Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d313238203d3e20323731343738.roa
File:                     323830343a376332343a3a2f33342d313238203d3e20323731343738.roa (raw, json)
Hash identifier:          X1wSTdE9Kggaj8yZLNcdGzFP184Dmm54dg+k5RcABTQ=
Subject key identifier:   CE:16:97:2E:62:59:5D:92:14:BE:DE:4C:8A:0B:31:14:19:98:4B:40
Certificate issuer:       /CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
Certificate serial:       2BCEB9E90092135431E0B55F98538190413C4B3C
Authority key identifier: 0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d313238203d3e20323731343738.roa
Signing time:             Wed 23 Sep 2026 16:58:25 +0000
ROA not before:           Wed 23 Sep 2026 16:53:25 +0000
ROA not after:            Wed 22 Sep 2027 16:58:25 +0000
asID:                     271478
IP address blocks:        2804:7c24::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:b9:e9:00:92:13:54:31:e0:b5:5f:98:53:81:90:41:3c:4b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1
        Validity
            Not Before: Sep 23 16:53:25 2026 GMT
            Not After : Sep 22 16:58:25 2027 GMT
        Subject: CN=CE16972E62595D9214BEDE4C8A0B311419984B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:a1:fc:49:20:2b:2b:6f:40:f8:93:10:5e:
                    2f:de:f9:67:18:a5:35:08:a6:6a:21:f6:80:54:92:
                    d8:55:ac:c7:07:a6:2e:fd:13:67:d8:3f:04:04:b4:
                    cb:38:fc:53:da:8a:17:e3:46:e6:5e:a5:66:9b:06:
                    bf:1e:2e:48:8d:ab:ff:8d:f4:e2:5b:1e:9a:bf:57:
                    15:e7:69:e3:8a:37:4c:0c:65:74:c0:7d:3c:ad:54:
                    72:a7:51:b7:64:59:b8:27:b6:da:be:7d:45:b9:43:
                    ee:ea:db:9d:71:8b:5a:73:a7:4f:2f:ba:2c:3f:68:
                    a8:41:0d:da:d9:52:88:76:20:4e:44:b1:c8:37:86:
                    6f:f7:48:82:cc:9d:cb:5c:fd:55:5a:50:51:69:9b:
                    39:b6:d8:6a:14:0c:fc:23:f1:3e:08:9d:0c:3d:9b:
                    49:d0:77:40:bd:07:df:56:67:6d:30:2c:71:cf:0e:
                    39:24:d6:77:9c:32:83:86:da:2c:a1:ea:6a:6c:be:
                    df:75:22:fb:f4:ed:b7:0e:ad:b8:0e:77:62:bd:75:
                    7b:d0:1b:5f:b3:b3:07:d6:61:ef:5b:3c:a3:ec:f9:
                    3f:8d:0f:02:c5:51:c1:94:32:66:01:45:11:06:60:
                    d7:e2:dd:3a:f2:bb:88:77:29:4e:46:a7:05:42:6c:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:97:2E:62:59:5D:92:14:BE:DE:4C:8A:0B:31:14:19:98:4B:40
            X509v3 Authority Key Identifier:
                keyid:0D:E8:2E:3D:80:72:0C:E4:A5:10:B2:CC:02:45:E3:FC:0F:78:35:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE82E3D80720CE4A510B2CC0245E3FC0F7835C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a3a2f33342d313238203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:c9:b4:f9:d5:76:5e:2c:2b:ab:de:60:2a:0c:ee:58:4a:
         e0:90:ee:00:0f:d4:7d:d7:ed:8a:06:d3:59:8a:48:d1:40:e2:
         30:84:42:f3:bc:46:e0:9d:dd:cf:23:c7:69:75:3a:9a:69:1e:
         d8:57:2d:20:29:9f:3a:0f:90:ea:40:5a:02:f0:fb:c7:9c:00:
         1f:4f:d0:a6:0b:6b:84:7f:4a:90:4b:c2:2b:bb:ac:53:5c:db:
         45:48:15:55:69:cb:93:84:ca:35:aa:43:c9:1c:f5:8e:11:90:
         e2:af:b7:97:e2:72:ce:64:7b:8b:33:ba:00:50:11:73:ef:e8:
         ee:a0:08:fb:83:c9:30:78:5c:90:05:b7:55:ab:30:ef:59:d7:
         b6:85:4a:21:df:f5:c7:0f:93:65:20:6c:59:da:96:ec:9d:e9:
         a7:ae:d3:4d:94:73:61:95:ce:2a:4a:53:72:3e:02:9e:96:c9:
         3f:cb:93:b4:36:42:b2:e8:d7:c4:66:6e:20:b9:c7:a2:be:3a:
         62:8c:38:42:b0:54:d4:f3:ac:d3:81:b7:d7:b2:7b:3f:b3:1b:
         88:a2:ad:61:9b:18:b8:e4:4f:68:dd:b3:d7:07:99:35:4c:31:
         ff:bd:dd:d5:87:27:bc:c6:08:06:3a:4b:e3:93:72:e8:39:f7:
         39:33:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:43:25 2026 by rpki-client