Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
File:                     323830343a386232343a3a2f33322d313238203d3e20323733373134.roa (raw, json)
Hash identifier:          PoK765jDpvgi9dSpHHuHDrWSrN4C7+5k9tNQoph0+UI=
Subject key identifier:   2C:70:43:F7:03:6F:86:D3:AE:2B:EF:5D:7D:11:76:EF:C9:08:B1:29
Certificate issuer:       /CN=233FED2049BF80D348F4C409A68D3F9D76133DEB
Certificate serial:       24042353E10C04471FA2D965D39D17491449DC
Authority key identifier: 23:3F:ED:20:49:BF:80:D3:48:F4:C4:09:A6:8D:3F:9D:76:13:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233FED2049BF80D348F4C409A68D3F9D76133DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa
Signing time:             Fri 02 Oct 2026 13:08:47 +0000
ROA not before:           Fri 02 Oct 2026 13:03:47 +0000
ROA not after:            Fri 01 Oct 2027 13:08:47 +0000
asID:                     273714
IP address blocks:        2804:8b24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/233FED2049BF80D348F4C409A68D3F9D76133DEB.crl
                          rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/233FED2049BF80D348F4C409A68D3F9D76133DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233FED2049BF80D348F4C409A68D3F9D76133DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 20:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:04:23:53:e1:0c:04:47:1f:a2:d9:65:d3:9d:17:49:14:49:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233FED2049BF80D348F4C409A68D3F9D76133DEB
        Validity
            Not Before: Oct  2 13:03:47 2026 GMT
            Not After : Oct  1 13:08:47 2027 GMT
        Subject: CN=2C7043F7036F86D3AE2BEF5D7D1176EFC908B129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a7:2a:39:5a:ac:38:6d:78:1a:af:a2:96:c0:
                    b3:f4:ff:3a:66:36:3c:82:d7:9b:86:0c:78:94:9c:
                    54:1f:fb:19:d9:79:48:78:8c:dc:41:5b:e1:24:36:
                    18:c3:40:c9:03:a1:62:05:00:f2:71:74:9e:2f:71:
                    05:00:0d:5a:16:45:05:1e:a8:bd:cb:31:10:eb:fa:
                    48:0f:44:8a:01:ab:d6:7d:30:3c:91:64:84:99:f5:
                    88:98:97:e3:a9:fe:bd:06:ec:bf:21:27:53:b6:fd:
                    15:90:58:7d:7d:bb:01:e6:9c:77:cb:e8:03:d7:a8:
                    01:88:16:81:18:de:3b:39:10:c3:e7:d0:9b:40:b2:
                    8e:7e:44:7a:74:e5:fd:40:ae:42:cb:a7:73:af:d2:
                    18:00:0d:59:a6:f4:62:28:d1:f9:09:5a:1c:1b:ef:
                    ad:36:a5:54:2a:d6:40:14:2a:43:f9:be:58:c8:2e:
                    c0:91:7e:21:51:a8:9a:39:cb:58:fd:0e:e6:4f:dc:
                    5c:fa:ac:3f:62:14:31:8c:99:6b:fe:92:ae:0d:a5:
                    19:62:f9:4c:3f:df:47:cf:ca:92:be:e8:b9:c9:66:
                    14:5a:e0:55:d3:95:d3:39:f9:9e:6d:1f:d2:35:2c:
                    82:a0:f3:bb:c0:6c:05:95:f7:d1:9a:d6:01:a4:25:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:70:43:F7:03:6F:86:D3:AE:2B:EF:5D:7D:11:76:EF:C9:08:B1:29
            X509v3 Authority Key Identifier:
                keyid:23:3F:ED:20:49:BF:80:D3:48:F4:C4:09:A6:8D:3F:9D:76:13:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/233FED2049BF80D348F4C409A68D3F9D76133DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233FED2049BF80D348F4C409A68D3F9D76133DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MuSL5iKz6TCg8ZA8rsywpYMKbqwiQQRqZG7ooNgvxHp/0/323830343a386232343a3a2f33322d313238203d3e20323733373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b24::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:8b:6a:20:ee:ce:26:39:63:ba:9c:c4:e8:60:78:3d:58:
         d6:c0:02:94:44:e3:c3:b8:61:9e:c7:01:79:0a:1a:cf:47:d4:
         db:f1:a9:53:82:c0:43:d3:da:1b:24:ae:b4:e9:9a:05:76:85:
         7f:33:e1:d2:05:5a:e9:fd:0d:df:19:3d:c5:54:64:f5:6a:ec:
         2b:49:c5:3f:df:b8:61:1b:c1:c7:e5:fc:1d:df:e3:8e:fa:c5:
         b2:d9:ed:27:87:9c:69:4f:99:58:38:db:3c:c8:6c:23:4b:a1:
         64:f6:a6:c1:90:c8:ec:df:88:c0:77:f8:a4:f0:78:ba:a7:30:
         a2:ba:14:fc:5a:56:b0:b0:75:57:6b:1f:db:20:4d:8e:80:82:
         cd:0a:24:38:74:ca:f8:62:bb:c3:42:64:ad:36:9f:82:4e:a8:
         d9:b8:7f:55:b0:08:28:c2:72:f8:02:77:73:d2:19:55:6b:d6:
         e6:a7:8b:1c:56:8b:46:24:48:fa:3e:47:24:42:1f:0c:28:7e:
         4c:9d:52:92:4f:0d:7f:e7:f1:15:16:33:75:17:c4:60:1e:f8:
         d8:c9:9b:75:e4:5f:0e:a1:f5:55:91:24:70:44:9a:46:f2:dc:
         0f:c0:7d:ac:4c:43:cb:b3:04:91:de:0d:43:fb:91:59:00:6b:
         7e:5e:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:53:06 2026 by rpki-client