Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          M53cPFtbB/0VSWAQrCQ5mlidIGNaDQgSK99N8+XQTLU=
Subject key identifier:   7F:91:EE:98:6A:C9:9F:D3:E1:38:57:38:03:AE:DB:16:00:21:F0:C9
Certificate issuer:       /CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
Certificate serial:       3039AF852C7FD4100841D5594EA62D2A1B50031E
Authority key identifier: 0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Tue 18 Aug 2026 12:29:18 +0000
ROA not before:           Tue 18 Aug 2026 12:24:18 +0000
ROA not after:            Tue 17 Aug 2027 12:29:18 +0000
asID:                     272569
IP address blocks:        2804:8548:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 08:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:39:af:85:2c:7f:d4:10:08:41:d5:59:4e:a6:2d:2a:1b:50:03:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B268D989ABBB1F36ABE397F7CEEEC091E1290A3
        Validity
            Not Before: Aug 18 12:24:18 2026 GMT
            Not After : Aug 17 12:29:18 2027 GMT
        Subject: CN=7F91EE986AC99FD3E138573803AEDB160021F0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:b4:f4:de:ce:a5:f3:3d:1d:83:a5:24:fd:
                    31:1a:75:57:5f:93:38:7e:c6:f0:a2:ac:2b:42:d6:
                    a7:61:cd:06:4b:15:db:f6:c5:f8:e5:98:2f:90:1c:
                    72:78:bf:d7:e0:07:cc:de:b5:9e:40:99:99:1a:c4:
                    bd:e0:b7:56:84:f0:fe:c8:be:04:51:74:b0:d4:68:
                    6d:ad:2c:8c:05:ad:04:ae:00:56:6b:88:80:7f:a8:
                    63:be:9b:e1:0e:5d:cb:47:a3:8d:73:29:43:0e:76:
                    f5:7f:06:ad:4b:4b:4f:90:e7:83:a3:53:e2:a2:78:
                    fe:7b:65:42:aa:93:64:0d:f8:cf:4f:c4:64:75:f8:
                    cc:46:6f:b2:8e:97:0b:00:df:a5:fb:f4:1b:42:20:
                    0b:3e:41:bc:7c:4e:c7:e6:b5:b9:8b:1a:cb:b6:92:
                    78:e4:99:d0:01:a0:fa:91:24:0b:fd:a7:8c:c2:61:
                    fe:d4:56:de:47:cf:f8:84:c4:df:f0:09:a4:70:a8:
                    07:8a:ba:ad:42:23:8e:c6:79:64:3b:84:fd:26:a2:
                    df:41:b8:24:55:5c:86:4a:3d:1d:50:bd:95:e1:fa:
                    5a:fa:56:88:9a:9b:13:b7:ff:d0:fb:f6:83:b0:dc:
                    23:d7:d5:da:3f:4f:32:1a:09:9c:10:6d:5c:16:88:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:91:EE:98:6A:C9:9F:D3:E1:38:57:38:03:AE:DB:16:00:21:F0:C9
            X509v3 Authority Key Identifier:
                keyid:0B:26:8D:98:9A:BB:B1:F3:6A:BE:39:7F:7C:EE:EC:09:1E:12:90:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B268D989ABBB1F36ABE397F7CEEEC091E1290A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a653030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:53:9b:34:26:00:8e:94:89:c8:1f:a4:22:67:0c:15:6f:84:
         ec:6c:77:e0:14:a5:44:1d:58:dc:12:ed:50:bd:a4:0e:90:c0:
         fb:e9:a3:5e:60:e4:9d:55:23:29:93:1f:2e:dd:3e:2a:9f:c7:
         f8:e4:26:42:87:0d:07:f5:62:bf:ad:49:c1:a3:83:69:7c:15:
         ef:95:b1:1b:fe:9d:10:6c:90:42:92:bd:e4:1f:92:eb:a4:4f:
         98:40:50:0b:54:ec:b1:bc:b6:bc:f6:35:05:58:54:eb:d4:78:
         df:21:6e:8f:ba:d5:07:e6:6f:46:ea:72:62:c1:ac:d6:06:1b:
         93:6a:6d:9e:04:00:aa:c6:d2:9a:c3:78:54:0d:dc:69:20:8e:
         8b:c3:53:22:a5:d6:f0:19:60:06:55:20:5e:ea:30:af:b7:b8:
         5b:dd:c8:a1:37:93:88:78:19:7f:03:28:3b:4d:82:f1:87:1b:
         d4:2e:47:1c:69:85:66:9e:62:22:42:b8:b9:65:e4:29:2f:c5:
         5d:63:36:7d:55:83:d5:d1:59:12:42:89:ed:13:a0:10:8b:30:
         80:02:07:3d:8b:a7:b5:b7:b3:db:6f:44:a3:55:6f:0e:53:41:
         68:2d:57:f8:7e:ba:7f:79:10:d7:e6:7b:09:c1:24:4b:ac:e9:
         ac:b6:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:03:07 2026 by rpki-client