Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa
File:                     323830343a3466343a3a2f33322d3332203d3e20323632373637.roa (raw, json)
Hash identifier:          Kb1HWb/Ep1qn4CdcMTUjTs3h7QZ/d12m9wj7KBA3V9g=
Subject key identifier:   F3:F2:45:4D:F5:42:5A:5C:9F:88:CB:BB:5D:97:81:89:00:57:E0:A7
Certificate issuer:       /CN=2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8
Certificate serial:       160236C69973B2DD15548DBC261E4FE49F0D17F5
Authority key identifier: 21:39:E8:37:A0:FC:2E:A8:F0:8E:69:E3:BC:0D:6C:86:8D:46:A1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa
Signing time:             Mon 14 Sep 2026 15:42:30 +0000
ROA not before:           Mon 14 Sep 2026 15:37:30 +0000
ROA not after:            Mon 13 Sep 2027 15:42:30 +0000
asID:                     262767
IP address blocks:        2804:4f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.crl
                          rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:02:36:c6:99:73:b2:dd:15:54:8d:bc:26:1e:4f:e4:9f:0d:17:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8
        Validity
            Not Before: Sep 14 15:37:30 2026 GMT
            Not After : Sep 13 15:42:30 2027 GMT
        Subject: CN=F3F2454DF5425A5C9F88CBBB5D9781890057E0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:cd:e8:f6:64:87:94:93:7b:7c:95:9c:0a:
                    fd:c2:56:f2:e7:4d:6c:cf:52:d8:c7:f9:5b:21:da:
                    f4:80:e4:9c:52:f2:6d:37:6a:63:5b:a7:2b:41:2f:
                    0b:0e:3a:b8:fb:20:88:8b:2d:54:26:d3:6b:ff:81:
                    d4:61:e2:41:df:d9:d8:9e:b7:b3:95:ea:14:03:af:
                    58:c0:05:5a:a4:7a:96:b3:ec:de:96:84:40:25:29:
                    13:e3:9c:4b:28:7f:c2:8e:a7:2e:35:e8:d2:bc:f1:
                    df:e2:83:68:17:34:45:8b:a2:4b:e3:e0:00:9b:17:
                    33:d3:8d:e4:23:5b:8e:e0:50:f8:67:bc:18:42:91:
                    eb:42:e7:ba:fc:08:8f:77:83:a9:a9:ad:18:95:6e:
                    5b:b5:be:95:b3:46:3f:5f:f0:4e:85:dd:d7:9d:79:
                    8c:7d:c1:e2:5f:dc:4a:f8:28:3e:c9:8f:ed:5e:f2:
                    56:d9:7f:16:3e:80:75:ba:17:69:2d:b7:f3:f6:5e:
                    fa:3b:f2:99:4f:7b:15:4d:f6:80:ba:56:f6:f1:0a:
                    0f:c8:5b:0f:13:d0:0a:c4:9e:4b:15:7b:3c:19:84:
                    a2:69:76:e2:8e:8a:4d:b2:63:eb:36:93:cd:69:3b:
                    46:da:ef:a7:d6:dd:85:93:21:7a:36:93:3a:88:6c:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:45:4D:F5:42:5A:5C:9F:88:CB:BB:5D:97:81:89:00:57:E0:A7
            X509v3 Authority Key Identifier:
                keyid:21:39:E8:37:A0:FC:2E:A8:F0:8E:69:E3:BC:0D:6C:86:8D:46:A1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2139E837A0FC2EA8F08E69E3BC0D6C868D46A1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHAUUKyG38Noyn4U3nN9JqxcAaMqa7bDYNPVmwbS6bkn/0/323830343a3466343a3a2f33322d3332203d3e20323632373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:80:b2:ef:48:c9:05:2e:4e:4e:dc:ac:ca:3d:a8:c4:f9:
         bb:84:23:49:b4:44:47:5f:91:72:18:93:3a:7d:8b:dd:7d:b4:
         43:69:9e:4b:3b:5d:5d:2b:69:30:db:99:7b:af:2c:44:35:be:
         1b:38:56:17:45:19:7d:16:a1:a8:24:a1:26:fe:d8:9a:07:a2:
         f6:00:fd:78:36:7f:ab:10:4e:87:8a:57:f8:00:41:50:e8:02:
         0e:11:4c:c5:1a:26:25:f3:84:bc:bd:6b:05:68:ce:b9:3b:df:
         77:a6:92:97:24:e5:ad:d1:b5:0e:19:14:7d:12:9a:72:4c:94:
         ea:fc:19:b3:ff:c6:4b:7f:75:37:a8:a7:71:a2:12:b3:02:27:
         b7:cf:56:a1:16:7f:23:29:1e:e9:66:d1:98:8a:e9:97:aa:95:
         a7:fc:ae:88:6d:71:f4:11:4e:f9:64:9b:3f:0c:bb:df:17:25:
         db:02:1b:2d:ba:64:16:cf:f6:43:39:b6:fe:94:11:f8:ed:c0:
         8c:35:82:e3:29:74:c0:b5:80:6b:64:7d:8f:fb:82:69:e0:0d:
         f3:f6:05:6c:37:ae:75:e2:45:e0:35:fa:0f:6d:36:ea:0b:a2:
         af:48:65:8a:9d:fd:f0:cf:a2:3c:93:e4:22:f2:b9:c2:22:68:
         f4:b2:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:46:26 2026 by rpki-client