Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/323830343a376435383a3a2f33322d313238203d3e20323731353535.roa
File:                     323830343a376435383a3a2f33322d313238203d3e20323731353535.roa (raw, json)
Hash identifier:          YGsVt5Jzp0726otuYiEk+kG2n/gVKX+afq7+YA4oWfo=
Subject key identifier:   50:F0:EE:4C:33:84:0A:48:C4:53:43:44:45:26:ED:57:05:17:32:18
Certificate issuer:       /CN=9350229B261F0B358AAFF56AA708A296E5960870
Certificate serial:       0CB2A265FBDAF568700A3D38DBCD93DC007B5A06
Authority key identifier: 93:50:22:9B:26:1F:0B:35:8A:AF:F5:6A:A7:08:A2:96:E5:96:08:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9350229B261F0B358AAFF56AA708A296E5960870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/323830343a376435383a3a2f33322d313238203d3e20323731353535.roa
Signing time:             Thu 10 Sep 2026 18:16:54 +0000
ROA not before:           Thu 10 Sep 2026 18:11:54 +0000
ROA not after:            Thu 09 Sep 2027 18:16:54 +0000
asID:                     271555
IP address blocks:        2804:7d58::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/9350229B261F0B358AAFF56AA708A296E5960870.crl
                          rsync://rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/9350229B261F0B358AAFF56AA708A296E5960870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9350229B261F0B358AAFF56AA708A296E5960870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 06:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b2:a2:65:fb:da:f5:68:70:0a:3d:38:db:cd:93:dc:00:7b:5a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9350229B261F0B358AAFF56AA708A296E5960870
        Validity
            Not Before: Sep 10 18:11:54 2026 GMT
            Not After : Sep  9 18:16:54 2027 GMT
        Subject: CN=50F0EE4C33840A48C45343444526ED5705173218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d3:aa:3e:2d:46:ef:93:ed:28:6b:45:5d:f4:
                    23:8b:90:a8:8c:2c:09:7d:c5:4d:8c:dd:7c:f0:1d:
                    f5:ad:01:3d:b2:db:94:8f:e8:d8:81:ab:61:e3:e6:
                    f9:44:b4:3e:9c:c4:85:e6:27:05:2c:d2:ae:1b:0e:
                    d6:7f:e5:e7:08:09:62:97:77:7f:1c:79:4c:10:0f:
                    cc:6e:b8:17:e9:47:86:d3:98:ac:84:46:16:0f:05:
                    4f:f1:70:9f:b4:fe:17:36:28:c7:78:ae:e1:9c:fb:
                    19:25:ee:12:fe:c6:d7:19:00:eb:54:77:69:cf:f3:
                    f1:d7:91:97:ed:7c:d9:a4:5e:3a:ee:1c:36:42:a4:
                    67:6c:84:28:3a:7a:fd:67:55:5b:3c:77:66:a0:fa:
                    b9:d5:c2:6c:cf:50:0f:28:af:3c:78:66:b2:83:88:
                    21:ad:38:e2:dd:41:de:82:86:7e:e5:95:46:df:ce:
                    bd:50:da:8d:ef:44:69:db:10:ca:c5:67:fe:b5:2e:
                    da:2d:b8:c4:ea:a2:27:10:50:63:e6:92:f5:1a:50:
                    af:9c:18:c2:95:d0:b9:4c:0e:d3:77:ea:d8:5d:76:
                    cb:e7:ff:69:04:65:a7:20:28:bb:dd:1f:5f:16:17:
                    2c:ed:12:7a:0b:8a:2a:c3:be:de:4d:0a:0b:fb:bf:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:EE:4C:33:84:0A:48:C4:53:43:44:45:26:ED:57:05:17:32:18
            X509v3 Authority Key Identifier:
                keyid:93:50:22:9B:26:1F:0B:35:8A:AF:F5:6A:A7:08:A2:96:E5:96:08:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/9350229B261F0B358AAFF56AA708A296E5960870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9350229B261F0B358AAFF56AA708A296E5960870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9akFby45qpcC3mkjkjB2UjBHuPJCk9nQKYeEDt3GXC4c/0/323830343a376435383a3a2f33322d313238203d3e20323731353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d58::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:08:08:23:f6:16:49:3e:a2:f1:9e:b4:0a:8f:92:b5:7f:1e:
         49:61:14:88:c1:f8:a8:b8:3c:ec:e7:21:2c:95:e1:60:3c:4d:
         c7:c7:26:bd:c4:1c:02:29:d4:44:0e:44:52:7f:08:02:a9:d7:
         6c:db:41:6f:11:24:34:f9:20:23:58:d7:79:55:a5:91:6e:45:
         3d:1b:6f:41:2b:3c:15:f7:00:0f:77:6a:05:a5:b5:23:6c:06:
         31:f4:3d:3b:eb:25:12:12:01:c4:a5:e6:f9:08:f9:ed:62:57:
         80:d7:6d:59:62:2f:06:fe:32:30:71:e1:c8:07:2a:55:7e:2e:
         f9:c5:c1:72:2d:0d:c9:38:cd:16:05:16:9a:39:15:48:b7:d4:
         89:93:4d:53:04:2c:62:43:4b:fa:bc:61:b3:93:12:7a:72:56:
         7a:4b:4f:b5:b2:c3:78:26:4d:34:29:74:28:7e:69:a3:bc:3a:
         12:32:55:6e:3a:2d:12:e5:1c:f3:99:81:44:de:e5:74:10:1c:
         90:da:35:cb:ba:cc:60:b4:5b:21:74:59:08:74:56:33:21:9e:
         88:e2:b8:9f:79:3a:65:7f:05:d7:80:0f:63:e1:3f:20:a7:64:
         d5:04:10:60:de:67:8f:a5:2c:16:35:8c:3f:cb:1c:32:65:95:
         fb:f9:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 20:49:33 2026 by rpki-client