Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa
File:                     323830343a366264633a3a2f33322d3332203d3e20323730343330.roa (raw, json)
Hash identifier:          OnYlYoHT0GPOwwSKCfthEsIjYlnh32UMzlwgyDO5xN0=
Subject key identifier:   82:D7:85:1E:96:D3:76:E7:0F:E2:3A:C3:1B:A5:F9:76:3B:44:D3:B4
Certificate issuer:       /CN=8E682C3DC29648FE86782BA8CBD4395869B6630C
Certificate serial:       2A8F4ECD207EF643F8418EC388FA2657A9910E12
Authority key identifier: 8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa
Signing time:             Mon 21 Sep 2026 12:59:18 +0000
ROA not before:           Mon 21 Sep 2026 12:54:18 +0000
ROA not after:            Mon 20 Sep 2027 12:59:18 +0000
asID:                     270430
IP address blocks:        2804:6bdc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 13:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8f:4e:cd:20:7e:f6:43:f8:41:8e:c3:88:fa:26:57:a9:91:0e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E682C3DC29648FE86782BA8CBD4395869B6630C
        Validity
            Not Before: Sep 21 12:54:18 2026 GMT
            Not After : Sep 20 12:59:18 2027 GMT
        Subject: CN=82D7851E96D376E70FE23AC31BA5F9763B44D3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:78:15:52:a5:36:e5:fa:bf:6b:08:05:10:
                    a7:5f:02:1f:60:cf:36:75:53:6b:e5:16:28:43:bb:
                    4b:6e:4a:f4:7a:5d:b2:60:7e:84:e0:96:57:d8:e6:
                    d5:ea:14:e5:1c:d9:94:89:7b:85:a5:0b:0f:d4:7f:
                    fb:84:1d:66:67:a2:e4:0f:7a:27:f9:d1:ac:5a:4d:
                    a6:a7:c5:5b:1a:d5:e2:80:8d:f8:a7:25:c4:cb:bb:
                    04:b6:e7:02:ec:d1:fd:8f:bc:8d:26:01:3b:bc:50:
                    7c:be:69:7b:61:db:91:f9:bf:ab:e9:35:ca:74:34:
                    a3:15:de:82:e8:5d:db:5c:c1:56:77:09:ea:05:e6:
                    fd:fd:20:72:6c:39:c0:c7:c3:f5:17:44:2d:f9:17:
                    30:4b:02:7e:ce:54:fa:86:f9:fc:a9:ef:29:ca:2b:
                    92:17:2d:5c:d4:9e:36:67:da:f3:b7:60:21:e5:56:
                    1c:91:e2:13:3c:d5:6c:6d:41:9a:91:71:ae:a9:72:
                    37:a4:cd:f2:1e:16:40:e5:b5:c7:6b:91:ed:86:59:
                    1e:e2:4e:62:c5:1f:ae:e4:e3:6e:48:ed:ba:7f:13:
                    18:70:dc:a6:fd:8f:f9:2d:fe:c4:95:68:58:80:05:
                    13:31:03:17:15:83:d8:6a:39:63:91:9f:de:33:56:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:85:1E:96:D3:76:E7:0F:E2:3A:C3:1B:A5:F9:76:3B:44:D3:B4
            X509v3 Authority Key Identifier:
                keyid:8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/323830343a366264633a3a2f33322d3332203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:bb:70:86:79:d2:1b:21:02:46:d0:44:b2:1c:a2:e3:8f:
         c3:3a:c6:81:68:2c:4d:f9:ca:27:74:5f:a6:50:49:58:8e:9b:
         cc:c1:5f:35:52:8d:c9:17:72:9f:58:16:16:6a:54:6f:1e:d6:
         c6:04:57:c6:0f:8e:68:03:c9:a8:cf:fd:09:71:27:a8:55:e0:
         87:fd:54:5d:d3:6b:8f:c9:12:63:c7:46:81:20:6f:dc:27:c0:
         d5:e6:b2:75:50:2a:76:bb:01:c2:f2:08:52:4c:5a:b9:ba:bb:
         74:d9:41:31:fd:80:59:a1:4a:e5:a4:97:10:3d:cc:dc:8f:a6:
         51:dc:66:67:32:2b:be:cb:5f:17:95:2a:ff:c8:14:03:01:a7:
         91:d4:19:e3:b2:ff:5b:b8:27:55:c8:1d:5a:5c:23:04:53:9d:
         90:ec:09:4a:8a:b2:72:74:0f:64:95:cc:bb:96:94:54:7f:73:
         9a:a8:cd:b2:ac:cc:97:3b:1c:93:b3:b9:d2:32:fd:80:4a:69:
         35:1e:e1:86:c1:d4:ad:82:af:18:3a:cf:ad:7c:40:8d:b9:87:
         3d:d8:60:8d:09:61:a5:07:0b:5c:09:0d:f2:b7:4f:13:98:4a:
         11:8c:97:85:3a:97:56:84:53:70:ed:a6:25:ba:0e:a3:09:c9:
         ba:c5:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:01:53 2026 by rpki-client