Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3336203d3e20323633303639.roa
File:                     323830343a326364633a3a2f33322d3336203d3e20323633303639.roa (raw, json)
Hash identifier:          OlIjgDq0AtQG0SKdw6ib4ImnxfaFe4q5yA+2CCSgeKs=
Subject key identifier:   B0:8D:46:EF:FE:7B:8B:5A:52:BD:39:BE:AF:3C:6C:6C:49:2A:D6:C5
Certificate issuer:       /CN=C79EC697793B894A372521DA46218BB72499CB44
Certificate serial:       012B043BDEDB350DD7A29574F2270D344AEE0BF5
Authority key identifier: C7:9E:C6:97:79:3B:89:4A:37:25:21:DA:46:21:8B:B7:24:99:CB:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79EC697793B894A372521DA46218BB72499CB44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3336203d3e20323633303639.roa
Signing time:             Mon 14 Sep 2026 21:06:22 +0000
ROA not before:           Mon 14 Sep 2026 21:01:22 +0000
ROA not after:            Mon 13 Sep 2027 21:06:22 +0000
asID:                     263069
IP address blocks:        2804:2cdc::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/C79EC697793B894A372521DA46218BB72499CB44.crl
                          rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/C79EC697793B894A372521DA46218BB72499CB44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79EC697793B894A372521DA46218BB72499CB44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 01:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2b:04:3b:de:db:35:0d:d7:a2:95:74:f2:27:0d:34:4a:ee:0b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79EC697793B894A372521DA46218BB72499CB44
        Validity
            Not Before: Sep 14 21:01:22 2026 GMT
            Not After : Sep 13 21:06:22 2027 GMT
        Subject: CN=B08D46EFFE7B8B5A52BD39BEAF3C6C6C492AD6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:a9:22:95:cc:93:23:61:4c:40:0b:77:0d:
                    09:84:e6:e6:3c:a2:bb:ea:31:ef:c2:f4:51:33:6b:
                    3e:6b:10:ac:07:bd:dd:0f:f3:e4:39:2c:06:1c:35:
                    1d:d1:78:0d:57:0c:f7:05:1c:f5:82:e1:a5:b3:70:
                    b7:4f:98:09:ab:14:ea:63:4d:a0:2d:fc:18:f2:4a:
                    0b:7d:af:ae:b4:28:e1:2a:74:14:7d:f1:2e:1c:17:
                    01:fb:23:ce:4c:7d:d8:13:b0:c2:3c:02:de:a2:2b:
                    f3:fb:c0:07:2c:01:ac:97:e7:80:89:b5:41:4a:36:
                    86:87:77:ad:20:11:62:65:0a:54:4a:00:e8:c8:fc:
                    66:97:5f:94:3d:a1:50:8e:e1:c4:c7:2e:65:30:6d:
                    18:b5:c7:8c:8e:d7:ce:88:44:c8:e6:eb:e4:7c:a3:
                    53:45:87:ac:7c:66:37:0d:5c:a1:f2:63:77:ad:86:
                    1e:22:41:11:e0:bf:65:d5:b1:23:ea:47:0c:c1:68:
                    7f:ec:7c:68:13:7a:5d:d9:63:48:5c:39:2c:ba:e2:
                    56:0a:0c:65:e8:13:f4:2d:ec:55:65:9c:e6:f6:13:
                    4b:5a:2d:a0:9f:9a:dd:b0:a1:8c:f9:8a:5d:9e:49:
                    40:2e:cc:f7:4f:22:b6:db:80:07:00:78:58:fc:b1:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:46:EF:FE:7B:8B:5A:52:BD:39:BE:AF:3C:6C:6C:49:2A:D6:C5
            X509v3 Authority Key Identifier:
                keyid:C7:9E:C6:97:79:3B:89:4A:37:25:21:DA:46:21:8B:B7:24:99:CB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/C79EC697793B894A372521DA46218BB72499CB44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C79EC697793B894A372521DA46218BB72499CB44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/323830343a326364633a3a2f33322d3336203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:e0:04:34:40:1c:6a:42:5a:c8:44:e9:65:31:43:0e:f2:
         ba:dd:5f:a7:16:a4:c0:c0:c0:65:63:50:f0:6d:2f:df:57:73:
         74:35:66:c3:5c:04:3a:45:40:d9:27:90:27:6d:c8:b0:39:83:
         16:b6:0c:56:55:79:42:e7:93:3c:ae:f4:22:c4:01:d7:6e:b0:
         cb:ff:b5:43:b6:ec:df:3c:a1:e6:42:37:37:19:8b:c8:6d:55:
         43:90:8c:1a:ec:8c:2f:d2:09:a8:8c:0d:97:bc:75:61:e9:a8:
         a4:ca:7b:2b:e2:df:9f:52:90:72:83:b0:97:4a:d4:ea:c5:6a:
         19:ad:33:fc:21:12:f9:dd:e1:79:10:79:9f:67:a3:5b:81:02:
         19:d5:85:96:10:b7:64:ae:32:9e:4d:96:60:28:23:d4:37:8b:
         09:53:52:c6:5b:8b:94:c0:65:ca:21:9e:3e:5c:76:6c:fb:b7:
         48:0e:87:e7:2d:d9:e7:50:c2:e3:b9:57:f4:c6:5a:ca:8f:af:
         65:12:1a:19:2c:8b:17:49:59:58:ba:92:7f:cf:cc:7b:47:cb:
         73:5a:8f:16:b9:b7:1b:17:67:45:a5:7e:23:ed:07:a0:c1:ab:
         25:1a:45:06:fd:7b:c9:d5:a1:f1:ce:19:b8:46:9e:7e:b2:25:
         b5:0b:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:46:42 2026 by rpki-client