Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          68MGnWKYT7A7ujU3Vs2FLmfBHetzD1FLYxBoD69KNMY=
Subject key identifier:   3B:1A:17:8D:38:9C:68:DA:A1:CC:DC:E4:45:7A:4B:F7:1D:5A:E7:1F
Certificate issuer:       /CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
Certificate serial:       3ED631A5C8FD2C6D4113121E3566D85FCBFCFC3E
Authority key identifier: 90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Fri 31 Jul 2026 12:41:15 +0000
ROA not before:           Fri 31 Jul 2026 12:36:15 +0000
ROA not after:            Fri 30 Jul 2027 12:41:15 +0000
asID:                     271699
IP address blocks:        2804:7fa0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d6:31:a5:c8:fd:2c:6d:41:13:12:1e:35:66:d8:5f:cb:fc:fc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903B05A529B3321EF7CBA80EA0C91BBAC698B824
        Validity
            Not Before: Jul 31 12:36:15 2026 GMT
            Not After : Jul 30 12:41:15 2027 GMT
        Subject: CN=3B1A178D389C68DAA1CCDCE4457A4BF71D5AE71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:c2:8e:16:e1:09:47:af:a0:a0:89:1f:38:
                    b2:ba:54:99:e6:14:3b:c6:19:53:ca:6e:b1:cc:35:
                    80:bd:2b:34:32:8d:d4:dd:dc:95:32:5e:aa:6b:7c:
                    d2:0b:0d:1a:86:63:de:16:54:c4:34:7a:bf:46:d8:
                    37:6b:6d:22:87:76:86:68:c1:2d:b3:97:9a:ee:25:
                    23:4a:7b:b1:d1:8d:1e:fc:ae:1d:43:68:56:f9:fb:
                    dd:87:a8:91:ee:f8:26:54:a1:46:15:0b:c0:a7:c0:
                    b3:38:45:9f:29:6a:eb:56:c0:38:f9:e5:86:36:26:
                    a4:9d:97:07:26:e7:ab:bc:78:b3:2a:c2:88:d7:5a:
                    b1:c8:88:02:65:60:9b:46:fc:4e:0e:c6:51:9e:6b:
                    d0:ee:4c:e7:71:29:46:aa:0c:d8:0f:15:86:90:9b:
                    90:aa:c3:7c:af:b8:ad:ce:01:66:29:e1:45:e0:09:
                    60:38:26:22:90:ae:c6:55:ec:ad:4d:b8:84:d4:15:
                    27:d7:9a:51:cd:7b:2d:d8:d4:31:89:40:8f:21:d1:
                    6e:bd:fd:25:e3:7d:b5:d7:79:d4:07:83:fb:4b:eb:
                    05:9d:aa:c2:aa:eb:4d:e4:3d:c4:ba:9d:5f:5b:3d:
                    dd:ef:7b:73:1f:ac:a5:8d:81:08:b2:68:65:da:02:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:17:8D:38:9C:68:DA:A1:CC:DC:E4:45:7A:4B:F7:1D:5A:E7:1F
            X509v3 Authority Key Identifier:
                keyid:90:3B:05:A5:29:B3:32:1E:F7:CB:A8:0E:A0:C9:1B:BA:C6:98:B8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/903B05A529B3321EF7CBA80EA0C91BBAC698B824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/903B05A529B3321EF7CBA80EA0C91BBAC698B824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a383030303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:5a:9c:11:1e:f8:02:64:2a:94:2d:59:04:18:d4:e2:25:
         a8:3c:e1:34:9f:75:ba:3d:2e:4d:72:8f:e3:4b:47:7a:ce:7b:
         91:b9:97:66:56:fc:17:56:13:a9:dc:48:e4:2b:d6:6f:00:76:
         56:da:7b:15:58:df:6c:83:92:f2:47:5d:99:76:bf:86:ff:cd:
         50:ed:d4:cf:87:29:9c:70:b0:9a:ab:21:ae:35:01:ec:54:d5:
         68:49:43:e4:b5:4e:65:8a:7e:f5:e4:3a:39:13:c0:f6:da:d4:
         a3:0e:16:6f:a0:fa:33:ba:e3:6b:2f:43:09:56:1d:59:3c:09:
         ae:28:08:aa:01:e2:b6:6f:a1:c2:4f:d6:7a:a9:1d:f1:fa:00:
         16:7c:35:9e:3b:c7:95:6f:b6:0c:5a:b7:ee:e2:5f:f9:d6:44:
         a8:0f:aa:54:35:1d:90:f6:8c:b6:5b:e7:e5:e0:86:5c:6b:2b:
         fd:fc:19:14:9a:f6:44:3a:2d:3b:45:82:09:4f:79:71:fe:68:
         2c:8a:da:56:88:48:a7:b2:16:da:cc:d1:52:de:f8:13:13:92:
         9b:96:9a:4d:e0:12:87:98:e8:1e:b5:e9:4f:ff:61:8c:4d:54:
         cc:fc:5e:b9:ed:6c:25:e3:75:8f:3a:51:f3:89:be:97:da:1c:
         75:43:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:02:02 2026 by rpki-client