Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33332d3333203d3e20323637333937.roa
File:                     323830343a346364633a3a2f33332d3333203d3e20323637333937.roa (raw, json)
Hash identifier:          QQsiT2zE5Sd/LeUHXaxCf6I7tKAeN5kAp/DOF8ICYN8=
Subject key identifier:   D6:D6:78:CA:B5:59:88:58:51:A5:F9:7C:4E:A7:6C:73:7B:55:D9:BC
Certificate issuer:       /CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
Certificate serial:       706264CE63DF7B70C68C1E01AD82880E1598C256
Authority key identifier: 0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33332d3333203d3e20323637333937.roa
Signing time:             Wed 23 Sep 2026 00:40:10 +0000
ROA not before:           Wed 23 Sep 2026 00:35:10 +0000
ROA not after:            Wed 22 Sep 2027 00:40:10 +0000
asID:                     267397
IP address blocks:        2804:4cdc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl
                          rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 22:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:62:64:ce:63:df:7b:70:c6:8c:1e:01:ad:82:88:0e:15:98:c2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F91D797126CC38CA101187EE0D0F96A3EE7D0AB
        Validity
            Not Before: Sep 23 00:35:10 2026 GMT
            Not After : Sep 22 00:40:10 2027 GMT
        Subject: CN=D6D678CAB559885851A5F97C4EA76C737B55D9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:b0:cf:35:f7:df:6d:6d:7f:fe:dc:44:99:
                    5a:24:79:3f:92:3b:f5:e6:26:51:4d:03:05:a9:4b:
                    08:8a:9c:0f:5f:3c:0f:97:62:1c:0b:cd:9f:64:63:
                    70:1a:95:e2:11:78:29:a8:95:ac:68:38:f6:b1:e7:
                    e7:41:5b:62:52:b4:ea:b2:f8:7a:f2:d6:01:2e:9e:
                    29:68:d1:80:2c:20:89:5e:9c:13:fa:6f:01:bb:39:
                    8f:0e:21:36:94:78:33:e4:10:bb:a7:ed:9c:6a:8f:
                    71:cb:00:c7:b0:cf:91:34:c8:33:a3:82:a3:3a:48:
                    05:4b:d2:48:56:82:0c:e1:fa:d4:53:f2:e2:44:eb:
                    fa:df:87:64:47:da:f2:b2:da:9f:93:e5:b3:b5:96:
                    83:83:9e:d2:f7:ba:49:12:f7:f1:37:9d:2f:87:ad:
                    f5:95:69:fa:f9:cc:4a:eb:28:77:94:a8:44:fb:f8:
                    f4:74:09:fa:05:dc:8c:bf:98:9c:61:8b:b6:3f:7e:
                    25:37:f1:42:c9:a2:83:3c:d6:9f:3f:c2:be:35:7f:
                    71:dd:64:97:65:89:77:d0:ab:15:c2:11:a2:d1:2f:
                    47:8a:8e:cc:e6:85:59:37:5c:e0:3b:e5:18:22:6b:
                    97:72:46:15:b0:c0:be:7a:25:8c:80:e9:d1:df:37:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D6:78:CA:B5:59:88:58:51:A5:F9:7C:4E:A7:6C:73:7B:55:D9:BC
            X509v3 Authority Key Identifier:
                keyid:0F:91:D7:97:12:6C:C3:8C:A1:01:18:7E:E0:D0:F9:6A:3E:E7:D0:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F91D797126CC38CA101187EE0D0F96A3EE7D0AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHWT29GHderZcjLH2BgXDDbqcBLtM2j8D1CcE3AbkKoP/0/323830343a346364633a3a2f33332d3333203d3e20323637333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cdc::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:94:36:88:6d:bf:b7:74:0a:09:a3:3a:24:15:5d:4d:df:4f:
         7f:66:37:b8:3e:81:5c:bf:6b:82:f7:d1:7f:82:f0:20:41:23:
         2a:f4:28:ef:2e:44:53:80:44:80:aa:3f:b0:d6:0f:5d:ec:52:
         a9:e4:68:3b:50:91:8f:4f:74:6c:d9:e0:23:fa:88:f9:a1:c9:
         ae:36:92:be:17:b1:46:1f:65:e7:5c:0c:77:7f:d4:c2:c7:3f:
         e3:85:19:0b:a0:16:58:65:e7:12:29:07:10:54:01:87:39:ac:
         4e:09:33:bd:96:39:d2:a2:8d:2d:f1:8a:bf:e6:27:6f:e4:7c:
         9f:c2:df:bc:90:5f:51:14:d3:c7:fb:e6:b1:7c:64:05:19:06:
         47:6f:65:d5:4a:fd:36:05:3f:5f:45:e0:00:e1:dc:08:51:11:
         6e:e6:bf:44:c3:6d:5c:a2:a7:44:05:37:d8:c8:85:97:44:d2:
         36:55:2e:7f:82:09:5f:c4:e1:ac:c1:6f:93:2c:8d:0d:15:c6:
         72:fb:eb:6e:88:ad:09:07:c3:f5:d7:56:39:32:e2:e4:c7:a4:
         44:b7:9b:e9:fb:e7:f3:3d:16:78:10:22:ea:04:96:ac:27:37:
         9b:a3:d4:1b:aa:86:38:c3:35:a8:21:08:40:29:16:15:e7:c3:
         e5:db:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:43:24 2026 by rpki-client