Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/323830343a333634303a3a2f33342d3334203d3e20323636333337.roa
File:                     323830343a333634303a3a2f33342d3334203d3e20323636333337.roa (raw, json)
Hash identifier:          Oz5dOts+dlizDQjmxZGu/rJepRa5S1bZ6xN/mNnQN74=
Subject key identifier:   C4:D5:EB:3E:B1:1C:4F:B5:CE:A3:78:93:74:AB:63:F3:20:60:1E:8F
Certificate issuer:       /CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
Certificate serial:       2687131A9CC3E70B8214039E14D6DC3D7E563C1B
Authority key identifier: 01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/323830343a333634303a3a2f33342d3334203d3e20323636333337.roa
Signing time:             Thu 17 Sep 2026 12:38:26 +0000
ROA not before:           Thu 17 Sep 2026 12:33:26 +0000
ROA not after:            Thu 16 Sep 2027 12:38:26 +0000
asID:                     266337
IP address blocks:        2804:3640::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl
                          rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:87:13:1a:9c:c3:e7:0b:82:14:03:9e:14:d6:dc:3d:7e:56:3c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D61ADF9C9ED01B79933B265AAA177EA1208E45
        Validity
            Not Before: Sep 17 12:33:26 2026 GMT
            Not After : Sep 16 12:38:26 2027 GMT
        Subject: CN=C4D5EB3EB11C4FB5CEA3789374AB63F320601E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:8f:29:b8:74:cb:ed:9a:6d:3b:87:e6:ff:
                    91:78:04:71:3c:d7:2c:d0:66:96:f8:d9:90:5a:31:
                    0a:83:cb:d6:5c:13:cf:27:11:b9:c5:77:74:19:c2:
                    73:0f:0b:05:45:ca:36:20:b0:bf:fc:62:eb:0d:af:
                    03:53:bb:82:58:01:1d:3e:f3:af:eb:e6:7b:13:d4:
                    c6:cb:e8:3b:6e:2f:36:e6:4a:fd:c5:cc:e5:fe:1b:
                    05:57:2d:a2:53:78:b2:dc:e0:78:c7:76:65:e4:70:
                    16:e9:06:4c:a2:a8:29:91:5f:bd:40:3c:70:c1:0c:
                    94:b2:bf:22:00:89:a1:f3:de:b4:61:ec:12:98:14:
                    8a:5a:b3:9c:0a:77:2c:ac:a3:c7:31:94:51:34:f9:
                    4e:15:ad:db:d6:46:4b:b9:22:92:49:7e:1e:20:2e:
                    55:5f:f0:e0:d5:3c:93:6a:12:d8:48:b1:2c:55:5d:
                    ac:7b:0c:94:10:60:61:05:9b:4c:17:a8:55:26:6b:
                    fd:06:8b:f6:9b:24:cb:5f:18:e3:b1:f6:be:52:07:
                    c2:c0:9e:bb:6c:d7:b0:bb:7a:ab:5d:62:b7:bc:c8:
                    55:14:d8:be:92:02:b7:ef:14:83:f5:65:44:4e:01:
                    79:8f:13:f5:e2:4a:71:96:76:4d:a7:64:c9:18:8a:
                    6c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D5:EB:3E:B1:1C:4F:B5:CE:A3:78:93:74:AB:63:F3:20:60:1E:8F
            X509v3 Authority Key Identifier:
                keyid:01:D6:1A:DF:9C:9E:D0:1B:79:93:3B:26:5A:AA:17:7E:A1:20:8E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/01D61ADF9C9ED01B79933B265AAA177EA1208E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D61ADF9C9ED01B79933B265AAA177EA1208E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQUTy2vJ89YmwPeNCgaxf9neFqN2TQ1Rxm4f99i9H1Xg/0/323830343a333634303a3a2f33342d3334203d3e20323636333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3640::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:a6:13:ab:f3:02:74:21:34:21:bf:80:0f:31:15:31:1a:78:
         84:11:c6:e9:8f:38:3e:c9:67:3e:8f:93:b3:e5:8a:c8:d6:c8:
         e3:a2:52:9f:96:af:48:83:d8:99:4d:8d:35:5e:c1:50:b0:10:
         60:e4:38:00:9f:d2:d3:f5:27:b7:4c:53:e9:69:2b:b1:4a:99:
         e6:dc:0b:1f:65:cb:9e:b5:8d:aa:98:52:9d:8f:03:fe:5e:9e:
         a7:56:c8:0c:1f:d0:00:c7:6c:25:4c:ea:f8:a2:5d:6c:67:dc:
         ff:31:ab:4f:77:eb:57:45:df:05:d2:dd:05:92:35:00:9b:56:
         5a:1f:62:9b:b4:35:a1:7a:b9:4c:75:ae:79:c8:42:59:95:e5:
         f3:b3:8b:1e:9a:86:e2:c8:1d:0a:28:f0:01:bc:dc:95:05:10:
         58:2b:1e:95:f8:cb:34:09:2b:f1:3c:36:ed:5e:92:58:d5:c1:
         c2:c0:c2:79:df:ba:c2:0a:23:f4:ce:53:6c:25:f4:e8:b3:07:
         2f:15:a4:2a:2a:7b:a9:c0:0b:51:6e:a7:fe:55:ef:41:b0:bb:
         37:50:53:23:de:a8:5b:57:a5:05:c5:56:5f:f6:1b:28:b7:50:
         01:b9:1b:f6:e9:db:55:bc:bf:e3:d5:74:3d:f0:09:4a:61:68:
         57:86:b1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:46:11 2026 by rpki-client