Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d3438203d3e20323639333534.roa
File:                     323830343a363335343a3a2f33322d3438203d3e20323639333534.roa (raw, json)
Hash identifier:          TM7ZWLc1Xg63Dnu4AZ64w3MrbnxZkda74TG+IcPYz6I=
Subject key identifier:   D3:63:83:A2:EA:54:CB:77:14:3C:B1:45:4C:7B:1E:0B:81:EE:1A:15
Certificate issuer:       /CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
Certificate serial:       6162664AB4C910D9CB2C381BBD3FECD0A9B088D5
Authority key identifier: 39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d3438203d3e20323639333534.roa
Signing time:             Wed 16 Sep 2026 13:54:57 +0000
ROA not before:           Wed 16 Sep 2026 13:49:57 +0000
ROA not after:            Wed 15 Sep 2027 13:54:57 +0000
asID:                     269354
IP address blocks:        2804:6354::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl
                          rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:62:66:4a:b4:c9:10:d9:cb:2c:38:1b:bd:3f:ec:d0:a9:b0:88:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395ADB7DC56D04359CA96FCD53FF9F76224BCFB4
        Validity
            Not Before: Sep 16 13:49:57 2026 GMT
            Not After : Sep 15 13:54:57 2027 GMT
        Subject: CN=D36383A2EA54CB77143CB1454C7B1E0B81EE1A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:de:c0:a2:42:63:78:ef:55:58:5f:05:8b:
                    de:d4:15:6c:b5:b7:12:32:3f:86:70:c2:aa:d5:af:
                    05:ff:96:3d:4d:a7:48:14:08:ff:56:8e:a0:72:5f:
                    08:36:8b:76:97:df:91:78:38:86:5e:15:61:fa:49:
                    42:52:ec:da:7d:22:49:66:13:d8:d3:05:fc:39:21:
                    5e:e9:c5:bc:c6:45:65:32:03:90:f8:20:b7:10:aa:
                    d9:e0:8b:13:9e:95:e5:8c:d6:20:22:f7:c4:cb:db:
                    ef:01:77:23:3d:05:98:87:f0:fb:1f:e1:d7:5d:8f:
                    88:dc:bd:90:0a:b5:56:e1:7a:e7:f9:26:cd:9a:6b:
                    33:39:d3:74:de:32:d5:a9:cc:7a:53:25:24:9a:f3:
                    f7:87:6f:a5:cf:97:ef:43:3b:03:b9:a1:3c:02:12:
                    92:3b:3e:49:13:f0:8e:a6:81:d9:b3:fc:15:57:44:
                    81:6e:3b:2d:6e:60:b6:44:5c:da:f9:93:68:7f:f7:
                    30:54:db:b4:50:01:81:a9:96:48:43:04:a1:4b:a4:
                    0e:f5:fa:5e:0a:f5:e0:e9:7c:88:f8:d1:6b:c5:a2:
                    d9:ab:59:86:0e:a3:91:7f:73:02:52:93:7b:31:ee:
                    cd:1d:34:1d:c5:cf:b6:a1:b7:ec:f8:07:0e:42:20:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:83:A2:EA:54:CB:77:14:3C:B1:45:4C:7B:1E:0B:81:EE:1A:15
            X509v3 Authority Key Identifier:
                keyid:39:5A:DB:7D:C5:6D:04:35:9C:A9:6F:CD:53:FF:9F:76:22:4B:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395ADB7DC56D04359CA96FCD53FF9F76224BCFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41gcbY1vpdNT1N91xJmd9g9TpZhpveTFygJGnTcsaQwx/0/323830343a363335343a3a2f33322d3438203d3e20323639333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6354::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:2e:89:be:e2:45:c0:56:b6:51:2a:2b:8d:07:66:0d:56:
         a3:fe:81:a2:4d:ef:99:7a:d3:91:6b:db:91:88:22:c2:34:4b:
         2b:41:5f:a5:a0:3e:b7:5d:79:3a:1f:5a:05:5a:84:93:f9:55:
         b5:b0:b0:1f:71:6f:10:c9:94:88:5b:29:20:12:5c:83:39:99:
         75:dd:f4:82:56:a8:e5:99:3a:df:82:ef:a1:2b:45:a4:5f:01:
         a0:e7:33:7e:25:20:88:9e:df:7d:f4:40:fd:53:9f:ae:51:8c:
         01:6f:98:c3:cb:24:3c:4b:53:e8:a7:fe:5d:77:f6:b5:14:4e:
         f6:ce:46:2d:c3:77:f6:a2:b8:96:cd:be:cf:76:82:ad:56:66:
         d5:74:9f:80:16:5c:02:76:d9:c5:0a:a2:93:f6:b3:46:2e:ac:
         27:69:49:d1:91:22:23:e2:57:5c:a4:b4:5f:e7:96:f4:bf:ed:
         44:40:fe:50:64:2c:bd:80:34:a7:71:a6:a4:9f:26:bb:0a:7b:
         50:d0:de:79:76:cf:cb:25:54:97:ac:e3:4a:67:fa:a9:1e:2d:
         d3:11:fa:dd:00:09:cb:99:19:41:09:0d:ad:30:37:33:92:0e:
         85:d3:eb:39:df:d9:fb:d3:02:fb:fc:79:11:5a:9a:25:92:09:
         13:5e:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:42:36 2026 by rpki-client