Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a383030303a3a2f33342d3334203d3e20323637323837.roa
File:                     323830343a346232383a383030303a3a2f33342d3334203d3e20323637323837.roa (raw, json)
Hash identifier:          hD33KoAo3XxmO5BktOtnforUYABzeA9a7wQ+08C9BnE=
Subject key identifier:   E6:09:C8:16:9B:01:FC:32:EF:B6:58:EC:96:74:97:A8:4E:EF:AF:9B
Certificate issuer:       /CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
Certificate serial:       286DFB47CC9431700D14C805BAE41B30919D7D5C
Authority key identifier: DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a383030303a3a2f33342d3334203d3e20323637323837.roa
Signing time:             Tue 08 Sep 2026 21:46:33 +0000
ROA not before:           Tue 08 Sep 2026 21:41:33 +0000
ROA not after:            Tue 07 Sep 2027 21:46:33 +0000
asID:                     267287
IP address blocks:        2804:4b28:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl
                          rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6d:fb:47:cc:94:31:70:0d:14:c8:05:ba:e4:1b:30:91:9d:7d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBD355C3E9E24555E021DD4C30EC084F5C57EC32
        Validity
            Not Before: Sep  8 21:41:33 2026 GMT
            Not After : Sep  7 21:46:33 2027 GMT
        Subject: CN=E609C8169B01FC32EFB658EC967497A84EEFAF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:f0:cf:23:fd:85:aa:80:5a:c4:25:ff:7d:
                    34:50:31:3c:8f:e2:3c:1c:98:cb:fb:cf:f8:00:44:
                    8b:19:b7:3f:ea:b8:e5:c0:ec:38:55:59:2a:3b:1e:
                    f6:9f:db:21:22:f0:31:01:d2:03:0e:cd:40:a1:2b:
                    7d:19:d7:a1:85:6f:02:ee:b1:3c:15:d0:18:87:2e:
                    61:3b:d8:ee:e6:39:28:1d:c2:c9:49:d6:2b:18:05:
                    c8:c3:1c:8d:f7:c0:ac:fc:d7:d1:5f:4c:7e:7a:31:
                    be:5a:5e:39:33:e7:fb:06:ac:d1:84:0c:a7:ed:40:
                    99:32:ea:32:f3:c5:50:9a:51:41:f0:1d:69:35:08:
                    8f:16:fa:cc:d5:ab:2d:dc:c1:03:66:6b:d3:8a:76:
                    85:64:0c:fb:84:d2:fa:94:c7:9c:33:4d:c5:6f:b2:
                    33:af:d7:40:4c:48:ae:10:8c:14:1c:88:59:f5:ff:
                    28:11:f1:56:71:58:a6:73:9d:88:6d:1c:be:0f:88:
                    a2:b6:65:1e:86:dc:94:17:ce:5b:d9:17:f6:56:da:
                    5c:54:37:c8:f0:0a:34:c6:0c:a7:78:ef:08:3c:6c:
                    c7:ba:2f:18:a2:8d:f5:ad:22:20:cc:2c:ec:4c:f6:
                    a8:89:ad:46:62:24:81:72:fb:f6:dd:2e:03:59:3d:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:09:C8:16:9B:01:FC:32:EF:B6:58:EC:96:74:97:A8:4E:EF:AF:9B
            X509v3 Authority Key Identifier:
                keyid:DB:D3:55:C3:E9:E2:45:55:E0:21:DD:4C:30:EC:08:4F:5C:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBD355C3E9E24555E021DD4C30EC084F5C57EC32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNvSGtSFBc8uk8Dm4jGmv4zY15KPNXSftho2LTWvgFxb/0/323830343a346232383a383030303a3a2f33342d3334203d3e20323637323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b28:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         48:34:f4:7d:19:61:fb:59:ba:92:b8:47:6e:fa:3e:39:9b:ee:
         ff:d3:a4:f7:fc:d2:9e:c7:a9:05:dc:47:78:f0:90:46:49:23:
         6f:c7:6b:25:dd:46:72:c6:0c:8c:ac:70:d1:6e:da:36:72:8b:
         b8:b5:67:a4:5a:2c:fd:86:10:d3:6d:58:20:b7:60:3b:8b:88:
         ac:63:e8:1f:54:6d:43:af:4f:2b:21:5c:cb:46:d9:77:17:b6:
         c7:11:3f:c7:63:12:6d:e8:94:f7:d0:19:f7:2e:40:3a:c6:81:
         de:ad:be:58:d1:c5:5e:e1:d1:51:af:0e:c8:32:9f:20:9b:d5:
         56:ef:36:98:50:0e:a3:ef:30:b2:7d:93:dd:ba:7d:84:3e:36:
         d9:01:59:bb:6f:5b:12:1b:de:95:a6:51:dd:2e:15:b4:6e:e2:
         4b:b3:71:db:19:a1:aa:c4:44:0b:56:df:b0:13:8e:da:32:c4:
         f9:6e:a9:94:6a:10:fa:b5:f6:56:43:63:8f:6a:77:fd:d0:44:
         01:f8:96:49:d8:37:0d:d6:38:81:58:39:5f:51:1e:9d:ff:71:
         f0:00:55:94:56:5a:bb:7d:f5:a8:61:d3:fc:eb:47:85:02:e5:
         19:74:62:bb:12:ac:35:e3:ac:6d:fc:fd:b0:2a:92:0b:92:d0:
         4b:18:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:00:12 2026 by rpki-client