Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          +O23WQZWuSpBLjIiYY+JzmTr0/drN3QE1ShPhhC2Joo=
Subject key identifier:   9E:01:A9:23:E9:82:F8:C3:45:5A:CD:73:14:AC:48:BF:7D:A6:5B:F5
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       11C2C0493F43F9E5843B838BAACD2753F9F7570F
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:45 +0000
ROA not before:           Mon 28 Sep 2026 15:02:45 +0000
ROA not after:            Mon 27 Sep 2027 15:07:45 +0000
asID:                     268296
IP address blocks:        2804:4efc:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c2:c0:49:3f:43:f9:e5:84:3b:83:8b:aa:cd:27:53:f9:f7:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:45 2026 GMT
            Not After : Sep 27 15:07:45 2027 GMT
        Subject: CN=9E01A923E982F8C3455ACD7314AC48BF7DA65BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:e6:53:c1:b0:26:49:20:77:a6:96:57:fd:
                    1e:11:6d:10:79:8f:4e:bc:5b:42:60:5d:1f:77:a4:
                    15:5b:f9:15:5c:24:9c:85:6c:27:1a:97:ef:60:53:
                    2c:7e:f4:75:d9:e2:32:cf:6d:d0:25:f7:8f:6d:4b:
                    d6:83:64:b7:f6:13:93:0a:18:31:fa:a2:9a:89:2d:
                    08:b8:33:b8:da:11:ed:d0:4d:2f:f1:83:9c:fc:65:
                    e3:76:e3:ad:92:78:8e:e5:f8:10:1d:db:81:52:fa:
                    64:d7:a8:88:1a:25:13:5c:34:6b:28:f1:42:d8:18:
                    d7:2f:a1:24:14:c9:08:ef:31:a5:63:eb:c4:9d:ab:
                    07:d7:e4:eb:ae:45:8d:e2:c1:80:23:e5:0d:4f:ca:
                    a6:51:88:b5:04:55:8f:1e:96:4c:7a:18:6a:00:61:
                    1a:f7:39:54:e1:b4:fd:fe:11:b8:0b:07:a4:fe:80:
                    25:96:fe:39:6b:ac:0a:6e:1e:b5:a3:ef:c7:bc:a7:
                    d4:4b:93:6a:55:e3:d4:af:6d:31:71:57:ec:3b:ec:
                    c6:9e:e0:e8:dc:25:e2:d8:45:48:6e:cf:fd:72:6a:
                    47:70:83:8c:b1:55:04:68:21:0e:3b:a8:35:db:21:
                    25:0b:24:ea:b1:a8:1b:bb:11:31:8b:74:42:f7:6e:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:01:A9:23:E9:82:F8:C3:45:5A:CD:73:14:AC:48:BF:7D:A6:5B:F5
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:83:0b:df:0c:52:0b:f1:f2:1f:66:ff:64:74:1f:c1:e8:0f:
         ef:25:9f:4c:d6:84:f9:59:70:99:e6:bf:8e:32:22:3d:93:24:
         42:69:5a:20:a4:ea:02:48:44:dd:4c:81:11:d4:b6:19:29:30:
         ae:e0:2e:5e:7a:97:aa:2f:c9:ef:69:00:78:54:fa:62:31:5f:
         b2:ae:a6:8f:0d:29:8f:1a:52:75:aa:df:ec:b3:74:ba:42:90:
         bb:78:60:92:7f:29:d9:f1:78:74:15:c3:21:ba:9f:b9:9c:bc:
         57:ba:41:84:cf:29:8d:c1:5a:78:f5:ad:99:12:69:3b:b1:3f:
         85:48:85:6f:ef:65:89:92:a1:a2:31:a9:23:6d:40:b2:8a:7d:
         63:f4:7a:bb:af:4e:71:29:d7:eb:67:1a:c9:36:90:51:61:3f:
         66:bd:69:7e:9f:60:f6:2a:fe:d9:5f:bd:8c:9f:d0:c2:2a:a8:
         c3:07:c2:0d:9e:a4:4a:ee:75:81:ce:dc:41:4f:69:8f:1e:21:
         7e:32:bf:21:37:e2:86:a3:be:de:5e:82:81:e5:60:4c:a7:b7:
         2a:41:75:3e:fc:f0:19:99:6f:bc:b3:04:2d:8e:2a:bc:b1:75:
         f8:e6:53:1c:77:20:25:ac:43:8c:1c:20:b0:ad:69:88:79:33:
         48:2f:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:26:53 2026 by rpki-client