Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa
File:                     323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa (raw, json)
Hash identifier:          czgUg9cFGe9i3FOX+iTHR+pPF2iGH4Qiq/IYgsaUNJU=
Subject key identifier:   9E:DC:14:CB:C8:10:23:13:0C:F9:F4:22:07:EE:6A:1A:B6:C0:C4:D4
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       68991167700BD5F5DFE84DCBE8BB7813A26733EF
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:33 +0000
ROA not before:           Thu 17 Sep 2026 18:32:33 +0000
ROA not after:            Thu 16 Sep 2027 18:37:33 +0000
asID:                     269665
IP address blocks:        2804:6804:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 05:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:11:67:70:0b:d5:f5:df:e8:4d:cb:e8:bb:78:13:a2:67:33:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:33 2026 GMT
            Not After : Sep 16 18:37:33 2027 GMT
        Subject: CN=9EDC14CBC81023130CF9F42207EE6A1AB6C0C4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:de:cc:7b:1c:cc:b0:34:71:10:b5:45:70:
                    74:d4:32:4e:73:76:ee:30:3e:f1:70:e4:7c:32:62:
                    57:5c:08:7a:a0:1c:2e:a9:bc:68:d5:7c:ef:cf:1d:
                    6b:03:80:74:f1:29:2c:31:fe:2e:fc:67:b2:f3:65:
                    a8:62:a1:aa:a0:2a:fb:0c:b2:61:00:f1:36:69:24:
                    ab:ba:f7:ee:f5:3e:9e:a1:9c:ba:52:ff:29:30:9b:
                    02:4f:75:b2:62:07:eb:b5:47:c1:18:58:36:67:61:
                    62:21:6f:aa:5a:49:41:01:7d:39:9a:8f:ae:82:9e:
                    8c:22:a5:05:e9:2b:61:a3:e0:5d:9f:de:a2:05:05:
                    a1:eb:d9:a3:5d:1e:e8:d5:1f:e9:16:d6:84:53:8a:
                    a6:45:76:b1:a2:ae:2d:1f:05:07:fb:84:32:61:d4:
                    76:74:c9:0b:37:aa:30:e6:74:ba:7b:b8:1f:18:bc:
                    80:a3:15:64:c3:0c:d8:f2:88:28:58:e4:b1:97:93:
                    36:e0:f7:60:5e:e7:20:c4:0f:57:ff:4e:ff:d7:24:
                    cf:82:0b:a7:52:11:28:ca:77:13:4f:a3:6f:f7:5c:
                    13:b5:56:d2:ec:2d:2b:ef:76:63:2e:c6:81:29:69:
                    30:0c:d0:f0:26:b7:de:62:ee:bc:cf:46:f6:3c:fe:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:14:CB:C8:10:23:13:0C:F9:F4:22:07:EE:6A:1A:B6:C0:C4:D4
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a343030303a3a2f33342d3334203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:77:be:1e:1e:4a:15:9e:24:33:d8:5e:67:a8:c9:7f:19:
         43:97:61:7c:83:7f:37:df:ce:32:1a:9e:fa:9b:10:36:dd:b2:
         38:6f:5c:47:01:64:04:a4:e9:13:8e:ac:3f:8d:b5:32:c6:ef:
         b2:90:68:f6:d2:23:d4:89:70:ba:60:0e:11:11:d5:55:e8:98:
         61:9f:aa:05:ac:d5:d7:a4:07:32:78:bb:7b:5d:d3:b3:d5:4b:
         36:9a:37:43:3d:c1:b5:b5:db:a0:b5:e5:6b:20:8c:ca:61:90:
         d8:b0:6d:96:63:f4:a8:ac:03:f2:4a:8e:bd:92:76:84:28:ee:
         a1:3b:bc:b8:d7:14:e8:87:74:4e:da:67:c8:8b:98:30:3e:9a:
         02:df:76:65:b3:7f:8b:ec:a2:7e:96:6b:3a:3b:fd:12:40:51:
         2b:f8:fa:79:2f:e0:ef:1c:98:dd:55:a6:49:6e:f5:80:c9:3b:
         ed:01:91:ed:d9:14:71:e9:6f:32:c2:77:90:5c:a0:2b:e2:17:
         f1:00:be:28:91:7c:79:f4:70:97:a4:f6:5f:7c:6f:60:ce:ec:
         00:4c:df:8f:a4:2a:e5:84:bb:fd:d0:e7:37:f6:50:75:f0:36:
         a9:f1:fd:fe:0f:f0:3c:7e:e3:ad:9e:3e:5b:2f:3d:e9:e0:9c:
         d9:b4:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:38:43 2026 by rpki-client