Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/323830343a3339343a3a2f33322d3536203d3e20323632383935.roa
File:                     323830343a3339343a3a2f33322d3536203d3e20323632383935.roa (raw, json)
Hash identifier:          0XSOacmINjale6H+zbavzX7fRxB5GyQaLZNJ+OmI0xs=
Subject key identifier:   DC:A7:D6:74:05:F5:18:93:7A:E1:C5:14:56:29:8C:68:37:09:D2:01
Certificate issuer:       /CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
Certificate serial:       4187AD130C1613A4D0A19C1E4F5B527CC3A8D762
Authority key identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/323830343a3339343a3a2f33322d3536203d3e20323632383935.roa
Signing time:             Wed 30 Sep 2026 16:45:39 +0000
ROA not before:           Wed 30 Sep 2026 16:40:39 +0000
ROA not after:            Wed 29 Sep 2027 16:45:39 +0000
asID:                     262895
IP address blocks:        2804:394::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl
                          rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 03:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:ad:13:0c:16:13:a4:d0:a1:9c:1e:4f:5b:52:7c:c3:a8:d7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
        Validity
            Not Before: Sep 30 16:40:39 2026 GMT
            Not After : Sep 29 16:45:39 2027 GMT
        Subject: CN=DCA7D67405F518937AE1C51456298C683709D201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:2c:02:6a:62:12:f5:8d:3f:d7:59:ea:9c:
                    45:c8:1c:5c:9c:60:69:93:b8:af:6b:f8:ed:b0:e2:
                    94:b6:55:a4:78:b2:cf:91:d8:ba:39:5f:01:d0:d2:
                    23:b1:4f:d8:48:67:71:34:2d:75:5f:47:66:de:ae:
                    ed:f9:b8:09:1c:b7:88:c0:1d:e7:37:d3:51:6a:98:
                    58:14:df:90:6b:9a:6d:6e:e7:b6:48:e9:44:e6:e6:
                    8f:12:e1:5b:b8:5a:3f:f0:0a:2c:3e:43:44:66:a0:
                    80:6c:bd:89:f3:bb:93:9b:e7:3c:80:0f:32:34:91:
                    34:55:ee:a0:74:45:69:62:4c:9b:45:02:7b:79:e8:
                    73:02:26:44:5b:68:81:80:83:3b:24:ee:65:83:ca:
                    c5:74:8f:69:9b:b4:be:a9:cc:3f:b9:a3:95:41:c5:
                    bf:d5:84:19:52:6b:11:31:1c:15:20:a0:98:e8:49:
                    55:a8:4e:e3:ed:cc:e7:dd:2f:d8:7d:f0:69:42:fa:
                    f3:dd:32:7c:73:1c:de:34:54:71:2b:7c:12:fa:30:
                    06:f2:1b:a7:90:7f:28:fd:48:66:ad:0f:9e:92:51:
                    44:b6:63:79:51:95:00:74:d2:c7:8d:48:cf:5f:4a:
                    8b:b4:bd:b5:a7:cc:0a:d1:32:27:d8:49:91:82:b6:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A7:D6:74:05:F5:18:93:7A:E1:C5:14:56:29:8C:68:37:09:D2:01
            X509v3 Authority Key Identifier:
                keyid:3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/323830343a3339343a3a2f33322d3536203d3e20323632383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:394::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:10:3a:d2:9a:55:3d:63:93:1e:a1:c4:b8:dc:4c:24:ca:a9:
         55:5f:78:68:d2:84:6d:3a:ba:4a:c7:46:2c:f1:41:72:7d:9f:
         74:00:3a:62:63:e6:50:e1:fa:49:d5:2d:bd:6e:0a:87:7e:55:
         41:d7:3d:af:58:e1:9c:9a:3f:8f:79:b4:2b:4c:f7:b5:ff:81:
         d0:df:2b:5a:02:20:b7:2d:da:8d:09:3e:ee:5c:9a:b8:85:48:
         63:8d:33:2c:8e:7d:53:59:e1:fb:17:27:8e:d7:25:fd:db:43:
         e5:a9:af:af:44:24:7b:dc:23:d5:19:c3:df:90:bb:dd:9c:87:
         f0:b5:bc:77:e2:79:f2:61:b6:21:0e:98:ac:33:b8:aa:8b:1d:
         ad:6a:3f:e9:d2:41:64:7e:80:6b:f7:e4:6f:6c:f3:c2:57:e8:
         09:6a:a2:5a:a1:e4:7e:f2:bd:50:99:56:b9:16:9b:1c:c9:af:
         75:e5:b8:5e:fa:e6:50:3e:bf:c9:96:34:5a:3d:9d:4c:5c:1d:
         86:a5:d5:d1:bd:df:2d:56:c3:c4:1e:cd:7e:20:e4:e6:23:21:
         76:62:4a:37:54:f1:d5:59:7a:94:15:d5:ed:32:0b:b0:cf:a3:
         27:69:9a:64:46:9c:3e:62:c4:1d:97:ba:10:79:03:fe:6a:23:
         2b:35:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:58:18 2026 by rpki-client