Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa
File:                     323830343a343864633a3a2f33322d3430203d3e203238333237.roa (raw, json)
Hash identifier:          EDy3Uu86gW1moRs1FvG2auQeRUfcdFnF9C9iSd9nx3c=
Subject key identifier:   5D:E0:F0:0D:94:E3:B1:07:AF:C7:38:50:B9:9A:46:7E:E7:05:EE:B7
Certificate issuer:       /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial:       31D4D2A6C3DAC9CD3D17813F2B40B1651F60463F
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa
Signing time:             Tue 29 Sep 2026 17:58:11 +0000
ROA not before:           Tue 29 Sep 2026 17:53:11 +0000
ROA not after:            Tue 28 Sep 2027 17:58:11 +0000
asID:                     28327
IP address blocks:        2804:48dc::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
                          rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 23:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d4:d2:a6:c3:da:c9:cd:3d:17:81:3f:2b:40:b1:65:1f:60:46:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
        Validity
            Not Before: Sep 29 17:53:11 2026 GMT
            Not After : Sep 28 17:58:11 2027 GMT
        Subject: CN=5DE0F00D94E3B107AFC73850B99A467EE705EEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:9f:18:d9:2c:2f:e5:25:55:eb:3a:0a:9c:
                    65:f5:4b:99:ee:ad:59:ef:b9:64:32:29:e3:59:8c:
                    03:6f:b4:c7:e2:c2:f2:ec:39:99:98:ba:35:d8:f6:
                    c5:43:45:8c:40:a7:e2:ad:0f:4d:67:72:7a:20:ba:
                    10:bf:b5:9b:bc:0a:30:8a:90:d6:23:93:b0:7e:15:
                    f3:0e:15:b5:de:5b:0f:ce:58:11:e8:0d:13:40:3b:
                    dd:8a:fd:5d:25:f3:b2:2f:6d:34:72:f1:da:6a:ce:
                    57:37:e4:d0:cd:6e:a7:c5:95:19:85:2b:86:9c:62:
                    c3:84:16:0d:bf:e0:6d:01:67:a5:3b:52:10:50:a3:
                    a5:2b:82:09:6a:e0:e1:4f:61:ce:63:77:c6:95:99:
                    09:44:c8:5b:1c:c0:4e:6d:2e:2c:2a:dc:75:c5:0c:
                    5a:78:ac:fc:20:44:4f:ed:72:5a:5d:77:8e:64:f5:
                    20:6a:a3:86:c4:f0:30:d6:0b:a4:4a:a5:d2:d2:bb:
                    ff:f3:c0:b9:6e:97:6a:f9:17:b4:a3:c1:c9:d5:b3:
                    91:f6:c3:37:07:d8:27:67:4f:f1:a1:23:42:dd:17:
                    b9:8b:70:6d:c8:ec:2f:ce:fb:11:7e:c5:80:3b:e0:
                    7b:9b:1a:77:c0:82:d6:bf:cb:a1:04:ff:51:0c:44:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:F0:0D:94:E3:B1:07:AF:C7:38:50:B9:9A:46:7E:E7:05:EE:B7
            X509v3 Authority Key Identifier:
                keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:6d:15:54:c6:a0:27:5e:2a:7c:c2:85:5a:cc:04:7e:06:
         d9:97:cb:97:db:23:39:2b:e2:cb:65:ce:f8:7a:4d:aa:12:85:
         54:44:86:91:ef:00:8b:cf:1e:18:7a:0a:c5:0a:85:1d:0d:51:
         8b:40:ca:97:35:bc:b9:5e:bf:23:47:5c:d8:4e:f6:8d:b1:4d:
         bf:ff:20:bb:31:12:81:93:71:0d:81:c6:f4:e1:f6:f2:c3:a0:
         b7:09:4b:90:a1:52:86:4e:ee:9a:8c:f3:00:23:c2:78:c0:af:
         37:09:42:54:89:5c:ee:ff:30:f6:2c:da:86:93:5b:92:26:18:
         88:11:e6:0a:07:41:33:d0:de:0d:3d:77:fa:5d:8a:ef:e0:5d:
         4e:37:8e:01:03:90:52:9b:31:ee:20:2a:80:54:41:98:6e:49:
         11:9c:c4:7e:9d:06:96:87:7e:4c:06:86:5d:13:69:d3:42:46:
         e1:bd:97:c9:e6:84:16:f5:07:b2:04:e5:09:73:82:7c:4a:67:
         f2:3f:42:bd:b9:e7:53:d6:f0:78:57:3a:99:49:5b:22:88:7d:
         02:71:85:30:f4:75:8b:a3:13:2b:c5:3c:b5:b6:75:78:cb:7a:
         d3:e7:c8:7f:c2:38:85:e3:38:9b:5c:0a:6d:95:2c:10:66:30:
         72:27:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 05:49:56 2026 by rpki-client