Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
File:                     323830343a313564343a3a2f33322d3332203d3e20323633343133.roa (raw, json)
Hash identifier:          N31ntdPbgc+4lBydTZ6YA2mKtdd/1fj5ayaZojiR/FQ=
Subject key identifier:   1A:1F:12:90:A4:F4:24:4A:27:DC:8A:EF:B8:58:FA:D7:F7:A1:1B:AC
Certificate issuer:       /CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
Certificate serial:       09240590128F28177E7270457774631E7148CAFE
Authority key identifier: FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa
Signing time:             Wed 29 Jul 2026 19:47:07 +0000
ROA not before:           Wed 29 Jul 2026 19:42:07 +0000
ROA not after:            Wed 28 Jul 2027 19:47:07 +0000
asID:                     263413
IP address blocks:        2804:15d4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl
                          rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:24:05:90:12:8f:28:17:7e:72:70:45:77:74:63:1e:71:48:ca:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC
        Validity
            Not Before: Jul 29 19:42:07 2026 GMT
            Not After : Jul 28 19:47:07 2027 GMT
        Subject: CN=1A1F1290A4F4244A27DC8AEFB858FAD7F7A11BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:ff:b1:8d:c8:39:c0:83:38:fc:f9:e1:b0:
                    bd:fb:31:5c:35:72:a9:8b:2d:9e:b8:2d:b7:5c:5f:
                    b3:ec:ef:69:df:81:21:8a:35:41:46:ad:3a:59:d8:
                    f9:5f:5d:b9:d6:bf:b8:cd:22:f8:29:05:13:e6:a8:
                    49:6b:f3:79:cd:73:8f:42:f7:91:4c:15:85:f0:5e:
                    1f:a9:7d:0a:ab:53:5b:71:ec:07:1a:ad:af:12:60:
                    3f:b0:94:97:04:78:24:60:3c:de:31:28:63:da:8a:
                    28:d4:87:1c:e0:5e:62:d4:d3:29:45:c6:8d:2b:1d:
                    3b:c5:ec:a3:aa:ad:39:ef:4c:a1:d3:9d:6b:97:63:
                    69:14:98:1d:b4:ae:51:5f:57:26:2c:ed:18:64:25:
                    a7:b6:44:53:52:17:c8:04:ea:1d:e1:fe:ec:f6:0f:
                    24:4c:8c:d0:14:53:33:34:77:39:b7:db:1c:a7:a1:
                    93:47:02:07:04:f4:cd:01:ae:c1:9c:e6:96:ef:38:
                    dd:2f:32:7a:f6:dc:5b:22:f6:b2:71:3e:90:f2:12:
                    92:e3:3f:42:52:4c:02:1f:f0:30:dc:6d:8c:6e:e3:
                    c5:08:a8:a5:93:c7:9d:0a:03:6d:68:a2:84:7e:16:
                    f6:71:88:97:4c:d7:3c:00:f2:85:0f:0e:a8:6f:01:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:12:90:A4:F4:24:4A:27:DC:8A:EF:B8:58:FA:D7:F7:A1:1B:AC
            X509v3 Authority Key Identifier:
                keyid:FE:15:2D:1B:1B:D5:63:AE:38:64:E7:38:A8:E6:52:CE:1F:2E:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE152D1B1BD563AE3864E738A8E652CE1F2EDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a3a2f33322d3332203d3e20323633343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:0f:93:45:69:12:40:b0:68:1d:8e:9b:a1:f2:0b:09:99:2e:
         08:5b:b6:0c:79:59:46:3a:a9:8e:e4:ae:20:17:48:a1:56:68:
         6e:88:59:85:a3:19:a5:b1:f3:ee:24:2d:11:d8:62:d6:1e:e4:
         11:85:56:0d:a6:2e:d1:7f:aa:5b:bc:73:f7:59:8f:bc:b6:c1:
         55:06:32:f1:75:12:26:19:d1:fd:a8:18:35:cb:81:85:06:e6:
         a1:78:6f:87:8c:d3:80:12:34:3f:35:43:3e:1f:a4:b0:7e:0f:
         4e:30:1c:51:d2:36:32:d7:e3:f2:68:1e:8c:76:c6:48:65:d1:
         40:08:46:ee:35:78:59:22:52:50:13:95:aa:87:d4:05:01:8e:
         6c:af:9a:a5:cf:46:b5:b0:15:5a:65:58:8b:7a:38:87:84:c3:
         18:d7:fa:1e:1f:a4:77:7d:0b:d3:a6:a3:84:27:94:c5:32:4c:
         d6:44:e4:e5:69:7f:f1:90:9f:82:43:0a:98:3c:2c:a0:bc:68:
         fa:2b:b0:cf:c3:49:31:48:b0:80:50:33:e7:e9:33:35:bc:fb:
         92:69:ea:a7:84:26:df:13:af:92:d0:44:41:a1:a9:f1:e4:ab:
         8b:f3:9a:1b:f0:3f:ac:03:62:1c:c6:ae:f7:37:3d:5f:5e:fe:
         80:bd:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:22:19 2026 by rpki-client