Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3130303a3a2f34312d3431203d3e20323731333235.roa
File:                     323830343a373963303a3130303a3a2f34312d3431203d3e20323731333235.roa (raw, json)
Hash identifier:          c+YIuMLpRl+sh7aN6qWxvPzRXdlCGHxk1M1e/8Sy6Uw=
Subject key identifier:   76:6C:2C:BE:65:D0:C9:24:E6:D5:18:19:05:F0:E6:95:60:B5:FC:58
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       31633078B6DDCCD6E95ABD29AA71FD9DD6F65595
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3130303a3a2f34312d3431203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:19 +0000
ROA not before:           Wed 02 Sep 2026 18:56:19 +0000
ROA not after:            Wed 01 Sep 2027 19:01:19 +0000
asID:                     271325
IP address blocks:        2804:79c0:100::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 10 Oct 2026 18:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:63:30:78:b6:dd:cc:d6:e9:5a:bd:29:aa:71:fd:9d:d6:f6:55:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:19 2026 GMT
            Not After : Sep  1 19:01:19 2027 GMT
        Subject: CN=766C2CBE65D0C924E6D5181905F0E69560B5FC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:86:9c:c8:ab:36:b0:af:01:93:dd:c5:48:
                    e4:34:d6:34:a8:de:a7:2f:40:e3:52:9d:4a:c0:39:
                    02:9e:29:58:b1:8e:dd:81:45:a5:93:f5:dd:e0:e1:
                    c2:2d:63:df:b2:02:a2:bb:22:bc:9c:06:30:5e:93:
                    09:0a:d5:9a:16:b0:62:f1:5c:68:1b:28:f5:e0:71:
                    11:b6:b9:83:49:a1:ef:48:57:66:a3:a6:f9:23:71:
                    a5:08:0c:aa:1c:4b:87:bf:5f:1f:af:28:e0:bb:01:
                    9b:c8:f8:b8:97:95:7f:0b:25:67:40:bc:7f:af:b2:
                    01:fb:38:b1:f4:0e:97:e3:1f:06:ce:1d:b5:ca:df:
                    8d:6b:b2:da:01:04:ac:0d:c0:ec:29:7b:6a:6a:3e:
                    39:ef:4a:33:4c:54:fc:be:6c:2e:b8:5f:7a:4b:50:
                    54:0d:15:b2:74:f6:25:b5:7a:b6:f3:87:63:de:e3:
                    91:a9:eb:7a:4e:22:cb:1c:f0:54:bb:7c:01:1f:ba:
                    be:2a:44:d6:ba:76:c1:1f:8b:55:2a:b5:1f:ee:61:
                    ac:50:5e:87:87:18:be:0a:c0:4c:da:a9:36:b5:e3:
                    e0:f9:59:3c:17:4c:77:43:73:5d:25:bb:85:e8:79:
                    03:b7:9e:bb:f4:ef:af:80:98:d5:b7:4a:69:33:2f:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6C:2C:BE:65:D0:C9:24:E6:D5:18:19:05:F0:E6:95:60:B5:FC:58
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3130303a3a2f34312d3431203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0:100::/41

    Signature Algorithm: sha256WithRSAEncryption
         27:06:63:1f:1e:95:85:ca:c2:57:6b:f1:64:de:88:4d:80:b8:
         b8:73:ba:7a:32:b6:d9:fb:61:dd:0b:20:19:4a:b0:8d:4b:60:
         53:43:4b:94:a4:a9:67:4c:09:be:40:5d:da:5f:bb:5f:cf:5d:
         09:54:b1:70:9e:3a:67:e3:64:e3:c2:1c:00:23:6e:fc:cf:fb:
         26:3c:d6:82:41:f9:f4:78:28:c2:24:a8:42:a8:56:7e:f6:c8:
         37:c2:a6:7f:81:56:52:39:79:92:08:20:ce:e9:47:59:80:17:
         31:d9:ae:5e:bc:61:35:d1:01:29:8f:1c:eb:1b:ff:2e:06:0f:
         96:5b:2d:91:ea:c8:c4:04:8d:b3:45:b0:3d:b9:16:85:7a:4e:
         d7:a9:d6:1d:a0:0e:cc:20:15:45:25:f9:d6:16:2c:7a:d6:48:
         54:7d:a7:c7:51:95:d1:2a:7d:d0:c6:23:8a:60:40:9d:75:cf:
         a8:09:71:ec:8a:20:ae:15:db:8f:15:5a:a1:d2:20:42:1a:0a:
         1c:13:d2:99:9c:ba:ed:58:4f:7f:f0:6e:22:5e:0e:3a:5f:8a:
         4d:8f:e5:84:4b:7d:cf:85:2b:5f:a9:27:61:cc:f2:41:69:0d:
         2d:a5:3c:57:95:74:cf:52:4b:15:18:04:aa:82:62:a6:04:47:
         89:8f:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:59:59 2026 by rpki-client