Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3930303a3a2f34382d3438203d3e20323731333235.roa
File:                     323830343a373963303a3930303a3a2f34382d3438203d3e20323731333235.roa (raw, json)
Hash identifier:          aTEHVrXfYUrr+/dLPKi+mdxErF9YM8qRDzd3C3wnxg4=
Subject key identifier:   23:BC:3A:DC:32:40:13:C6:B3:B0:8F:39:5F:63:86:06:15:B1:4B:D4
Certificate issuer:       /CN=4130030359799EC2A7E118AAED685C2C457CEF96
Certificate serial:       413E9B7A767A1FA84DAFCA8CAAE70614500FABD3
Authority key identifier: 41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3930303a3a2f34382d3438203d3e20323731333235.roa
Signing time:             Wed 02 Sep 2026 19:01:20 +0000
ROA not before:           Wed 02 Sep 2026 18:56:20 +0000
ROA not after:            Wed 01 Sep 2027 19:01:20 +0000
asID:                     271325
IP address blocks:        2804:79c0:900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl
                          rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 12:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3e:9b:7a:76:7a:1f:a8:4d:af:ca:8c:aa:e7:06:14:50:0f:ab:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130030359799EC2A7E118AAED685C2C457CEF96
        Validity
            Not Before: Sep  2 18:56:20 2026 GMT
            Not After : Sep  1 19:01:20 2027 GMT
        Subject: CN=23BC3ADC324013C6B3B08F395F63860615B14BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:2d:41:e6:2f:e1:04:c0:6d:52:6a:0c:b6:
                    a8:34:ef:03:3f:f1:ad:2e:87:96:1b:dc:42:ce:9b:
                    f2:74:72:95:04:03:9a:f0:b6:5d:19:f7:52:d5:66:
                    71:ee:56:23:8e:fc:6b:0d:9e:dd:f5:ce:4f:30:0b:
                    ee:86:cb:d9:68:0f:3a:82:a9:ce:20:ad:7c:44:c6:
                    ad:87:d4:48:d0:2f:34:bf:4e:14:f9:95:d9:e6:fc:
                    7c:4e:79:d8:ec:fe:1e:23:87:35:9f:77:50:36:2d:
                    5d:fc:04:6b:3a:57:f7:8e:7a:d0:a9:52:f5:65:42:
                    9f:ff:b4:0e:29:62:72:a3:97:09:7a:3c:34:9a:c6:
                    84:c2:2b:ef:43:6e:ee:f9:f8:b7:b5:16:32:e8:15:
                    fa:8d:97:5f:7f:8d:21:fd:94:d0:4e:c0:56:e3:31:
                    f4:15:d3:bb:3d:3d:0f:0a:14:33:76:01:d5:e0:bf:
                    66:d3:ed:e7:28:c1:ac:ef:66:01:46:56:ca:4b:08:
                    6d:0f:32:ef:8e:df:58:9c:0a:77:0c:cd:a4:61:99:
                    fd:85:71:1e:b4:90:28:be:7b:92:3d:82:5e:88:6d:
                    ef:f7:9a:e9:fe:f4:05:30:81:cd:36:89:e2:01:9c:
                    30:18:c6:10:70:ce:8a:a8:02:07:c3:4c:09:b4:84:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:3A:DC:32:40:13:C6:B3:B0:8F:39:5F:63:86:06:15:B1:4B:D4
            X509v3 Authority Key Identifier:
                keyid:41:30:03:03:59:79:9E:C2:A7:E1:18:AA:ED:68:5C:2C:45:7C:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/4130030359799EC2A7E118AAED685C2C457CEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130030359799EC2A7E118AAED685C2C457CEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FREdJF4yi4hsAuQzKaMr9dzAcATExnskfh3Zq4a1aASR/0/323830343a373963303a3930303a3a2f34382d3438203d3e20323731333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c0:900::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:0a:17:02:42:15:6e:52:0d:28:5e:37:ef:1b:3a:05:62:
         42:bf:45:98:1b:d3:91:f5:f0:7a:a6:b3:7c:d5:7d:c5:29:68:
         8e:c1:5f:ff:bb:03:53:7e:30:d7:e3:b1:a4:da:96:70:b8:ea:
         27:7a:b9:85:aa:ea:0b:fb:ec:4c:ea:f0:d4:bd:b8:a0:59:db:
         3c:07:8a:87:e7:03:72:75:d0:1c:d7:b1:ef:20:45:3c:9f:d8:
         22:d3:ca:c2:f1:7d:45:23:64:58:b1:d6:61:06:96:91:09:6f:
         80:52:d3:88:96:99:39:b3:b0:54:9b:11:38:85:1c:6c:65:d4:
         13:af:d1:72:5d:ac:a0:93:d8:3a:7a:c8:48:1f:45:10:27:6a:
         44:9c:ba:db:37:f8:99:bd:81:07:d4:de:c5:35:03:df:4c:f1:
         d3:31:ed:69:72:13:64:6e:dd:48:86:d8:3e:28:87:2b:85:7f:
         8e:60:8b:c7:ab:07:ca:3d:83:9d:92:8b:7d:7b:ff:ae:3a:36:
         c3:00:61:00:c2:1d:f1:43:5e:be:d0:40:06:df:29:d9:e2:2f:
         cd:00:ef:8d:ac:01:8d:c3:4a:d3:d3:fb:e5:76:5a:59:6f:95:
         fb:86:05:d3:10:df:20:38:1d:64:43:7e:1e:37:98:90:93:0a:
         fd:a1:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:28 2026 by rpki-client