Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa
File:                     323830343a326234343a3a2f33322d3430203d3e20323635313434.roa (raw, json)
Hash identifier:          p2kPF1uEe9s5msUVRK3GZ8r0lSNDPVwlc/VF599vWpw=
Subject key identifier:   D3:B0:E3:C0:84:9C:47:E1:72:19:63:1E:22:D7:FC:4A:B8:E8:F6:E2
Certificate issuer:       /CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
Certificate serial:       6601A01CDC03D4029C9255156604922A03579E5C
Authority key identifier: 26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa
Signing time:             Fri 04 Sep 2026 00:00:05 +0000
ROA not before:           Thu 03 Sep 2026 23:55:05 +0000
ROA not after:            Fri 03 Sep 2027 00:00:05 +0000
asID:                     265144
IP address blocks:        2804:2b44::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl
                          rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 00:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:01:a0:1c:dc:03:d4:02:9c:92:55:15:66:04:92:2a:03:57:9e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
        Validity
            Not Before: Sep  3 23:55:05 2026 GMT
            Not After : Sep  3 00:00:05 2027 GMT
        Subject: CN=D3B0E3C0849C47E17219631E22D7FC4AB8E8F6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:f1:c1:a8:98:29:49:c5:b4:34:77:8c:0e:
                    2f:e9:83:47:80:83:d9:52:df:45:f9:2f:b5:9f:2c:
                    39:32:9c:9e:fb:a3:2c:dd:df:dc:92:66:15:ba:d6:
                    3a:9b:57:31:4e:d4:8f:0d:b1:45:1a:a8:15:8d:2d:
                    e2:a0:96:3e:19:c3:93:0e:5c:80:56:4c:73:44:58:
                    35:a9:bc:56:9a:0d:ae:3c:e1:d4:c2:51:67:12:31:
                    91:9f:d1:10:07:8f:b8:84:7b:7b:2b:92:07:d5:9d:
                    e3:67:a2:78:d1:e2:bc:12:f0:71:42:14:bd:49:b9:
                    6a:bf:0b:0f:14:4c:6b:91:a5:03:47:54:fc:5a:c8:
                    ff:00:cc:64:c8:44:3b:cf:3b:7f:f7:67:f4:06:9e:
                    f5:bc:85:b9:c8:78:e4:12:62:59:a0:da:2f:9c:f3:
                    23:08:ac:1b:c9:44:bf:7f:08:84:db:ac:17:08:e9:
                    0d:f1:66:cc:06:4b:a4:36:4d:2e:51:17:93:52:d6:
                    7e:7b:72:8c:5b:6d:58:b8:61:26:c7:2d:82:ee:cb:
                    ad:c2:4f:a3:79:8b:7c:c8:7a:ff:94:e8:04:fc:0f:
                    71:47:3e:ea:6e:42:08:2e:3c:32:5b:2a:b6:17:d2:
                    38:e2:d6:46:2e:88:f0:21:2e:bb:63:55:0f:e5:19:
                    f2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B0:E3:C0:84:9C:47:E1:72:19:63:1E:22:D7:FC:4A:B8:E8:F6:E2
            X509v3 Authority Key Identifier:
                keyid:26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/323830343a326234343a3a2f33322d3430203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:7f:0c:e4:77:fd:7a:06:d1:c4:9c:cc:8c:ee:9f:20:b4:
         df:ca:42:55:d0:6f:59:94:81:72:c4:7e:24:35:a0:95:c6:0a:
         64:40:52:83:f2:02:46:76:4f:07:f9:ce:77:18:42:a2:a0:11:
         de:17:5c:01:73:96:62:5c:29:ff:47:2a:84:7a:62:f2:b1:5a:
         b3:f8:6c:d6:a8:1e:ce:51:36:2e:b8:f2:d9:eb:39:4e:f5:93:
         6e:78:16:ad:76:24:ec:a2:51:8f:98:4f:3e:fa:9e:f0:99:a5:
         0b:16:09:c5:80:4f:18:c2:81:f8:56:c0:60:63:d7:c4:1e:8d:
         05:6e:1f:7f:ec:e7:cc:37:c1:61:a7:84:b1:b0:9e:ec:81:70:
         b9:45:60:87:4e:36:a8:7b:52:68:0b:b7:27:d0:1c:fc:15:15:
         34:7c:96:cf:b3:06:ee:29:ff:b8:46:4c:6e:69:ec:ba:b6:6d:
         63:8b:25:06:4c:fc:9c:bd:7b:2d:dd:5d:5b:66:98:b1:dd:6b:
         db:ac:4f:32:93:d0:fd:b7:46:8e:c3:df:3d:3a:72:44:ed:74:
         d5:21:a9:c6:f1:17:54:ef:28:5c:48:ac:f8:8c:0a:11:94:0d:
         c2:ba:ba:1b:22:1d:50:54:93:50:72:ff:de:b6:17:8b:c9:da:
         de:de:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:23:09 2026 by rpki-client