Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a3264343a3a2f33322d3438203d3e20323633383830.roa
File:                     323830343a3264343a3a2f33322d3438203d3e20323633383830.roa (raw, json)
Hash identifier:          cNf2r63+MMIuUOyZ8nYxWU64t0pExKQhpg2l2Le0opU=
Subject key identifier:   C9:DE:FF:73:18:31:EA:6D:A3:67:20:18:45:6B:A9:3A:2C:D9:E6:38
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       2393703C2B8D5A6CB13A3C12CEF4FC3439D6BA6E
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a3264343a3a2f33322d3438203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:52 +0000
ROA not before:           Mon 21 Sep 2026 19:43:52 +0000
ROA not after:            Mon 20 Sep 2027 19:48:52 +0000
asID:                     263880
IP address blocks:        2804:2d4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:93:70:3c:2b:8d:5a:6c:b1:3a:3c:12:ce:f4:fc:34:39:d6:ba:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:52 2026 GMT
            Not After : Sep 20 19:48:52 2027 GMT
        Subject: CN=C9DEFF731831EA6DA3672018456BA93A2CD9E638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:04:76:94:5a:a3:7a:60:b0:f7:bc:47:19:
                    3a:c7:2c:42:29:82:f6:de:18:d5:eb:1d:49:ce:b6:
                    87:7c:90:6d:e2:ff:a1:98:d8:f5:4b:84:3e:4e:33:
                    ce:30:db:6c:24:a3:9a:5b:f1:55:a5:20:17:d1:0e:
                    10:bc:1f:67:9b:61:34:61:d6:5b:bb:44:01:63:86:
                    3a:36:fe:98:16:70:c0:13:c5:1d:85:f5:6d:b6:8c:
                    bf:fe:49:02:37:0f:72:80:07:b0:8f:94:97:f9:cb:
                    ec:66:3f:d5:32:fb:68:3d:86:6f:55:f5:11:b4:c8:
                    ff:be:d0:75:7f:c8:0f:dc:5e:51:bf:47:24:f0:61:
                    8b:0f:37:ef:0f:58:03:17:96:1c:f9:67:99:c5:e0:
                    4a:73:5e:d4:af:86:78:78:ad:11:f3:a7:12:47:4d:
                    df:6f:a4:5f:28:c2:1c:bb:83:38:4b:b9:4f:56:37:
                    04:0d:a6:ae:f4:ec:93:e2:e2:27:48:09:53:87:d3:
                    d7:1b:28:23:86:04:35:16:05:67:9b:aa:1d:b2:ec:
                    1a:f3:26:fc:61:b6:6d:13:26:1f:61:88:25:2c:cf:
                    57:a3:e8:2e:66:a2:ec:cd:d8:1d:79:55:39:9e:17:
                    c1:ae:a4:60:56:cb:7c:35:fb:b2:24:42:9f:37:02:
                    96:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:FF:73:18:31:EA:6D:A3:67:20:18:45:6B:A9:3A:2C:D9:E6:38
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/323830343a3264343a3a2f33322d3438203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:e6:32:70:98:09:1b:06:c8:44:46:4a:44:1c:a2:b9:1a:
         6b:d1:e7:3d:9d:bb:5a:63:94:1a:ba:6c:52:fb:96:e8:a3:80:
         81:00:de:cf:89:f8:77:13:e1:b3:e6:87:bd:84:31:d2:2a:f2:
         fb:fe:77:02:b3:d1:18:14:4d:68:22:a4:2b:d9:d5:df:79:f3:
         1b:fb:5c:75:84:1b:50:85:ed:ad:75:95:4a:8b:5b:c8:05:58:
         1b:14:be:e1:e2:c7:eb:88:ad:ea:34:75:c1:4d:87:2b:c0:b3:
         1b:c3:42:fa:ff:ea:e3:91:92:9c:da:54:85:2e:c8:2b:8c:1a:
         13:77:4f:99:b7:c9:77:23:1e:51:0d:52:d6:2c:b1:aa:bc:91:
         1f:fc:e6:7f:aa:fd:d5:a1:3d:1f:20:20:a4:db:f3:f0:ca:42:
         39:3a:9f:f3:24:63:06:90:5a:83:1c:af:4f:0d:97:e0:86:dd:
         15:c9:5d:51:ca:78:11:59:95:7d:11:1d:9d:c2:e9:62:a9:e7:
         ef:d8:a0:7c:5e:a1:6f:25:31:7c:1b:b6:b9:69:ad:37:c3:67:
         d9:6f:3d:28:39:31:2d:b9:93:a7:9f:a1:87:cb:8b:76:d5:c4:
         be:e1:ef:f4:db:b8:9e:66:4e:d2:e1:43:1c:f7:15:12:26:ba:
         de:69:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----