Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          GB6piDiEUqdnuGGHlhskhTNsZhj/Vicn7avvo29IXhA=
Subject key identifier:   8B:0D:50:6A:47:2F:C2:B3:C5:94:74:B6:CD:96:2C:8F:CF:2F:3F:E1
Certificate issuer:       /CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
Certificate serial:       0A4A63A9AF8047EE279898E985DB290174002330
Authority key identifier: 01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Mon 28 Sep 2026 15:07:45 +0000
ROA not before:           Mon 28 Sep 2026 15:02:45 +0000
ROA not after:            Mon 27 Sep 2027 15:07:45 +0000
asID:                     268296
IP address blocks:        2804:4efc:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4a:63:a9:af:80:47:ee:27:98:98:e9:85:db:29:01:74:00:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F
        Validity
            Not Before: Sep 28 15:02:45 2026 GMT
            Not After : Sep 27 15:07:45 2027 GMT
        Subject: CN=8B0D506A472FC2B3C59474B6CD962C8FCF2F3FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:83:fb:fe:00:7b:5b:cc:cc:ae:7a:b7:cb:
                    a7:3b:ae:85:be:cd:7e:0f:c7:4c:f5:70:29:f6:16:
                    75:d8:5e:24:a5:56:f5:09:8f:22:ef:dd:80:7c:81:
                    2b:e8:36:ca:18:c4:4b:71:bd:31:9a:20:20:a6:8e:
                    fe:72:9a:d6:3f:f5:56:7a:a1:4e:61:78:25:54:1e:
                    3d:ea:f4:60:11:ce:57:df:7b:bb:98:06:d6:d3:e3:
                    d8:8c:c1:d4:0d:13:ff:48:74:a5:7b:49:b8:03:40:
                    7d:1c:5b:b7:2b:7a:30:c4:5a:5e:ef:79:24:0e:60:
                    a0:aa:76:a9:bc:bb:25:a8:18:87:f1:9c:b7:97:ec:
                    d0:1c:65:38:92:e6:c3:8f:2f:2a:8f:ad:33:e1:d8:
                    87:a5:48:1f:c7:c0:00:75:aa:be:08:94:61:76:15:
                    82:18:60:03:49:1f:35:71:85:6b:db:8c:88:b0:e3:
                    8a:b5:78:0c:3d:53:8d:0f:c5:dd:76:36:1a:aa:06:
                    25:91:a5:c3:8a:97:d0:26:32:86:93:66:16:23:a8:
                    61:68:aa:4b:51:db:3e:87:80:c4:12:99:10:e9:7b:
                    18:6c:8b:eb:fe:eb:02:dd:c3:e7:11:75:d8:0e:01:
                    22:f7:d2:ba:91:f8:8c:17:fb:70:3f:e0:9f:8f:6e:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0D:50:6A:47:2F:C2:B3:C5:94:74:B6:CD:96:2C:8F:CF:2F:3F:E1
            X509v3 Authority Key Identifier:
                keyid:01:4B:19:90:E9:97:3F:A0:B6:FA:8D:CA:77:CD:8A:07:11:BB:0D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/014B1990E9973FA0B6FA8DCA77CD8A0711BB0D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a653030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:c4:73:bc:3b:6e:4e:cc:19:ac:ed:8f:26:e9:73:8f:b7:
         a1:5e:bf:a9:98:e8:8d:ea:17:e3:89:0b:e3:c2:11:c3:ac:b8:
         b7:5d:98:54:dc:57:35:f6:e1:70:0b:6c:c3:3c:ad:69:0c:2f:
         28:2d:cf:1b:bb:d4:68:00:81:e3:22:39:5d:cb:26:68:0d:87:
         83:d2:b3:67:b1:24:e2:d0:cf:fa:4c:43:b8:00:c5:58:22:63:
         f2:3f:b8:94:d8:26:9f:ff:0d:a9:a1:53:18:4c:21:5d:2a:f0:
         79:ae:de:29:96:5f:58:b6:f9:b7:0e:5c:33:fe:b5:3b:8a:64:
         41:2f:49:21:79:3f:f8:a6:dd:8d:16:47:18:b5:7f:00:05:0d:
         74:a7:a4:b0:09:8e:88:e2:86:17:45:15:ed:72:50:d2:25:51:
         15:cc:ed:27:26:c2:a9:0a:6c:52:dc:59:28:f7:3e:19:77:3d:
         8d:0a:d0:6b:8d:d9:60:55:05:b4:4b:83:53:a5:e0:9b:55:da:
         7e:00:9b:fe:f2:94:28:76:f3:1e:d4:19:13:0f:f3:04:2a:eb:
         ca:1a:50:8e:0e:7f:e7:2c:19:1e:01:a7:a1:a8:fd:1c:71:f4:
         de:ab:4b:90:b0:8e:b9:aa:b6:ce:f8:5f:ea:7b:42:01:11:16:
         81:50:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:48:48 2026 by rpki-client