Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa
File:                     323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa (raw, json)
Hash identifier:          LNSJCWwrAKnRWgowOv9W6H5R9RnCCzX5Tg8687jLEgU=
Subject key identifier:   22:90:50:77:D9:C9:20:3F:90:46:FA:3B:E0:59:BE:67:E7:95:8C:56
Certificate issuer:       /CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
Certificate serial:       15123DA41C0C1E52AD71D2A90BCE6B445BB92C46
Authority key identifier: DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa
Signing time:             Fri 04 Sep 2026 15:59:13 +0000
ROA not before:           Fri 04 Sep 2026 15:54:13 +0000
ROA not after:            Fri 03 Sep 2027 15:59:13 +0000
asID:                     265106
IP address blocks:        2804:32f0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:12:3d:a4:1c:0c:1e:52:ad:71:d2:a9:0b:ce:6b:44:5b:b9:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5
        Validity
            Not Before: Sep  4 15:54:13 2026 GMT
            Not After : Sep  3 15:59:13 2027 GMT
        Subject: CN=22905077D9C9203F9046FA3BE059BE67E7958C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:5e:a1:ae:8f:36:dc:0c:81:3d:d2:ae:53:
                    0b:e4:a6:97:77:92:4e:c8:72:e1:de:ee:30:a3:1d:
                    e4:56:14:3b:97:2c:01:31:b8:8a:c0:97:3b:ab:7d:
                    e9:20:20:48:10:ae:92:25:de:19:b6:21:6b:2c:79:
                    75:c7:6e:24:ae:ef:0c:f7:4a:2c:ea:88:12:73:74:
                    4a:d1:c9:b6:e9:cb:83:c6:9a:0f:f6:af:ca:93:90:
                    22:e7:3a:ee:95:23:e8:8f:2f:a0:ec:08:28:d9:48:
                    cc:7a:9d:87:fb:95:92:b6:43:2f:74:65:0c:ef:34:
                    08:18:88:85:45:ac:9c:e9:a9:fd:2a:ba:5b:26:ee:
                    f2:cc:ef:4f:1c:7b:a7:c3:a5:d6:d4:c3:8e:fa:8a:
                    24:d5:3f:75:df:d0:f7:57:a2:79:4e:88:c8:7e:88:
                    f4:8b:da:de:3b:57:b9:39:b5:53:1d:b4:94:e7:00:
                    50:51:28:34:07:51:c6:c2:cc:a0:43:22:f2:e4:33:
                    80:d1:70:96:12:94:75:d7:27:bf:1d:4a:f1:1d:f4:
                    20:60:65:0f:07:b7:3e:4a:eb:14:6d:25:8c:89:6b:
                    6a:40:d3:16:a3:33:c6:99:e2:f4:7d:a0:ac:43:9d:
                    ff:b6:ee:36:a9:2b:98:f7:d6:3a:8f:ea:a7:d4:21:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:50:77:D9:C9:20:3F:90:46:FA:3B:E0:59:BE:67:E7:95:8C:56
            X509v3 Authority Key Identifier:
                keyid:DD:1D:F1:3A:DB:49:94:D9:C9:36:7D:15:18:88:8B:C8:B5:AF:B1:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD1DF13ADB4994D9C9367D1518888BC8B5AFB1D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:33:77:c6:ca:0a:1f:97:5e:fb:5d:fc:40:0c:f1:9f:a0:58:
         31:d9:c6:2b:40:d4:61:a7:b0:0c:12:ee:a6:c3:7e:0b:93:1e:
         00:25:44:90:5f:35:7c:69:5a:82:2e:70:e2:8d:ba:38:27:0b:
         ec:47:64:96:2d:b0:5d:ed:d4:8b:25:8b:aa:c0:1f:54:5d:e3:
         82:c3:da:f0:e3:6f:05:5a:69:39:37:bd:4f:dd:67:e8:e5:6e:
         03:93:02:ca:0c:21:fc:74:3f:99:7d:06:2b:a4:4a:ea:a2:10:
         6e:ae:c0:be:96:70:48:99:88:8a:ab:5b:17:5a:e7:3f:bf:57:
         fe:02:1a:86:5d:5b:76:2a:59:d8:d2:d4:a3:cd:70:05:24:74:
         cc:fb:5d:9a:cc:79:dc:ee:6d:08:2c:a3:32:1d:b7:3e:03:f0:
         ec:46:2e:95:fe:d6:c6:29:3d:3e:9f:2b:2a:57:2b:ec:f5:7d:
         68:8b:d6:19:24:2d:fb:08:b3:c2:1b:21:b5:5f:b5:11:a2:0d:
         8d:3f:42:a5:c7:9c:78:6d:4b:ef:ea:85:df:c0:a7:29:b9:c1:
         72:72:78:40:d9:ae:bb:d0:fb:bd:2b:20:4b:ec:b8:17:7f:8b:
         02:a5:ca:f0:00:02:5c:8e:f0:ee:18:1a:0d:59:57:0f:7c:d6:
         64:c1:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:26:51 2026 by rpki-client