Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          WLNbKgBIl94VBTT+h6UUEqIPYPrfJtPJGeal/1wjb/c=
Subject key identifier:   92:14:EF:75:67:FA:70:39:88:48:37:13:1A:A4:7F:0B:81:8F:C3:32
Certificate issuer:       /CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
Certificate serial:       371B686CC01C3457ABE5B801C13313CF6543667B
Authority key identifier: 0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Tue 18 Aug 2026 12:27:47 +0000
ROA not before:           Tue 18 Aug 2026 12:22:47 +0000
ROA not after:            Tue 17 Aug 2027 12:27:47 +0000
asID:                     272569
IP address blocks:        2804:8548::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1b:68:6c:c0:1c:34:57:ab:e5:b8:01:c1:33:13:cf:65:43:66:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
        Validity
            Not Before: Aug 18 12:22:47 2026 GMT
            Not After : Aug 17 12:27:47 2027 GMT
        Subject: CN=9214EF7567FA7039884837131AA47F0B818FC332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:cb:d6:c0:0b:b2:1f:43:af:03:8e:20:d6:
                    f7:66:53:7d:8a:66:e1:d4:42:96:91:65:de:51:2d:
                    c3:17:02:b0:1d:14:ec:02:b1:2f:72:56:2d:3d:85:
                    db:da:b3:ca:e9:62:c2:12:05:11:70:cc:cb:0c:10:
                    07:e4:d5:09:4b:16:57:10:9d:0e:ce:8c:2c:09:ef:
                    69:fc:99:e7:74:6c:73:4c:78:44:0e:dd:f2:7f:01:
                    99:2d:f9:23:22:64:71:c2:49:ef:42:74:a7:92:7e:
                    16:7a:42:3f:18:fa:71:04:34:ad:93:5f:27:4c:eb:
                    af:c9:26:ac:c2:df:74:2d:72:24:41:33:e7:36:e5:
                    b4:63:9d:d9:69:85:25:d4:82:c2:e9:75:30:84:de:
                    3e:c0:67:67:6a:85:a4:5d:bb:09:a6:0a:93:e3:2f:
                    0a:e9:cd:7d:ae:56:0e:b9:d4:04:f0:9b:f5:32:4a:
                    86:de:96:9b:7d:c9:7c:5b:e5:91:e8:43:de:28:cd:
                    ed:a6:19:1c:d5:b5:da:61:e6:97:1a:93:f8:6f:20:
                    95:f3:ce:42:3d:fe:34:d2:c5:50:61:d1:ec:df:ea:
                    21:a8:60:37:e1:c2:e3:27:e8:69:ed:e3:d9:32:a0:
                    d0:be:2b:01:5e:3e:65:51:de:31:20:36:cf:03:2a:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:EF:75:67:FA:70:39:88:48:37:13:1A:A4:7F:0B:81:8F:C3:32
            X509v3 Authority Key Identifier:
                keyid:0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:5d:3d:10:eb:dd:34:e1:46:12:bb:59:01:66:41:be:63:
         7e:14:83:9b:48:57:85:ad:d0:bc:3b:75:a0:7f:64:e2:75:29:
         3b:d5:c2:c7:97:ee:97:af:ce:58:78:cb:73:e5:26:ee:b8:7f:
         00:c5:f8:47:d3:47:ab:ea:23:a0:b8:ba:17:e6:ec:40:17:50:
         cf:85:36:f1:59:7a:94:35:94:8b:fb:08:bf:91:c8:0d:51:73:
         aa:44:49:d9:47:4b:14:e6:7f:73:b7:33:96:03:11:43:33:ba:
         97:76:c2:97:08:6b:12:5e:e7:26:f6:00:28:97:37:04:0b:47:
         27:f6:3e:04:b0:c0:53:26:2d:0e:5e:c0:94:d2:8e:11:3b:2e:
         3f:c5:97:ed:df:a6:34:e6:70:c2:d6:c4:ee:69:ed:5a:60:94:
         5c:e2:f0:12:e7:43:5e:19:cb:23:c2:df:ed:88:dc:85:65:30:
         a2:d1:74:11:ca:46:55:d6:f8:f5:cb:8d:49:24:ad:6e:75:63:
         c6:47:40:35:26:2b:a3:d1:c7:01:d1:a3:18:d7:c2:78:89:17:
         cc:f7:33:ef:8b:eb:05:52:37:f9:89:9f:61:1d:5d:06:e5:60:
         ba:66:54:c0:ff:ea:86:f8:0c:7f:5b:d4:8f:92:97:2c:f0:b9:
         f6:17:b8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 12:57:06 2026 by rpki-client