Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          UkkP8/eogkBFBXretMl/TWGId/GtBFcuXxFsstlL9KQ=
Subject key identifier:   B0:29:AA:E4:17:3F:88:64:4F:BF:07:B5:BC:F3:E8:DC:C1:CD:9A:00
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       03DD0AFF9C62138885DA1FA48F1D70FBD8DB8518
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:33 +0000
ROA not before:           Mon 28 Sep 2026 16:53:33 +0000
ROA not after:            Mon 27 Sep 2027 16:58:33 +0000
asID:                     267991
IP address blocks:        2804:5654:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 13:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dd:0a:ff:9c:62:13:88:85:da:1f:a4:8f:1d:70:fb:d8:db:85:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:33 2026 GMT
            Not After : Sep 27 16:58:33 2027 GMT
        Subject: CN=B029AAE4173F88644FBF07B5BCF3E8DCC1CD9A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:e7:97:e8:f0:34:ef:6a:92:e9:32:8d:78:
                    2f:b8:bc:c1:74:70:e8:2a:88:3d:7a:54:f1:66:37:
                    54:9f:b7:48:94:6d:2a:5c:d7:b9:f5:e8:b7:50:e2:
                    3d:7c:ad:fd:e3:c7:ce:c6:e8:52:64:31:78:ef:92:
                    59:86:d0:64:b6:3d:d7:e4:a9:0a:1c:68:24:e3:cb:
                    5d:5d:1f:52:92:35:22:28:db:6a:02:bc:49:77:d1:
                    dc:25:ba:ef:71:7d:9b:4a:50:4c:a8:83:da:9d:bc:
                    e3:86:4b:79:e3:b1:04:d9:45:05:ab:77:84:71:67:
                    b2:da:04:95:67:28:74:fb:33:0a:8f:9a:52:fa:be:
                    85:fe:d6:08:50:7c:9f:df:12:cf:53:57:8f:cd:05:
                    83:d8:46:04:f6:69:6d:a3:aa:cc:83:5d:0d:40:56:
                    80:e9:d4:72:00:ae:da:7f:93:30:00:57:a0:5a:00:
                    65:29:a8:8b:70:38:04:fd:8e:db:8c:dd:e0:7c:55:
                    a8:0c:2c:d1:49:5a:84:ff:31:69:4d:a5:7e:d9:53:
                    1e:f5:46:9a:63:ea:5f:4f:f1:d3:05:cb:57:d4:ed:
                    1b:f7:15:16:79:ae:03:a0:cf:07:04:3a:41:1c:4d:
                    9c:58:b1:f4:0b:17:1d:53:26:ca:33:bf:47:59:51:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:29:AA:E4:17:3F:88:64:4F:BF:07:B5:BC:F3:E8:DC:C1:CD:9A:00
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:6c:06:7a:c7:8d:c9:ab:8c:62:7f:94:a4:90:77:1d:bd:16:
         57:c6:fa:7f:90:2e:8b:28:1b:e2:ab:74:f4:9a:49:95:a1:33:
         d2:ac:78:e3:5c:ae:b1:31:f0:44:8c:b1:fd:66:52:2a:05:b9:
         fa:62:91:c3:6e:b1:df:1c:ad:78:87:ac:aa:06:cb:9c:e2:e8:
         69:df:69:66:dd:5a:fa:f4:b1:48:04:3c:17:1e:ee:d0:ff:2a:
         fb:ba:41:13:65:35:59:ae:43:40:94:14:85:ec:90:02:fe:91:
         a7:49:ef:48:3a:e4:49:a9:1c:7c:4c:18:bd:c9:df:bc:db:c2:
         84:ad:f4:bd:62:2f:28:0c:bf:51:44:4f:4b:58:c4:42:0e:15:
         c6:2c:35:c1:ac:65:f5:1d:27:03:87:62:bb:03:2b:fb:c9:7a:
         a6:e7:9b:1d:20:58:fa:9f:e4:41:fd:1e:bc:82:4e:45:32:30:
         c7:ff:6d:98:c8:6e:e8:cf:f1:ca:e3:38:1c:52:b0:22:d5:8b:
         4a:6e:96:ec:27:07:08:fe:51:6a:4b:30:4f:ac:41:dd:9f:97:
         eb:a7:d5:2c:5c:60:0a:1d:a2:15:13:2b:81:82:e1:62:e2:55:
         9f:2f:a2:6c:78:1c:76:b7:f4:57:82:f7:96:32:e2:4d:ef:d3:
         68:d4:2c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:55:38 2026 by rpki-client