Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/323830343a386639383a3a2f33322d3438203d3e20323733353030.roa
File:                     323830343a386639383a3a2f33322d3438203d3e20323733353030.roa (raw, json)
Hash identifier:          oIfh02kahG3DOkqIPvU9a/Aw82vBKjoV5bgPzKzLj5k=
Subject key identifier:   8B:D4:D6:91:62:2C:C8:8E:A6:0F:06:B6:E5:22:83:58:E5:43:08:09
Certificate issuer:       /CN=7130375EE2A1233DCED2847E7689DD739F3B2CAD
Certificate serial:       237C376FF6520AA76671E76899C6F51ABBF9D651
Authority key identifier: 71:30:37:5E:E2:A1:23:3D:CE:D2:84:7E:76:89:DD:73:9F:3B:2C:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/323830343a386639383a3a2f33322d3438203d3e20323733353030.roa
Signing time:             Fri 11 Sep 2026 13:58:24 +0000
ROA not before:           Fri 11 Sep 2026 13:53:24 +0000
ROA not after:            Fri 10 Sep 2027 13:58:24 +0000
asID:                     273500
IP address blocks:        2804:8f98::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.crl
                          rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 20:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7c:37:6f:f6:52:0a:a7:66:71:e7:68:99:c6:f5:1a:bb:f9:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7130375EE2A1233DCED2847E7689DD739F3B2CAD
        Validity
            Not Before: Sep 11 13:53:24 2026 GMT
            Not After : Sep 10 13:58:24 2027 GMT
        Subject: CN=8BD4D691622CC88EA60F06B6E5228358E5430809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:97:a4:f5:28:f3:90:a2:62:4b:de:4d:d6:
                    08:a4:3d:f3:34:5a:81:d6:96:21:de:8f:7d:5c:38:
                    5f:21:85:5b:07:94:bc:b4:bf:34:b2:e2:60:31:ab:
                    b8:e0:ae:e7:d9:13:aa:b1:0b:09:6d:53:46:dc:1d:
                    c6:3a:10:86:d1:08:99:0c:9a:8b:d7:17:25:ce:45:
                    aa:c2:ff:3a:67:94:4e:69:01:08:e4:59:76:72:df:
                    ba:55:c1:85:01:47:30:3c:c6:9d:7d:a6:95:47:e0:
                    3d:10:1a:16:16:17:15:ab:61:16:e3:27:71:b0:74:
                    f4:2e:a3:b6:df:e9:24:20:bf:24:17:b3:7f:ea:ba:
                    e2:76:df:58:99:9e:30:50:a7:41:21:89:03:99:0d:
                    66:90:d0:7d:50:2b:c1:e7:b7:b5:a7:92:9b:0e:09:
                    c0:7e:c3:f8:fb:78:30:33:b4:d1:ce:fa:db:33:2d:
                    dd:63:ef:14:3a:a5:4d:c9:07:78:fa:08:20:ba:55:
                    fa:e8:c6:ad:33:2c:16:10:4f:90:b3:e9:1a:48:f3:
                    b4:0b:d8:2d:e7:15:5a:e7:03:60:b3:16:dc:0e:bf:
                    e1:2f:85:e6:fa:36:e5:6a:98:fd:52:11:1a:44:24:
                    b8:5e:bc:05:75:d0:fe:06:15:db:ed:e2:44:74:e2:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D4:D6:91:62:2C:C8:8E:A6:0F:06:B6:E5:22:83:58:E5:43:08:09
            X509v3 Authority Key Identifier:
                keyid:71:30:37:5E:E2:A1:23:3D:CE:D2:84:7E:76:89:DD:73:9F:3B:2C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/7130375EE2A1233DCED2847E7689DD739F3B2CAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7130375EE2A1233DCED2847E7689DD739F3B2CAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eKyvJNj99DormV5mo69qMM3VD5M2XZ4hokNhB9Nu3u8/0/323830343a386639383a3a2f33322d3438203d3e20323733353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:ef:fa:d3:61:23:87:34:08:d0:11:d0:0b:5b:69:e3:70:
         28:07:a2:47:ad:e3:69:2d:f9:f6:6d:33:d9:11:0e:a5:32:87:
         bf:df:a3:d7:7e:42:8c:3a:26:34:a9:38:28:8f:3d:e2:10:e3:
         d4:4d:e5:d7:6a:0b:6c:1a:fe:a9:0a:a8:75:dc:7c:86:6c:3d:
         97:3a:ea:90:ba:96:58:ca:37:39:36:95:16:7c:65:d5:25:9f:
         c7:96:65:3a:d2:b3:c1:58:31:05:78:92:2f:c2:56:60:5d:02:
         ce:da:5b:7d:b2:80:d5:9b:d4:2f:98:a9:90:02:e4:de:ba:8b:
         67:c7:ed:1b:24:d2:c2:a8:77:05:56:81:8b:1c:78:7b:86:81:
         04:bf:9b:ca:38:a6:98:91:65:64:a5:79:7e:9f:20:30:37:0b:
         cc:42:cf:e3:30:ad:dd:22:0f:19:35:74:fe:32:94:06:ec:63:
         ab:e6:6a:83:62:11:54:39:3c:ac:26:72:44:25:aa:82:09:44:
         c4:de:0e:83:41:94:99:3a:ef:d1:e4:10:43:ef:b3:9e:2f:2a:
         0c:3a:2f:aa:d3:d5:f2:1f:c6:a2:95:56:4b:7a:ec:6f:b2:ae:
         a1:0b:a8:03:57:59:6b:e8:a3:ae:03:8b:b1:6d:fa:4a:08:00:
         27:3c:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:46:14 2026 by rpki-client