Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/323830343a393661383a3a2f34302d3430203d3e20323734333530.roa
File:                     323830343a393661383a3a2f34302d3430203d3e20323734333530.roa (raw, json)
Hash identifier:          rPgG7m6qVMN2Y6Qu7Tv3xfRXE3+DaTBh+zTOnvLc5DU=
Subject key identifier:   73:6E:24:46:B9:C3:49:A0:E1:08:F7:0F:EC:AC:F4:B0:E1:C0:C9:07
Certificate issuer:       /CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE
Certificate serial:       7B4AAA32B99D89445766BE443EFD0EE38F37D913
Authority key identifier: E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/323830343a393661383a3a2f34302d3430203d3e20323734333530.roa
Signing time:             Wed 23 Sep 2026 19:15:46 +0000
ROA not before:           Wed 23 Sep 2026 19:10:46 +0000
ROA not after:            Wed 22 Sep 2027 19:15:46 +0000
asID:                     274350
IP address blocks:        2804:96a8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl
                          rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4a:aa:32:b9:9d:89:44:57:66:be:44:3e:fd:0e:e3:8f:37:d9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE
        Validity
            Not Before: Sep 23 19:10:46 2026 GMT
            Not After : Sep 22 19:15:46 2027 GMT
        Subject: CN=736E2446B9C349A0E108F70FECACF4B0E1C0C907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:98:e3:5b:1a:73:0a:74:4d:c0:6e:ab:a8:
                    17:3f:e3:dc:78:cb:22:e0:4b:c1:a3:01:70:4e:8b:
                    3c:25:74:ba:d0:56:4d:cb:e8:05:ae:76:7e:bf:f6:
                    d5:a1:12:09:e6:23:01:fb:12:81:25:cb:67:92:0e:
                    a8:dd:f9:88:95:fb:81:f0:b1:ba:c5:49:52:43:85:
                    95:4e:a3:30:7e:3d:67:61:81:dd:ed:9e:ee:b7:cb:
                    ca:e6:ae:32:62:60:13:bf:92:9b:d5:a9:a5:e7:31:
                    c4:52:f9:25:b7:d2:f6:86:f2:df:05:52:bb:48:e3:
                    89:cc:2c:b8:71:27:6e:a3:93:14:d1:a7:d2:34:3b:
                    62:c4:90:3e:0a:0c:14:66:37:ed:14:dd:02:4e:0a:
                    63:94:38:7c:f0:f0:cc:8d:9b:06:ad:13:71:1b:f2:
                    91:0f:11:ec:83:a8:e5:0a:e6:52:c2:da:77:0d:c5:
                    f0:a8:5d:13:87:70:3a:d5:97:ee:66:30:8b:10:1f:
                    7a:21:20:0a:34:dc:ba:34:be:90:8b:44:e5:e3:9c:
                    02:5e:a4:b1:2e:d8:48:6b:13:9f:c2:06:df:ad:93:
                    8d:fa:fe:d0:6b:0b:f8:ee:28:5b:88:da:a4:27:e0:
                    18:d4:34:32:69:d0:b6:b1:b3:2e:73:83:92:86:e6:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6E:24:46:B9:C3:49:A0:E1:08:F7:0F:EC:AC:F4:B0:E1:C0:C9:07
            X509v3 Authority Key Identifier:
                keyid:E2:82:0F:5C:1A:31:8B:D4:BE:17:A3:9B:E0:F7:E2:67:1A:F2:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2820F5C1A318BD4BE17A39BE0F7E2671AF29CAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SZ8cpe6rRkTgBPN43JZ5wiBH6ARZEeHb5a9RRT6FJVb/0/323830343a393661383a3a2f34302d3430203d3e20323734333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96a8::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:d5:df:e0:5e:dd:88:6d:59:27:ae:37:9f:47:00:45:e8:
         d4:47:ec:64:95:cc:de:ca:0f:bf:ea:6c:fa:1e:fa:60:35:86:
         e0:48:2b:2f:82:eb:76:0c:64:a4:94:ac:dc:d2:62:0e:19:d4:
         6a:1d:d4:02:95:b0:0a:80:a9:7d:0b:88:f2:4b:9e:f4:84:31:
         b7:f7:f6:9c:66:b0:4f:8b:46:c7:0a:e0:f4:3f:3b:96:1b:1c:
         fd:a6:9b:ad:2b:59:8a:b6:61:04:36:2d:1c:60:ea:0f:64:bc:
         a8:2b:17:1d:ea:f1:b2:19:78:74:1c:09:a6:55:80:d5:dd:7b:
         41:d0:b9:82:37:8d:c0:e4:8d:d1:84:cb:6f:f1:f9:6a:0c:2f:
         c4:54:65:13:16:b3:60:b4:c0:8a:67:c7:3c:95:cd:17:e8:8a:
         be:76:0b:82:4e:29:ee:4c:93:7b:00:ba:e8:cc:48:24:bb:33:
         0e:8f:46:a6:d8:50:d2:38:77:42:6f:71:4a:ff:43:d2:45:45:
         85:bb:c1:8b:85:36:bf:54:aa:73:ed:9e:ba:24:b6:44:7f:eb:
         35:1f:44:ae:4f:3a:b7:cf:fa:5a:1a:01:1e:fa:c0:f3:78:62:
         03:ad:a5:3c:9f:05:a9:88:11:2a:61:11:d5:dd:b9:b2:48:07:
         c8:db:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:38 2026 by rpki-client