:2f:95:7d:81:bb:43:a3:26:2c:99:69:97:66:
                    7e:52:47:d6:69:66:eb:af:4a:d1:95:89:65:01:ec:
                    93:c7:70:1e:16:5c:19:a2:21:d1:c7:d1:a8:53:10:
                    90:42:58:66:5a:1f:c4:88:97:4a:80:42:16:62:2f:
                    2c:a3:34:e7:c7:02:1e:c8:42:74:89:51:f6:c3:1a:
                    3c:d8:6d:f5:45:a1:ad:04:84:7a:4c:20:82:2d:dc:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:2E:1D:72:C5:3D:C2:5B:6F:8E:BA:9A:FD:07:1B:F2:F1:60:40
            X509v3 Authority Key Identifier:
                keyid:DD:86:AD:CC:30:F2:91:6A:77:64:78:CC:A8:F8:39:93:9F:66:C3:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/DD86ADCC30F2916A776478CCA8F839939F66C37F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD86ADCC30F2916A776478CCA8F839939F66C37F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/323830343a333831303a3130303a3a2f34302d3430203d3e20323636343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:2a:03:af:8b:e6:dd:ff:67:d9:3b:68:6a:0f:b7:59:8b:
         be:30:ea:1a:af:ce:8c:61:ff:e0:72:ca:fe:ad:f8:5e:f5:65:
         0f:d2:d0:d4:cb:03:b9:49:8d:ec:20:db:d6:c0:72:27:7b:b6:
         1b:02:43:e3:76:2b:42:91:70:bc:32:05:ee:a5:80:6e:1f:53:
         99:0f:a4:04:d5:fb:4a:de:9a:e7:5f:d4:21:2c:95:69:f6:58:
         73:ac:2c:ae:30:e9:cc:a7:a7:93:39:f7:6e:09:70:d1:c7:90:
         98:bf:8f:53:33:63:4b:d3:21:c2:db:30:03:ca:28:da:7f:e3:
         f9:84:39:14:5f:4b:c6:3a:48:47:87:97:4c:7f:6b:85:2f:73:
         f6:c3:62:cb:00:8a:05:ad:81:b7:e3:be:3a:ad:72:04:42:61:
         6d:41:8d:43:83:b9:12:bc:c7:af:76:60:2b:f7:00:f4:22:11:
         a4:40:60:4d:b1:a5:19:07:40:a4:48:b3:de:04:72:e0:8d:4c:
         08:aa:92:af:c9:ed:2f:91:85:68:75:8a:8d:ae:ea:ab:49:d4:
         53:ed:45:9e:5d:a5:8f:39:5c:7a:d6:bc:43:53:9d:1c:c7:29:
         87:e5:65:77:22:f3:8c:3b:58:2e:c4:31:e3:81:a2:51:c9:a5:
         81:6c:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:26:17 2026 by rpki-client