Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
File:                     323830343a383236383a3a2f33322d3332203d3e20323732353138.roa (raw, json)
Hash identifier:          3j8SCstW9EWS530abQhFk5I11lm817hKFN8vPYCi334=
Subject key identifier:   C1:E6:21:44:3D:49:B9:4C:61:96:C0:85:7F:0B:E2:B8:2C:EE:7C:B2
Certificate issuer:       /CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
Certificate serial:       3816F739CBC8BD6AF237D1E94D7B8766284876DB
Authority key identifier: 34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa
Signing time:             Tue 25 Aug 2026 15:07:51 +0000
ROA not before:           Tue 25 Aug 2026 15:02:51 +0000
ROA not after:            Tue 24 Aug 2027 15:07:51 +0000
asID:                     272518
IP address blocks:        2804:8268::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:16:f7:39:cb:c8:bd:6a:f2:37:d1:e9:4d:7b:87:66:28:48:76:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76
        Validity
            Not Before: Aug 25 15:02:51 2026 GMT
            Not After : Aug 24 15:07:51 2027 GMT
        Subject: CN=C1E621443D49B94C6196C0857F0BE2B82CEE7CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:50:4b:83:37:57:49:96:77:10:f7:52:87:
                    4d:99:e2:0c:b3:a3:d0:ea:ca:ec:0f:3e:55:24:04:
                    43:f6:29:2f:0f:a9:86:59:c2:4c:07:29:6a:7e:1f:
                    2c:2f:90:09:0f:cb:08:18:30:b2:c7:11:9e:7f:ff:
                    e3:4d:7d:8d:41:32:34:90:5a:48:76:f0:f0:a3:a1:
                    42:a6:8e:42:ee:90:cb:52:16:e4:99:c1:cc:fb:b1:
                    c8:25:e2:d0:f8:b4:90:04:de:d1:c5:72:c3:e0:f0:
                    64:c3:55:b9:79:ce:9d:83:15:9a:0b:05:ba:5b:8f:
                    57:a4:fd:01:64:6d:5e:0d:2e:61:ee:b8:64:14:bc:
                    5a:83:43:49:67:b2:cf:87:49:e6:25:9c:b2:f1:7b:
                    cf:c1:35:94:e8:49:db:8c:87:bd:61:31:68:d3:99:
                    16:fb:aa:8c:05:1b:eb:57:71:82:72:51:bc:e5:85:
                    82:31:f5:42:c6:26:1f:0a:86:67:9f:ac:8e:4b:03:
                    58:dc:47:44:4b:39:31:bd:d4:bd:71:ad:ba:a5:c6:
                    92:9a:e5:a5:b4:f6:43:52:95:c3:42:71:6a:0c:71:
                    91:8a:fa:79:82:6f:dd:96:af:51:b4:c2:65:2e:67:
                    9b:2c:21:13:0d:2c:0f:a8:21:dc:6a:43:08:e1:a0:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:21:44:3D:49:B9:4C:61:96:C0:85:7F:0B:E2:B8:2C:EE:7C:B2
            X509v3 Authority Key Identifier:
                keyid:34:F5:BF:7A:EE:9E:3C:E3:32:54:8A:20:AA:36:8C:F5:2E:5B:2A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34F5BF7AEE9E3CE332548A20AA368CF52E5B2A76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a3a2f33322d3332203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:d0:e9:99:b0:20:0c:35:26:d9:5b:d4:5d:cb:22:7a:7e:
         59:e0:ff:3a:1a:bb:15:81:31:b1:24:2b:31:a1:7a:0d:78:ee:
         dc:9c:9b:5d:ba:0c:94:26:bc:95:de:19:e5:a6:c1:17:52:a9:
         8e:d4:73:db:ae:a9:c0:ef:30:21:8a:b8:c7:d6:97:93:df:57:
         21:41:c1:73:51:7f:27:2f:81:13:f1:70:ea:8d:4e:96:3e:30:
         49:19:39:4e:7b:13:6d:e6:bb:8d:c9:8b:66:93:82:ec:91:21:
         95:15:c7:96:5d:42:bc:18:23:19:49:8e:5e:c2:c3:0f:42:62:
         65:0b:12:c3:91:67:6e:bd:33:86:23:88:ef:64:67:c5:36:44:
         f9:64:30:1b:d1:1d:8c:7e:61:ca:a8:a2:af:db:ae:f5:ea:a8:
         50:77:02:88:ac:b9:98:2c:61:60:b3:97:d2:8b:32:12:06:28:
         a3:75:de:75:20:fe:38:3a:9d:c0:ea:32:2d:72:44:a6:04:8c:
         b9:0a:7e:d0:ce:af:56:a9:60:bc:b9:0c:b1:7d:af:c3:4f:86:
         e4:e0:01:50:65:f9:6f:2f:8c:8e:12:b3:02:bb:1b:60:f1:8f:
         f9:2a:22:38:a6:99:72:fe:ed:c2:d5:42:a8:fc:4d:24:7e:64:
         2f:64:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:08:40 2026 by rpki-client