Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a3a2f33342d3334203d3e20323734353739.roa
File:                     323830343a393633633a3a2f33342d3334203d3e20323734353739.roa (raw, json)
Hash identifier:          KqtQySMrQgGA1+FyQy/etwSgLS/PNTT6ERI/XpheVUg=
Subject key identifier:   B2:BA:3B:39:AF:80:EC:B8:C8:8E:DF:29:5D:F4:30:36:4D:66:D0:75
Certificate issuer:       /CN=3E83B811AC365CEFDF275D6169DB2B9C630922A2
Certificate serial:       3AC087ADA0C3CC400E5067B1B0F31F22D5F71E18
Authority key identifier: 3E:83:B8:11:AC:36:5C:EF:DF:27:5D:61:69:DB:2B:9C:63:09:22:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E83B811AC365CEFDF275D6169DB2B9C630922A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a3a2f33342d3334203d3e20323734353739.roa
Signing time:             Thu 03 Sep 2026 13:16:56 +0000
ROA not before:           Thu 03 Sep 2026 13:11:56 +0000
ROA not after:            Thu 02 Sep 2027 13:16:56 +0000
asID:                     274579
IP address blocks:        2804:963c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/3E83B811AC365CEFDF275D6169DB2B9C630922A2.crl
                          rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/3E83B811AC365CEFDF275D6169DB2B9C630922A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E83B811AC365CEFDF275D6169DB2B9C630922A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 15:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c0:87:ad:a0:c3:cc:40:0e:50:67:b1:b0:f3:1f:22:d5:f7:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E83B811AC365CEFDF275D6169DB2B9C630922A2
        Validity
            Not Before: Sep  3 13:11:56 2026 GMT
            Not After : Sep  2 13:16:56 2027 GMT
        Subject: CN=B2BA3B39AF80ECB8C88EDF295DF430364D66D075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:b4:be:c8:87:e8:93:df:04:32:8a:77:2a:
                    bc:26:61:aa:54:0a:47:45:1d:0c:c4:7d:04:74:a9:
                    fe:37:34:0e:b6:57:6b:84:53:46:2a:f7:5a:17:69:
                    70:11:8c:22:22:e0:a2:1e:d2:03:74:7b:51:ae:98:
                    fc:8b:76:b5:d6:44:f7:3d:ad:23:1d:18:cb:7e:08:
                    1c:91:45:83:bb:c2:2b:b7:30:62:a8:e1:fe:5e:9e:
                    60:3d:13:14:e1:9e:75:3f:07:df:1b:22:5d:18:8a:
                    38:d8:e4:a3:a2:6e:f6:f7:ca:59:4e:d7:e6:16:3c:
                    ca:17:55:21:a7:b0:4d:b1:cc:ef:53:3f:8b:5c:53:
                    7d:c9:be:2d:33:f4:c9:cd:8c:1b:c5:7d:6f:f0:1d:
                    43:8f:c2:2a:63:3f:20:3d:d8:f3:d8:7d:9b:28:44:
                    64:b7:81:87:45:72:11:aa:c5:c7:ea:30:4c:4f:96:
                    3a:0e:7e:1b:c8:5a:fd:f0:d7:42:4d:ec:bf:f6:70:
                    f8:24:bf:08:ba:b7:15:1c:cb:7f:a2:0c:c7:1a:31:
                    db:b9:84:5c:b6:b9:e9:9a:9f:67:e4:4b:bc:bf:79:
                    b5:15:d9:c6:95:a1:2f:19:3f:04:41:bd:9b:ac:69:
                    1b:fb:d2:84:ac:ec:dd:d6:86:83:0a:af:57:02:dc:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BA:3B:39:AF:80:EC:B8:C8:8E:DF:29:5D:F4:30:36:4D:66:D0:75
            X509v3 Authority Key Identifier:
                keyid:3E:83:B8:11:AC:36:5C:EF:DF:27:5D:61:69:DB:2B:9C:63:09:22:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/3E83B811AC365CEFDF275D6169DB2B9C630922A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E83B811AC365CEFDF275D6169DB2B9C630922A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXjugDzajJqJZRzjsbLquz1kZwLgXKr9eEB3oNfLzMHm/0/323830343a393633633a3a2f33342d3334203d3e20323734353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:963c::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:66:fc:57:6f:09:70:15:55:62:07:04:79:eb:be:aa:30:
         93:ae:6f:6b:2d:a8:e4:a0:41:67:5a:e7:82:53:b6:32:28:09:
         83:4c:0a:f8:23:09:51:a2:6a:83:9c:6d:cb:e6:d2:43:83:9a:
         f2:ce:df:7d:48:88:6b:a6:78:ab:e6:e2:5f:69:95:73:ef:f0:
         53:f4:dd:15:27:90:ff:b4:13:f7:42:20:ad:ec:a2:83:d8:4f:
         77:3c:79:55:f3:69:06:ee:6b:7b:72:a5:7a:af:f8:76:98:e4:
         14:a3:6d:0d:3d:5f:c1:1e:f0:d2:86:d2:ff:73:f9:a0:c8:ad:
         6f:97:48:dd:79:79:1c:a0:ea:bf:e5:44:c7:7a:b0:31:c8:42:
         52:d5:00:d4:7e:f1:92:e0:c6:bd:71:3f:d6:d6:ae:b6:fa:2e:
         fc:88:70:0c:aa:87:f9:0a:ce:d4:16:98:2c:bf:d8:87:12:60:
         ac:72:bc:d1:88:75:1a:1e:c8:31:79:26:c5:64:c4:22:d0:fb:
         aa:e7:2f:18:21:fc:be:14:7c:f9:77:c4:fc:43:29:6e:b1:b4:
         82:81:91:26:fa:91:f6:15:3e:e5:48:a0:7e:0c:ec:2e:8f:9a:
         06:a1:ef:6f:74:b9:fd:d0:f1:c8:ac:f3:7f:27:5c:5d:76:2c:
         c5:61:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:30:44 2026 by rpki-client