Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/323830343a316230383a3a2f33322d3334203d3e203631373034.roa
File:                     323830343a316230383a3a2f33322d3334203d3e203631373034.roa (raw, json)
Hash identifier:          pTLfhPWvNkSp6SLFNw8kfLAi8KSKKQDK5LSNTCE+bpg=
Subject key identifier:   1E:EF:86:1D:A3:E8:34:74:9A:04:42:61:93:04:81:77:59:12:50:BA
Certificate issuer:       /CN=35870A649E68CBFD2F520BCE3175557D92FEB67C
Certificate serial:       42DC06699969218A19028BC903634F92D405CA04
Authority key identifier: 35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/323830343a316230383a3a2f33322d3334203d3e203631373034.roa
Signing time:             Tue 15 Sep 2026 00:35:04 +0000
ROA not before:           Tue 15 Sep 2026 00:30:04 +0000
ROA not after:            Tue 14 Sep 2027 00:35:04 +0000
asID:                     61704
IP address blocks:        2804:1b08::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.crl
                          rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 03:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dc:06:69:99:69:21:8a:19:02:8b:c9:03:63:4f:92:d4:05:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35870A649E68CBFD2F520BCE3175557D92FEB67C
        Validity
            Not Before: Sep 15 00:30:04 2026 GMT
            Not After : Sep 14 00:35:04 2027 GMT
        Subject: CN=1EEF861DA3E834749A04426193048177591250BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:a1:9e:58:59:27:c6:ba:4d:d6:e4:86:1a:
                    26:69:20:96:df:48:52:ca:94:02:d0:26:bf:6d:9b:
                    f9:b6:57:74:1e:82:3c:ed:79:ee:98:fe:af:9a:b6:
                    45:f5:c4:d7:c9:ae:b7:e7:4e:6e:9b:dc:d8:81:3a:
                    c1:c3:b6:8f:2f:f8:d6:bc:c3:9b:9b:18:21:4e:5a:
                    5a:3e:29:49:f4:15:53:08:51:e0:56:38:2a:25:53:
                    58:26:b7:35:d0:6e:d8:27:bd:b9:6f:7b:54:6b:05:
                    e8:f9:99:ff:3e:6d:f7:c4:07:bd:0b:e8:b9:57:f7:
                    15:04:13:b2:9f:43:e4:43:f0:59:98:2a:c6:c2:3c:
                    0b:74:0f:0a:3a:91:37:fd:61:64:e3:1d:2d:ca:8a:
                    a2:1c:a6:f7:65:8c:98:32:c7:1f:30:9d:c8:7b:8c:
                    65:81:95:33:c3:62:15:cb:8c:19:58:d3:21:b3:23:
                    1e:d7:36:00:5f:b7:05:2e:6f:ac:2b:81:de:a0:88:
                    52:2a:7d:09:61:2e:27:ce:3a:41:28:c1:b7:63:e2:
                    39:a1:88:a7:6e:3b:7f:01:37:88:78:4e:2f:6c:9a:
                    8e:b8:91:d3:e3:db:53:78:a7:38:fb:44:0f:ec:ec:
                    d4:5c:0d:27:77:d7:df:fc:5c:3f:fc:0f:23:f0:2d:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:86:1D:A3:E8:34:74:9A:04:42:61:93:04:81:77:59:12:50:BA
            X509v3 Authority Key Identifier:
                keyid:35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/323830343a316230383a3a2f33322d3334203d3e203631373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b08::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:04:b5:f7:bf:37:50:98:12:07:e4:13:a5:31:aa:6b:83:
         a8:44:a8:e0:cf:74:7e:21:bf:e3:e8:7b:31:39:68:14:56:69:
         67:fb:0e:68:de:cf:62:88:1c:74:1d:65:1b:59:9e:91:96:3d:
         70:56:3c:f3:d4:96:71:09:26:6a:7d:84:33:a5:db:e5:bc:9c:
         32:35:76:22:ca:4e:97:a1:80:71:6c:0b:75:3e:55:7d:e2:08:
         29:35:13:8b:3d:27:2e:cf:a2:11:e3:e5:f8:3c:a6:cb:60:eb:
         2a:39:7f:00:de:48:6d:f5:ee:9e:83:56:be:e9:e2:d7:7a:68:
         1f:0a:90:61:17:d1:cc:0d:69:9a:1c:04:ae:83:cf:d6:da:d3:
         f1:df:b2:8a:40:28:91:43:8a:e6:02:20:84:b2:41:f7:ea:19:
         85:88:99:cf:23:4a:24:4f:2f:af:ee:8d:f2:55:9c:65:ca:d6:
         14:69:dc:da:9c:40:b3:ac:56:c6:36:1d:1e:62:c2:77:18:9b:
         c0:40:5d:5f:fb:4f:a1:a1:66:68:69:46:eb:9e:8d:06:66:59:
         33:fb:8e:15:ac:71:a2:29:85:2a:4d:52:23:81:99:b7:9d:ac:
         69:68:c8:69:c7:52:dc:e9:6e:4f:81:70:e6:03:ac:30:79:cd:
         ee:0c:2e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:09:49 2026 by rpki-client