Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa
File:                     323830343a343062303a3a2f33322d3438203d3e20323635393735.roa (raw, json)
Hash identifier:          DF3dhvhGiPhYVxzd00MUbzNMqQiN+ZO8H1d3MYBB3CM=
Subject key identifier:   B5:BD:45:09:21:0D:DC:74:B4:F5:4C:7A:74:53:F4:81:45:C6:B6:DA
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       241040021C32132F25A61E49A614574D30F13757
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa
Signing time:             Fri 18 Sep 2026 14:37:16 +0000
ROA not before:           Fri 18 Sep 2026 14:32:16 +0000
ROA not after:            Fri 17 Sep 2027 14:37:16 +0000
asID:                     265975
IP address blocks:        2804:40b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:10:40:02:1c:32:13:2f:25:a6:1e:49:a6:14:57:4d:30:f1:37:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Sep 18 14:32:16 2026 GMT
            Not After : Sep 17 14:37:16 2027 GMT
        Subject: CN=B5BD4509210DDC74B4F54C7A7453F48145C6B6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:26:8a:fd:75:12:19:59:74:5a:42:d6:a1:
                    4c:e3:d0:ed:19:18:5a:7e:7b:a3:d9:8e:75:ba:27:
                    15:fa:fd:d9:99:fc:58:c9:e8:ea:37:3d:36:58:1a:
                    e9:de:67:1f:cb:8f:6e:35:6a:bb:f6:61:6a:3a:0d:
                    86:6e:c6:16:5d:95:49:70:8e:cc:b3:9d:d3:df:b8:
                    88:15:2a:95:1a:51:a1:13:26:a1:2d:70:0a:e6:6a:
                    23:63:28:db:86:16:29:ef:5a:b7:d7:ea:76:d8:6d:
                    77:41:95:4f:9e:c3:fb:de:c7:73:a3:0c:6e:fe:27:
                    8e:12:84:c8:d2:05:01:1e:86:ea:a8:84:35:0f:19:
                    ed:23:c0:2c:23:77:ce:d9:81:a5:9a:f2:e2:77:81:
                    dc:5e:d7:68:d9:d8:73:1a:0c:4d:88:fe:d6:dc:02:
                    5e:a1:28:9e:f8:f1:28:a3:4e:2c:de:de:5a:de:51:
                    a1:ba:f7:9c:44:52:04:e6:10:a9:fe:8c:53:5d:fd:
                    cd:49:51:2e:f3:92:b2:7a:01:77:79:ce:5c:ce:33:
                    f0:e2:a6:ab:0f:0e:d8:85:5c:c1:2d:96:80:89:2a:
                    18:bf:d5:76:07:99:78:d2:bf:ce:2a:b7:bf:2b:53:
                    fc:d8:b4:03:58:15:9d:c8:d3:46:d9:9d:ec:f7:37:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:45:09:21:0D:DC:74:B4:F5:4C:7A:74:53:F4:81:45:C6:B6:DA
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/323830343a343062303a3a2f33322d3438203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:a7:c9:e1:6d:7e:b2:a7:13:4d:fd:5a:49:d6:81:2e:de:
         bf:86:51:79:db:e3:28:c4:ee:74:91:58:e2:a4:16:cd:87:24:
         9c:bb:72:22:ef:9a:35:36:c0:bf:4f:42:c0:d8:90:33:95:8b:
         10:8b:3a:cc:1d:6b:81:39:52:5d:dc:96:d4:5b:ac:cb:50:e1:
         e7:01:1e:8a:4d:3b:68:9d:ad:d9:eb:62:d1:11:07:42:e6:1f:
         e3:7e:4e:d7:b3:75:28:ab:cd:f4:56:b5:ec:dc:af:27:df:b1:
         b6:2c:e3:03:e1:2b:b5:68:49:25:b7:e5:5a:54:3a:68:13:ff:
         bc:da:0c:c1:f6:7f:31:c2:d7:72:b8:23:5a:72:5f:b7:6b:8e:
         ce:18:75:c2:6d:13:50:25:7d:ca:42:f9:3f:8c:6e:81:19:91:
         c6:bd:2b:23:72:17:2a:32:dc:a9:17:10:77:51:3b:14:0c:a3:
         17:9d:2a:8a:92:ea:84:44:6f:7b:83:00:19:e7:bb:9b:4e:bc:
         15:d3:e9:25:5a:e7:c7:f9:97:4a:63:9f:c0:ff:f2:f0:b4:ef:
         ad:75:60:d4:71:f1:d2:df:bd:bd:79:2b:25:96:af:f9:93:e1:
         42:43:44:79:5c:3f:a2:a9:ac:dc:c1:8a:09:eb:4f:b3:23:e3:
         4b:e1:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:13:22 2026 by rpki-client