Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          bPBGjfa+wbxD1SCoE47P+qjRCdq24NwVin5Wk4RdT6E=
Subject key identifier:   13:E0:7A:5C:28:29:45:42:6D:30:38:B7:24:16:59:D2:48:99:CE:04
Certificate issuer:       /CN=9300478022D5A08516D4A8091528E3CE35ECFE43
Certificate serial:       2E07CB60D64930A9AA13CCCDB0F5436DF3FAAF9C
Authority key identifier: 93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Mon 28 Sep 2026 16:58:34 +0000
ROA not before:           Mon 28 Sep 2026 16:53:34 +0000
ROA not after:            Mon 27 Sep 2027 16:58:34 +0000
asID:                     267991
IP address blocks:        2804:5654:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 10:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:07:cb:60:d6:49:30:a9:aa:13:cc:cd:b0:f5:43:6d:f3:fa:af:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9300478022D5A08516D4A8091528E3CE35ECFE43
        Validity
            Not Before: Sep 28 16:53:34 2026 GMT
            Not After : Sep 27 16:58:34 2027 GMT
        Subject: CN=13E07A5C282945426D3038B7241659D24899CE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:16:ac:06:1e:89:10:22:18:4f:42:1f:da:
                    df:cc:d8:3e:d7:73:f9:45:5a:0e:b9:f3:a8:0c:44:
                    b5:c0:be:95:de:a2:86:65:b0:35:e4:48:30:6a:e2:
                    0d:1b:55:28:00:35:e8:45:d5:65:b9:b4:ce:74:5d:
                    a0:16:7f:23:94:82:40:fa:be:85:09:35:67:ca:ba:
                    9a:4a:0b:c4:c6:1b:ee:d2:55:b0:ff:b2:66:48:e3:
                    3c:42:84:29:5c:d5:e1:1e:0a:8a:ff:fa:ae:c4:c7:
                    7c:e9:22:14:2a:6b:ea:18:35:08:c3:7b:c3:ea:17:
                    0b:c0:63:9d:31:ca:a9:fa:9f:ac:0a:85:11:bc:36:
                    cf:ca:ce:49:f8:17:39:df:da:62:f6:ed:99:cc:59:
                    e1:b6:86:54:2b:c4:76:60:e4:ac:f2:32:d3:23:33:
                    24:6e:23:65:22:11:f2:95:c3:5d:d7:bd:be:33:32:
                    2e:a7:1b:30:a0:11:6c:07:12:2d:da:62:53:1e:af:
                    0b:0f:22:80:61:ad:70:17:85:fa:39:3a:2f:76:bb:
                    82:94:ac:10:4f:09:de:b9:12:de:02:6e:6f:80:78:
                    38:3b:59:73:09:27:0a:79:69:18:d0:48:4e:d9:d7:
                    0a:1a:4c:4a:18:b1:7b:1b:eb:97:58:33:15:d7:37:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:7A:5C:28:29:45:42:6D:30:38:B7:24:16:59:D2:48:99:CE:04
            X509v3 Authority Key Identifier:
                keyid:93:00:47:80:22:D5:A0:85:16:D4:A8:09:15:28:E3:CE:35:EC:FE:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/9300478022D5A08516D4A8091528E3CE35ECFE43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9300478022D5A08516D4A8091528E3CE35ECFE43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:70:15:26:aa:e9:fd:84:c7:f6:08:10:03:1b:31:56:ce:
         b2:56:26:d1:b3:64:38:aa:24:ad:13:06:79:bb:bc:07:64:44:
         5e:04:6c:e4:99:f5:82:53:3d:e8:80:32:bb:f0:6b:df:20:62:
         4a:0e:da:48:d7:b3:9e:38:56:e2:64:b5:15:f5:77:e7:68:5a:
         68:b3:5e:1a:a8:5c:07:15:b3:03:88:df:e4:1b:a0:99:a2:bc:
         00:05:b8:bc:74:bd:d1:37:5d:d7:29:fb:8b:ff:c3:8e:d4:75:
         aa:f3:db:70:82:45:15:1f:e2:e7:fe:50:0a:28:52:ea:00:58:
         ed:89:dc:65:4f:17:05:ec:32:8b:bc:f9:d8:94:8e:06:e6:5f:
         ff:8c:4e:4a:07:5c:bf:37:2d:2d:e1:ce:e2:38:17:b5:35:4a:
         25:ac:7d:5b:98:ee:2a:a6:f3:52:d0:c8:fb:81:8d:c8:63:56:
         e5:22:78:5b:fc:9d:a2:be:d7:03:c6:49:27:72:4d:24:45:6e:
         d8:6d:32:f8:da:05:32:25:11:40:bc:7b:7a:b3:42:7b:d3:11:
         6d:f8:2b:47:89:73:f0:6d:82:5e:14:e2:e4:a9:d4:5a:ed:0d:
         6b:61:1a:2a:30:db:49:79:42:49:9a:27:d0:3e:85:1c:59:19:
         e8:61:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:59:15 2026 by rpki-client