Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a663030303a3a2f33362d3336203d3e20323638353738.roa
File:                     323830343a353335383a663030303a3a2f33362d3336203d3e20323638353738.roa (raw, json)
Hash identifier:          RbTc76GAl+Xb2S7dPVb7SjPgIZOtPnyfGc9HWFPFEJE=
Subject key identifier:   00:ED:9D:8B:7B:A6:1E:06:4D:F5:8F:B2:22:F4:96:51:D1:2B:D7:AF
Certificate issuer:       /CN=AC4877562548C664D7DBA0D327B2F231710DC102
Certificate serial:       4F82EFC1EF10575863D764840AE606AD9307C3B3
Authority key identifier: AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a663030303a3a2f33362d3336203d3e20323638353738.roa
Signing time:             Thu 17 Sep 2026 02:40:21 +0000
ROA not before:           Thu 17 Sep 2026 02:35:21 +0000
ROA not after:            Thu 16 Sep 2027 02:40:21 +0000
asID:                     268578
IP address blocks:        2804:5358:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:ef:c1:ef:10:57:58:63:d7:64:84:0a:e6:06:ad:93:07:c3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4877562548C664D7DBA0D327B2F231710DC102
        Validity
            Not Before: Sep 17 02:35:21 2026 GMT
            Not After : Sep 16 02:40:21 2027 GMT
        Subject: CN=00ED9D8B7BA61E064DF58FB222F49651D12BD7AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:49:07:e3:0f:53:a2:37:13:57:3d:07:5b:6e:
                    fc:45:38:99:f9:cd:43:5b:96:72:8d:05:4f:dc:ef:
                    af:5c:ad:3f:d7:b4:6d:b6:0c:4f:54:75:8e:15:37:
                    e9:64:69:82:f6:8a:8a:75:25:c1:c8:19:89:43:82:
                    f2:71:01:f7:77:79:0f:c1:2b:8d:ef:4d:32:01:6f:
                    6e:55:9c:1f:43:5e:50:4f:45:a5:8f:43:7a:37:bd:
                    af:2b:74:a6:8a:7e:a2:4e:e2:1e:dc:88:b8:9e:8e:
                    53:9e:fa:a4:d7:a5:48:c8:fa:a8:dc:40:90:8e:3d:
                    fb:a9:2b:64:b5:84:da:d3:60:27:38:ae:37:6b:e2:
                    2b:37:3e:20:06:9e:6c:b3:65:79:0d:6f:53:25:75:
                    96:0d:7f:ac:54:7e:27:a9:7c:d3:a7:92:58:e3:61:
                    ca:78:8d:3d:e7:bf:08:4a:c5:33:4e:da:9c:39:6b:
                    8c:48:61:c0:55:27:3e:21:6d:57:e8:e1:0b:bf:46:
                    89:15:2e:42:55:66:74:29:50:c5:a9:d5:6c:fa:51:
                    3f:dd:63:aa:ad:2e:0e:fb:09:1f:c6:63:1d:77:36:
                    a6:96:df:ec:94:cd:cf:3d:fa:12:97:57:f0:1c:0b:
                    0a:7d:20:6a:72:41:78:f0:c6:25:d4:76:e0:8d:0c:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:9D:8B:7B:A6:1E:06:4D:F5:8F:B2:22:F4:96:51:D1:2B:D7:AF
            X509v3 Authority Key Identifier:
                keyid:AC:48:77:56:25:48:C6:64:D7:DB:A0:D3:27:B2:F2:31:71:0D:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC4877562548C664D7DBA0D327B2F231710DC102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC4877562548C664D7DBA0D327B2F231710DC102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a663030303a3a2f33362d3336203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:e6:42:1b:66:37:c1:77:f2:c5:64:f0:8f:b4:a5:50:ce:
         52:dd:e4:af:1a:17:55:c4:ce:f1:02:00:93:4a:51:ce:3c:ba:
         2f:dc:00:36:06:04:e2:6b:36:ae:34:c1:cf:77:82:cf:27:80:
         12:ce:20:ac:c6:d5:55:e8:91:7b:85:3e:e7:8b:99:12:f4:88:
         3c:15:96:b7:fa:96:5e:40:09:df:fd:1b:53:dc:5d:7e:f0:ac:
         2a:67:3b:52:bc:e5:c1:21:ed:5b:85:d4:cf:14:fc:88:0b:ed:
         ca:4e:4e:7e:53:6d:e8:d4:a1:eb:80:67:55:3b:22:ec:31:af:
         08:30:a2:43:3b:be:2f:af:1f:b3:40:b3:4a:c5:ed:9f:7f:72:
         cc:9d:aa:88:b7:fa:9f:76:e8:fd:aa:72:6b:7c:d1:0f:31:23:
         1c:08:ce:90:e7:86:61:57:7b:39:2c:4c:2d:65:91:f6:29:b4:
         2a:f9:74:cc:e0:c5:fa:12:c7:a0:16:27:85:9a:2b:d8:92:0c:
         bb:31:59:0a:bd:9e:0b:0e:35:36:c0:79:ac:5f:dc:39:80:f6:
         79:0f:1f:1a:6f:d8:78:f4:dd:54:b1:2c:78:e1:27:05:77:a0:
         ca:9c:d4:9f:52:bc:04:25:41:3d:66:bb:00:58:fe:e4:3e:f4:
         9b:7f:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:33 2026 by rpki-client