Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa
File:                     323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa (raw, json)
Hash identifier:          UURoZ9oKsgyWWguUaHUzYQdRwx0fqS3lpYNKblDkRdY=
Subject key identifier:   D3:C9:5F:47:F3:65:3B:B9:F6:75:E3:47:6A:45:2A:89:91:E3:F9:83
Certificate issuer:       /CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
Certificate serial:       2F54099525141FAB9A3D4DB44C3EFE5F67C645F9
Authority key identifier: 26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa
Signing time:             Fri 04 Sep 2026 00:00:17 +0000
ROA not before:           Thu 03 Sep 2026 23:55:17 +0000
ROA not after:            Fri 03 Sep 2027 00:00:17 +0000
asID:                     265144
IP address blocks:        2804:2b44:3464::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl
                          rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 03:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:54:09:95:25:14:1f:ab:9a:3d:4d:b4:4c:3e:fe:5f:67:c6:45:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
        Validity
            Not Before: Sep  3 23:55:17 2026 GMT
            Not After : Sep  3 00:00:17 2027 GMT
        Subject: CN=D3C95F47F3653BB9F675E3476A452A8991E3F983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:54:61:a6:7e:d1:13:ef:3f:ef:bb:66:ec:
                    df:16:73:4e:c1:58:ac:56:d3:e0:78:84:c0:af:e2:
                    6b:69:05:9d:fd:40:fe:05:39:a7:6e:87:80:c5:1d:
                    89:5b:09:2a:f4:7e:06:ae:f1:fd:8e:ff:90:89:95:
                    c2:19:29:42:9c:88:33:0b:51:40:fb:46:42:2b:b6:
                    5a:5f:9c:29:f2:89:22:cb:77:61:76:b5:ec:c3:5a:
                    5b:18:62:72:a0:37:db:4e:2b:f3:28:e2:40:ac:f6:
                    ca:f8:41:7b:9d:fe:d6:19:1f:e0:d6:91:fd:ed:e2:
                    c7:6b:73:df:b2:5a:c1:3b:77:ba:2a:5b:f4:3b:42:
                    9c:c8:40:24:ca:3d:39:b0:f5:97:45:b2:9d:f3:12:
                    da:73:92:20:0c:28:db:6f:86:7f:c6:8e:f2:de:3a:
                    92:ef:11:cb:3b:c4:38:0e:3b:4d:9d:25:03:13:a9:
                    e2:d1:31:74:9e:93:7d:05:ae:14:c7:bc:62:06:ca:
                    3a:ac:ed:e2:91:d4:ac:c3:c4:c3:53:0e:34:9a:7e:
                    f2:08:8a:7c:6a:e1:dc:cf:4e:43:4d:eb:21:95:3f:
                    a8:d9:2a:2b:24:06:d1:b9:2c:ae:81:3b:4c:e2:cf:
                    a5:cc:74:9e:96:d2:ca:db:9d:89:13:77:6f:c8:e2:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C9:5F:47:F3:65:3B:B9:F6:75:E3:47:6A:45:2A:89:91:E3:F9:83
            X509v3 Authority Key Identifier:
                keyid:26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a333436343a3a2f34382d3438203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b44:3464::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:16:88:f1:ab:c8:f4:66:ae:dc:76:6a:7d:49:42:7c:cc:
         ae:99:b9:aa:4d:2a:5d:7d:85:71:29:b1:5b:aa:23:c7:2a:2d:
         da:68:b5:f4:ba:01:3a:dc:f0:6a:40:6b:13:39:0e:0d:9f:e6:
         a4:10:a9:bf:59:b4:a6:8c:35:e5:06:9a:b8:a7:ff:77:59:3b:
         ca:28:40:07:03:4c:3f:47:8c:8f:fc:e1:8e:c4:91:2d:3d:9c:
         da:0b:07:e7:72:97:ae:2b:ec:22:f2:dd:91:21:13:e4:33:f9:
         bc:ee:72:e4:96:ac:db:13:9e:32:bb:88:53:65:a5:ed:71:05:
         bd:ae:39:5c:03:fa:70:58:a7:0f:ad:af:c4:2f:ba:d9:c7:28:
         0d:18:14:fe:4f:f2:01:54:b6:1a:50:c2:c2:f1:e4:72:3c:95:
         ba:9e:51:cd:63:d5:5d:5b:86:f4:5f:91:53:e6:35:09:a2:9c:
         85:f8:0b:08:5c:d6:6f:0c:e4:1b:fe:02:00:51:53:ef:62:ab:
         3e:c7:be:d6:e3:f9:2b:83:e0:05:78:09:0a:bb:25:62:15:aa:
         5e:db:6c:e7:f1:22:d3:fe:c8:b6:06:8c:19:85:e1:df:16:a6:
         a8:b9:3c:cb:1a:34:33:2a:9f:94:17:2b:a0:52:36:af:a2:5e:
         f4:9d:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:33:15 2026 by rpki-client