Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a393030303a3a2f33362d3336203d3e20323638353738.roa
File:                     323830343a353335383a393030303a3a2f33362d3336203d3e20323638353738.roa (raw, json)
Hash identifier:          /EXsCgB9V2PBLKo5WOFO1dGEpq8vD+1P95KT3ToNR4s=
Subject key identifier:   01:EB:E2:EB:40:6C:E2:43:84:D1:12:17:54:B6:FD:44:35:AE:1A:92
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       20CFA332DD181C5E6EF219EC9AE4F81F6B1C0F1C
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a393030303a3a2f33362d3336203d3e20323638353738.roa
Signing time:             Thu 17 Sep 2026 02:37:57 +0000
ROA not before:           Thu 17 Sep 2026 02:32:57 +0000
ROA not after:            Thu 16 Sep 2027 02:37:57 +0000
asID:                     268578
IP address blocks:        2804:5358:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:a3:32:dd:18:1c:5e:6e:f2:19:ec:9a:e4:f8:1f:6b:1c:0f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 17 02:32:57 2026 GMT
            Not After : Sep 16 02:37:57 2027 GMT
        Subject: CN=01EBE2EB406CE24384D1121754B6FD4435AE1A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:71:d4:0e:bd:6e:11:6f:2a:29:e7:a9:ca:
                    82:32:fa:27:cf:e9:e0:27:78:d6:05:b1:fd:ad:c8:
                    73:10:13:7f:e2:46:80:17:26:36:05:1b:b5:85:84:
                    38:12:b6:1c:fd:78:73:14:28:3b:b8:71:ed:61:9b:
                    43:fe:c8:fb:69:21:e0:59:d2:74:2f:e5:be:1f:08:
                    58:36:16:95:0c:a6:18:49:ab:ed:a6:56:67:cf:82:
                    58:a7:b2:3a:5b:b3:23:68:5f:af:6f:2c:f3:9c:62:
                    ce:4a:2f:f8:5d:7d:2e:3b:71:86:8e:0d:c3:60:21:
                    bf:d9:a7:39:16:0a:8d:15:ba:b3:13:ac:af:bc:ef:
                    91:7f:85:11:e3:29:02:c3:2e:6f:b3:12:9e:30:f2:
                    65:a2:21:c4:30:c0:19:2a:31:77:f8:ab:b9:4e:ff:
                    cb:4d:18:81:4b:9d:0f:b9:bc:3e:cb:ac:9e:16:b2:
                    18:86:1a:c9:ff:55:49:3f:27:d7:19:50:38:9f:0f:
                    d2:99:aa:64:78:35:09:c1:18:18:3a:1e:f2:b1:99:
                    28:67:df:91:2e:04:f7:93:f6:10:10:2b:53:8e:65:
                    1e:69:e6:ed:f2:9f:ac:ed:eb:62:60:a8:16:b3:3c:
                    30:f4:79:0b:86:ac:4b:e0:9c:b4:3d:0d:75:70:ec:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:E2:EB:40:6C:E2:43:84:D1:12:17:54:B6:FD:44:35:AE:1A:92
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a393030303a3a2f33362d3336203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:a9:59:db:10:f9:50:b6:a8:20:5f:8a:ca:91:9f:42:4c:ab:
         57:b3:c9:03:b7:b2:47:5d:67:77:c3:77:b3:03:4f:a8:26:f3:
         ac:06:de:c1:0e:ca:2f:c9:c7:01:a5:0f:97:39:c4:96:ec:6f:
         91:cd:af:5b:af:97:6a:31:cf:9c:9a:d5:0e:24:7e:e4:4e:44:
         95:b5:a4:b9:eb:d1:1f:e3:41:f4:d2:0f:36:db:d0:c6:11:e2:
         bf:70:30:f0:90:69:75:70:ff:bf:41:88:e5:bf:e3:e2:bf:87:
         40:09:34:7f:34:03:74:7a:fe:0f:3b:e7:f0:39:6f:22:09:ca:
         3a:dd:85:a9:36:60:e0:c0:84:31:b2:75:fb:10:c2:e7:a9:2a:
         3a:b4:cc:6d:0e:ad:ca:6e:41:b2:48:0b:2d:34:46:77:15:1c:
         43:f4:17:e0:bd:b3:5d:1d:11:79:dd:f5:36:a7:33:dd:46:86:
         78:70:0a:47:8e:d3:c0:6a:50:6a:46:1b:3e:c0:b8:8e:fd:9a:
         96:4a:2a:e3:99:32:7a:25:59:eb:ef:e8:61:f5:38:81:2b:b0:
         43:4b:65:cb:56:d0:7a:53:99:df:45:e6:21:bf:63:42:25:72:
         dc:91:5c:56:42:f9:a1:6a:22:1a:10:db:53:03:4a:1d:56:d8:
         ce:9e:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:32 2026 by rpki-client