Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a3a2f33342d3334203d3e20323639303537.roa
File:                     323830343a356563633a3a2f33342d3334203d3e20323639303537.roa (raw, json)
Hash identifier:          boruf+0FwRG14ZOxl35A6GuIx4yTf+lwclnlLY9rGQg=
Subject key identifier:   C2:D0:D5:52:C1:A4:23:2B:57:5B:08:72:63:13:B8:47:5D:EB:EA:E8
Certificate issuer:       /CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
Certificate serial:       175B6034326C784795B58E6FB97E348B09163978
Authority key identifier: 23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a3a2f33342d3334203d3e20323639303537.roa
Signing time:             Mon 28 Sep 2026 14:47:13 +0000
ROA not before:           Mon 28 Sep 2026 14:42:13 +0000
ROA not after:            Mon 27 Sep 2027 14:47:13 +0000
asID:                     269057
IP address blocks:        2804:5ecc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl
                          rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 11:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5b:60:34:32:6c:78:47:95:b5:8e:6f:b9:7e:34:8b:09:16:39:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2394302CD5C8ECF673B6BC6DB508B14EFB67DD82
        Validity
            Not Before: Sep 28 14:42:13 2026 GMT
            Not After : Sep 27 14:47:13 2027 GMT
        Subject: CN=C2D0D552C1A4232B575B08726313B8475DEBEAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:68:d9:93:42:44:90:d0:67:cf:95:0b:14:
                    de:f7:c9:4b:9a:a9:d4:a8:e8:70:93:4e:9d:75:bc:
                    95:fd:61:a3:cc:4d:bd:22:a2:66:3e:13:1a:62:b7:
                    64:0d:80:be:f2:7c:85:53:99:3b:78:00:fa:51:dd:
                    32:dd:a1:aa:e8:f7:82:11:39:40:8d:c7:9f:f8:29:
                    47:26:9b:2c:c0:6f:b9:e4:01:be:35:d5:f4:86:e0:
                    a7:20:93:fd:54:d2:ff:1b:31:0a:4f:02:d6:25:1d:
                    a5:99:3e:7f:78:bd:31:d6:61:f0:75:75:c5:9c:4c:
                    a3:fc:c4:5b:02:03:dd:e1:93:f7:23:7b:fe:e3:53:
                    c4:f9:79:f2:25:91:20:74:1d:88:e4:50:17:a1:19:
                    f6:5c:92:fe:7f:d2:ef:fa:29:d2:24:1b:83:f8:6b:
                    64:c2:1c:45:de:c4:dd:46:e1:9f:0c:a7:50:7b:b8:
                    5c:0e:ae:60:6d:a1:e7:3d:a5:52:ce:08:49:7d:0a:
                    af:8f:dd:4a:81:d7:2c:fb:0c:96:1b:ae:c4:91:f2:
                    2c:f3:c2:cf:46:a6:8c:01:55:51:b7:88:aa:22:37:
                    5a:0b:82:25:44:c9:37:5e:c0:19:46:47:0a:c5:f5:
                    1f:84:39:6f:3c:fa:19:3b:5f:13:e4:f0:11:fb:7f:
                    04:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D0:D5:52:C1:A4:23:2B:57:5B:08:72:63:13:B8:47:5D:EB:EA:E8
            X509v3 Authority Key Identifier:
                keyid:23:94:30:2C:D5:C8:EC:F6:73:B6:BC:6D:B5:08:B1:4E:FB:67:DD:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2394302CD5C8ECF673B6BC6DB508B14EFB67DD82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ChZdbTbeLU8PeZKpDDR62v4Yb94GujD9JZKnxBySazjd/0/323830343a356563633a3a2f33342d3334203d3e20323639303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ecc::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:e5:cb:ce:75:fc:0c:58:05:7f:8f:c7:e2:35:ce:46:f7:
         ca:1f:bd:12:fc:55:d7:18:c2:b4:6c:81:09:18:1f:66:ae:a9:
         15:24:ec:06:88:ed:e0:cc:16:c5:f3:a9:4e:04:53:20:b5:1b:
         a4:ed:db:8c:33:aa:d7:d2:74:ee:e7:7b:f4:d0:f3:fa:55:f8:
         af:c0:98:1f:8c:e4:23:16:41:98:b4:89:c5:3a:da:89:7b:d9:
         c4:71:89:be:90:50:c3:c7:46:de:82:9e:95:27:12:1f:0e:0f:
         b5:3a:7f:76:84:73:d3:9d:1d:b2:ad:56:2f:d3:c2:d1:ef:e4:
         44:44:13:56:5c:2f:3a:34:4d:16:3f:0d:00:44:2f:d3:9d:5c:
         0b:89:fc:d3:3a:42:1a:02:67:4f:1e:26:cf:61:e8:54:c2:20:
         00:73:94:48:c2:ea:4a:42:50:98:2b:45:1e:b6:bc:c4:3b:98:
         db:3d:a5:ac:44:c1:29:3e:d5:af:0f:c2:53:63:3d:14:27:84:
         a6:44:fb:40:a3:cb:fc:46:c9:1b:44:fc:f4:6a:f9:60:3d:ee:
         9d:74:15:7b:93:2a:47:0a:ab:36:89:cb:1e:b7:0e:a9:83:0a:
         46:09:1b:ff:d6:91:6e:fe:1c:c2:b3:b1:10:2f:44:24:1f:e8:
         ad:32:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:03:00 2026 by rpki-client