Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a343030303a3a2f33342d3334203d3e203631373734.roa
File:                     323830343a313932343a343030303a3a2f33342d3334203d3e203631373734.roa (raw, json)
Hash identifier:          qANeDb0+qj8ztX8TwCWlqFnfWNt5tcLHrglF0pa+x1M=
Subject key identifier:   E4:CB:87:0E:BE:B5:1E:C9:92:EB:BB:8C:F2:8F:ED:30:1B:77:A8:5D
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       13AEEE324C96166DF845145EFAFB43E75C3F556A
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a343030303a3a2f33342d3334203d3e203631373734.roa
Signing time:             Tue 15 Sep 2026 14:35:39 +0000
ROA not before:           Tue 15 Sep 2026 14:30:39 +0000
ROA not after:            Tue 14 Sep 2027 14:35:39 +0000
asID:                     61774
IP address blocks:        2804:1924:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ae:ee:32:4c:96:16:6d:f8:45:14:5e:fa:fb:43:e7:5c:3f:55:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Sep 15 14:30:39 2026 GMT
            Not After : Sep 14 14:35:39 2027 GMT
        Subject: CN=E4CB870EBEB51EC992EBBB8CF28FED301B77A85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6e:96:84:fc:4f:63:94:bc:c4:97:45:01:6c:
                    bf:9b:71:ec:13:e7:a7:45:94:77:f6:ee:e9:38:7e:
                    20:b4:3d:b9:f0:90:ad:d9:92:b4:16:23:e7:c9:33:
                    fa:fd:16:f0:c5:b6:21:aa:9d:34:a9:e3:85:28:d2:
                    21:74:d8:b1:95:d4:46:d8:e9:7f:1f:f4:47:6f:d4:
                    f4:7f:92:91:1a:93:d2:82:a4:0e:6b:11:59:74:a0:
                    6c:f1:9b:60:15:53:6b:26:20:72:65:41:e9:8f:2a:
                    cf:7d:d0:ac:ca:ad:d1:04:dc:ff:41:40:60:4c:51:
                    5e:d5:29:b3:59:2e:91:4e:7a:11:91:70:2e:fa:d5:
                    8e:51:0c:3b:67:cc:e1:32:26:79:a9:91:46:90:2f:
                    00:27:ca:84:c4:3f:66:1d:65:de:75:50:fc:3f:f5:
                    91:41:e5:60:08:a0:c4:f9:bc:5e:7a:65:31:e7:57:
                    cf:cc:3f:f7:62:dd:82:0b:91:61:ef:c0:22:29:8c:
                    ab:8b:78:7b:5f:2d:0a:50:6d:8d:29:1c:00:83:8a:
                    a3:f0:4c:3c:f6:3d:44:47:08:3d:6a:e9:2d:77:93:
                    ac:f5:04:a6:bd:ca:b9:f7:9f:14:dd:76:95:99:be:
                    76:41:f9:50:ac:59:6d:22:e7:f6:fd:a3:80:45:7c:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CB:87:0E:BE:B5:1E:C9:92:EB:BB:8C:F2:8F:ED:30:1B:77:A8:5D
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a343030303a3a2f33342d3334203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:2e:2a:3f:49:14:b9:97:e8:18:cf:b3:0e:d1:77:36:fc:ec:
         31:dd:44:a4:76:11:09:07:80:ce:d1:fe:b8:00:27:7a:10:eb:
         9d:23:91:bf:1b:80:93:c7:cd:3a:53:d1:cb:88:80:0b:2a:42:
         8b:60:2c:c3:a0:4e:4f:07:59:5f:17:df:53:f4:84:46:17:39:
         1c:a4:79:3e:d4:66:df:3d:fc:be:e9:56:86:7e:fd:4f:98:de:
         3f:5f:14:e8:a0:78:2c:78:a1:97:4c:4c:f5:5e:78:60:31:3c:
         91:64:4a:fd:ca:dd:57:95:c9:9b:d8:cd:22:a1:4f:aa:6d:08:
         f0:fb:d2:9c:a0:52:66:bd:d3:34:23:33:e6:2e:7e:88:96:56:
         eb:c1:dc:ca:bc:e1:32:8f:7b:78:ec:87:aa:3a:d8:af:7f:0b:
         67:05:f0:3e:da:43:a0:41:58:44:10:2d:e3:2b:d4:14:41:7b:
         fe:17:46:c8:fb:6a:3a:84:d7:b7:55:4a:8b:04:c5:ef:a8:c8:
         32:77:f8:f2:b6:7c:1d:6e:c8:e3:27:d4:f2:c7:c0:45:91:f2:
         c1:1d:31:7c:9f:64:ba:6a:76:d0:2a:2d:08:bc:c9:aa:27:05:
         a5:eb:c1:39:e3:05:49:6f:01:12:ee:57:82:d2:a9:1b:90:56:
         2a:45:27:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:29:20 2026 by rpki-client