Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/323830343a333135343a3a2f33322d3430203d3e20323635303037.roa
File:                     323830343a333135343a3a2f33322d3430203d3e20323635303037.roa (raw, json)
Hash identifier:          NDZH1gdvZ0UwAwPMMnibXlaFs2H8NwoEBnGTfxdjlMs=
Subject key identifier:   3B:C5:D8:60:5F:A9:98:FF:9B:2B:26:0D:D5:F5:B5:8B:FD:C8:02:5A
Certificate issuer:       /CN=73FF5912337E1E9400FC687E491E4C05009DE96E
Certificate serial:       341156842F4E67AF075F0B5177E261B63461426E
Authority key identifier: 73:FF:59:12:33:7E:1E:94:00:FC:68:7E:49:1E:4C:05:00:9D:E9:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/323830343a333135343a3a2f33322d3430203d3e20323635303037.roa
Signing time:             Tue 01 Sep 2026 13:20:28 +0000
ROA not before:           Tue 01 Sep 2026 13:15:28 +0000
ROA not after:            Tue 31 Aug 2027 13:20:28 +0000
asID:                     265007
IP address blocks:        2804:3154::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.crl
                          rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 05:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:11:56:84:2f:4e:67:af:07:5f:0b:51:77:e2:61:b6:34:61:42:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73FF5912337E1E9400FC687E491E4C05009DE96E
        Validity
            Not Before: Sep  1 13:15:28 2026 GMT
            Not After : Aug 31 13:20:28 2027 GMT
        Subject: CN=3BC5D8605FA998FF9B2B260DD5F5B58BFDC8025A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:46:a4:e9:4c:29:dd:4d:06:33:6d:79:a5:
                    83:10:f2:59:d2:28:8c:be:1f:ef:c2:b0:e0:27:30:
                    e2:e4:ab:a3:d0:eb:ae:86:15:fe:ab:55:4a:d1:4f:
                    4d:c8:cd:b2:69:59:ae:4e:a0:49:3a:76:1e:a2:12:
                    ec:8d:ff:86:6a:c2:4d:2d:f9:4d:c8:5e:79:77:ad:
                    71:45:ec:13:49:70:d2:57:c7:86:41:32:5b:52:ff:
                    c2:ee:b6:c0:06:94:ee:f3:39:b5:3d:13:25:5e:b3:
                    46:ef:c0:c4:71:62:2c:f4:58:f1:a3:f8:08:20:fb:
                    d3:da:92:23:b4:67:16:b7:00:0c:cc:90:d6:1f:6c:
                    73:d5:04:ad:f4:ec:a5:91:e3:fc:ac:33:b5:ac:d9:
                    c3:4e:95:bb:5d:b3:f6:63:e8:c5:db:f5:bc:0e:cc:
                    b3:0f:dc:92:48:6b:71:ab:16:9e:a0:bc:17:66:00:
                    da:03:83:aa:79:5a:ed:ef:d7:b4:a5:16:0d:89:cd:
                    83:93:6e:50:a5:a5:ca:2b:b3:b0:83:7d:a8:48:4a:
                    d0:de:1b:45:26:3a:c5:b2:48:83:53:d6:3b:78:fa:
                    8a:f4:a6:5f:c4:59:e8:36:8c:a1:3e:94:42:cb:80:
                    5a:55:fc:fe:73:57:b0:fc:c3:cf:37:b0:ae:e7:20:
                    0b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C5:D8:60:5F:A9:98:FF:9B:2B:26:0D:D5:F5:B5:8B:FD:C8:02:5A
            X509v3 Authority Key Identifier:
                keyid:73:FF:59:12:33:7E:1E:94:00:FC:68:7E:49:1E:4C:05:00:9D:E9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/73FF5912337E1E9400FC687E491E4C05009DE96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73FF5912337E1E9400FC687E491E4C05009DE96E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAsfmtE4dZkt9kSmZgZT78YYN4HX55KZbyJ5V41yrsiK/0/323830343a333135343a3a2f33322d3430203d3e20323635303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3154::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:60:ab:4b:15:2d:f9:5b:f4:cb:b7:e5:3e:72:b3:4c:3c:ff:
         8f:f9:08:50:6b:cf:dc:12:cb:5d:43:fa:99:f3:92:e2:aa:30:
         00:bd:90:c0:c7:4e:51:62:bf:7f:f9:6a:73:c3:96:cd:1d:23:
         e5:5c:bc:f5:a2:ea:9f:02:67:47:98:e0:a5:bc:da:0a:e1:de:
         e2:d1:06:17:ed:a6:f8:aa:c0:6a:d5:4b:27:57:0a:49:30:d3:
         ae:aa:9c:96:f3:f3:57:66:f1:d0:04:a2:1f:68:bf:d9:d0:f8:
         73:2b:81:9d:30:04:e6:aa:c7:67:0e:74:da:ff:ca:b9:e4:46:
         8a:aa:a1:5f:97:1c:9c:db:a8:59:16:e8:ae:b2:bc:86:fa:d6:
         ce:58:a1:06:81:16:62:af:46:7f:03:78:bb:2b:a8:8e:45:f7:
         39:59:f5:48:80:7c:d7:cc:bc:b9:ef:93:df:c8:2d:df:9b:43:
         1b:5d:46:c9:ef:19:13:56:ae:f6:5e:e4:bc:de:fa:29:69:93:
         1d:bc:c4:2b:00:ab:00:ba:8e:50:49:21:c8:58:7f:60:30:70:
         3b:3a:bc:77:59:ca:5a:aa:4f:1f:0e:c0:7a:e2:ff:f5:ed:50:
         d0:91:18:83:70:af:3d:85:99:77:89:40:ff:45:03:b0:a0:38:
         3f:a4:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:05:18 2026 by rpki-client