Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa
File:                     323830343a393839633a3a2f33322d3332203d3e20323735373235.roa (raw, json)
Hash identifier:          2dQkkO5jq9Vo5LBkjS/EHgnTiXbklZYEz3cGdCVu+TQ=
Subject key identifier:   9E:B9:64:64:99:19:78:6D:79:E1:EC:53:61:89:88:78:AF:E7:3D:35
Certificate issuer:       /CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Certificate serial:       46EF0DC0DD6B32F75DF0642F422F89B4B34E1057
Authority key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa
Signing time:             Wed 02 Sep 2026 18:04:34 +0000
ROA not before:           Wed 02 Sep 2026 17:59:34 +0000
ROA not after:            Wed 01 Sep 2027 18:04:34 +0000
asID:                     275725
IP address blocks:        2804:989c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
                          rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 17:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ef:0d:c0:dd:6b:32:f7:5d:f0:64:2f:42:2f:89:b4:b3:4e:10:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
        Validity
            Not Before: Sep  2 17:59:34 2026 GMT
            Not After : Sep  1 18:04:34 2027 GMT
        Subject: CN=9EB964649919786D79E1EC5361898878AFE73D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:c5:20:c1:f6:8a:9c:b0:a7:52:ea:c6:fc:
                    04:f0:ca:e4:0e:c6:07:99:e8:c1:9c:9a:fd:ed:0c:
                    61:0b:74:06:3d:c1:bd:25:6c:89:9f:67:93:08:f4:
                    2a:b2:f7:f9:4d:4a:88:99:f9:cf:e0:cd:b7:56:77:
                    de:a6:1f:83:a0:a3:17:bc:a4:35:48:21:89:5e:b0:
                    95:6b:38:6a:fb:ec:5b:54:06:89:65:89:f8:d2:f9:
                    db:12:ac:d9:33:b4:5e:54:7f:9e:35:9a:87:6d:b1:
                    44:8f:6e:0c:88:9f:f8:ec:2e:3e:10:c6:36:44:f3:
                    fc:a3:04:1e:c4:75:7b:0a:ac:01:a6:35:14:73:cd:
                    e5:3e:f0:a1:1a:df:18:c8:ef:e4:7b:f0:b2:4a:58:
                    bc:d7:da:d5:db:b6:b4:13:5b:10:68:fa:44:13:27:
                    96:aa:6e:83:bd:73:50:d6:68:28:dd:a4:15:83:e5:
                    f4:a2:e7:99:2c:f6:09:af:86:21:c0:ce:c0:3f:ec:
                    3b:d1:d9:b7:a5:9b:78:fb:7b:90:87:55:8e:b5:be:
                    66:24:fd:26:8d:f7:11:99:77:d1:76:c1:09:91:fb:
                    bc:18:ed:15:bc:a5:cd:af:4c:a2:d3:fe:d5:fa:77:
                    05:23:4c:51:07:2a:d4:70:0a:80:5c:06:11:d9:dd:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B9:64:64:99:19:78:6D:79:E1:EC:53:61:89:88:78:AF:E7:3D:35
            X509v3 Authority Key Identifier:
                keyid:0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/323830343a393839633a3a2f33322d3332203d3e20323735373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:989c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:2e:fb:1b:11:ec:bb:7d:4f:7a:50:b8:61:f4:dc:99:d9:
         60:0f:85:b1:56:63:94:6e:68:b4:23:d5:84:9b:db:43:c6:73:
         a0:42:72:0d:45:8f:52:c0:d2:bc:ae:d0:1a:50:f4:f7:a0:19:
         82:52:6c:27:33:65:0b:49:f2:27:21:5f:a8:be:de:9a:ef:3f:
         ce:82:a8:ec:5a:ac:66:cc:1f:f4:c9:f3:63:2b:36:9b:ad:51:
         db:38:ef:85:ec:f1:29:75:94:fd:dd:d3:31:e9:46:18:0d:5d:
         e1:5e:11:80:b7:13:77:4c:a8:da:b3:83:22:c7:25:bc:ab:8b:
         4c:33:3f:16:7b:37:83:21:9c:9b:88:bc:89:ce:a2:bd:00:17:
         66:73:68:8e:29:d2:43:78:b8:c5:ce:14:09:d0:5a:d2:29:6f:
         16:cc:b3:c8:89:73:02:64:c9:d6:ee:46:79:26:a4:8d:91:57:
         2c:67:db:cc:4c:d0:dc:17:d6:71:d7:44:46:0f:54:f7:af:30:
         b5:e2:df:bb:21:0b:d6:ca:cc:0b:bd:f6:f1:77:20:66:4b:85:
         19:bd:0a:b2:5c:6c:ff:d1:77:fd:f3:d9:94:dd:ec:d9:5b:40:
         09:70:28:cd:82:8f:9b:f6:8b:12:e9:50:4f:c7:ca:69:c1:7c:
         44:f3:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:59:30 2026 by rpki-client