Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33342d3334203d3e203631373734.roa
File:                     323830343a313932343a383030303a3a2f33342d3334203d3e203631373734.roa (raw, json)
Hash identifier:          AAPsqyHmfhjpmhGt65+k2RbrdZfhVMk8iw0eLQ3zHa0=
Subject key identifier:   18:D7:CF:DD:CD:EE:DB:67:75:82:76:B6:0C:9B:03:1E:76:54:68:99
Certificate issuer:       /CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
Certificate serial:       3AA20F9BA3A356FB7EF34858D2A138569E37DE49
Authority key identifier: E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33342d3334203d3e203631373734.roa
Signing time:             Tue 15 Sep 2026 14:35:39 +0000
ROA not before:           Tue 15 Sep 2026 14:30:39 +0000
ROA not after:            Tue 14 Sep 2027 14:35:39 +0000
asID:                     61774
IP address blocks:        2804:1924:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl
                          rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 17:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a2:0f:9b:a3:a3:56:fb:7e:f3:48:58:d2:a1:38:56:9e:37:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5EED0254DEC985F4548950B5BAF98E84B7063E5
        Validity
            Not Before: Sep 15 14:30:39 2026 GMT
            Not After : Sep 14 14:35:39 2027 GMT
        Subject: CN=18D7CFDDCDEEDB67758276B60C9B031E76546899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:8f:a3:c0:07:52:cb:03:d3:90:fb:99:6a:
                    d7:e1:91:f0:34:0a:93:75:ec:d3:02:b0:c6:1e:3c:
                    3d:87:7f:a4:53:87:08:0e:8f:c6:b8:38:87:6c:1d:
                    39:98:2b:f7:f1:24:73:ca:f5:9d:8e:67:33:a3:d3:
                    eb:09:0f:2b:08:96:c2:05:86:9d:44:6c:10:6b:73:
                    52:6a:07:8d:e6:68:8e:ad:fb:8c:18:3e:49:d6:80:
                    b5:df:e4:ea:64:b3:20:f2:72:58:39:f0:42:de:e9:
                    8f:64:65:2f:15:24:9c:43:00:8f:d3:19:2a:3d:40:
                    8f:9f:a0:36:f7:1a:eb:61:53:8c:6c:a1:ef:be:ae:
                    98:29:07:c7:d4:b5:39:c7:71:c4:22:e9:59:ee:7e:
                    93:3b:af:42:98:c2:c9:28:6b:f8:b8:39:68:4a:f0:
                    a0:c6:a3:a2:22:5a:14:c9:e7:c5:88:d6:cc:f1:81:
                    e3:b8:8e:69:28:20:76:b6:96:0c:71:19:fd:7c:e7:
                    40:d1:cd:d8:7f:85:78:13:2c:8e:52:9a:b8:15:03:
                    5f:79:c6:74:07:79:72:f9:6a:60:9f:60:37:44:ad:
                    b2:44:d9:72:bf:43:a3:ef:84:1c:13:94:2f:fb:74:
                    f9:2d:93:13:f7:5e:83:4c:ac:cb:b9:44:09:7f:6c:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:CF:DD:CD:EE:DB:67:75:82:76:B6:0C:9B:03:1E:76:54:68:99
            X509v3 Authority Key Identifier:
                keyid:E5:EE:D0:25:4D:EC:98:5F:45:48:95:0B:5B:AF:98:E8:4B:70:63:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/E5EED0254DEC985F4548950B5BAF98E84B7063E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5EED0254DEC985F4548950B5BAF98E84B7063E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/0/323830343a313932343a383030303a3a2f33342d3334203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:d0:f1:fb:04:8d:e3:9d:c8:98:67:78:bb:26:5b:55:1f:96:
         2e:48:c2:07:81:58:3a:dc:b4:59:a7:1c:46:3f:c4:d2:b7:ba:
         f3:92:f2:13:86:41:bd:21:b4:72:e8:cd:fc:93:e9:c1:ed:6d:
         b6:0d:ec:77:c2:cc:f7:88:a4:e7:e2:57:ee:e5:55:a7:21:85:
         6e:1a:12:a8:f7:70:02:1a:cb:a9:db:f4:04:c1:ea:bd:e4:ea:
         d3:5d:6e:63:b1:55:e3:b5:72:7b:40:47:e3:b2:e6:92:17:9b:
         bf:67:66:58:9d:c7:ba:62:19:90:75:64:2f:33:ea:e9:df:27:
         a5:df:18:47:45:9b:2a:c8:4b:2e:fb:68:ed:66:ba:35:cf:ff:
         22:3c:f8:6b:47:78:cb:75:3e:da:25:ac:12:20:c0:0f:64:9c:
         2e:99:74:15:d0:d9:73:67:26:9d:0a:7c:8f:cc:6a:03:9e:3d:
         a5:ed:7d:9e:e8:17:6f:8f:f7:3e:ef:42:9a:d5:ef:b0:4f:ec:
         e2:d9:73:51:0a:7a:03:06:a0:9a:e4:3a:2d:af:62:94:e1:da:
         2d:fd:c1:c4:43:bb:98:6f:f0:a3:cc:ba:cd:36:fe:62:5e:eb:
         39:af:b0:80:c1:e4:07:7c:00:64:0a:33:90:7d:82:f7:23:96:
         9d:76:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:30:04 2026 by rpki-client