Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (raw, json)
Hash identifier:          AFhG0lAoPXck0/PtqVfcDmSZn8Qm9jBRPtH4WpCl9UI=
Subject key identifier:   10:A6:51:F8:85:D4:5E:51:B4:97:E5:20:C8:14:B6:47:D7:4F:23:57
Certificate issuer:       /CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
Certificate serial:       45C181332264A48579C868DE4F489491F1A1B3
Authority key identifier: EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
Signing time:             Wed 02 Sep 2026 21:07:01 +0000
ROA not before:           Wed 02 Sep 2026 21:02:01 +0000
ROA not after:            Wed 01 Sep 2027 21:07:01 +0000
asID:                     267596
IP address blocks:        2804:43e0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c1:81:33:22:64:a4:85:79:c8:68:de:4f:48:94:91:f1:a1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC951EF2EFF92958D0D8637B708E508C6DF31901
        Validity
            Not Before: Sep  2 21:02:01 2026 GMT
            Not After : Sep  1 21:07:01 2027 GMT
        Subject: CN=10A651F885D45E51B497E520C814B647D74F2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:f6:e8:cb:b5:1c:9a:18:32:43:85:5d:d3:
                    73:1c:36:33:6e:9b:cd:b7:26:b3:f6:75:ec:4c:eb:
                    0b:3b:ce:a9:12:6a:4d:63:dc:4a:ef:e2:a3:97:78:
                    01:fa:8d:14:3c:2c:ea:24:6e:44:ea:c1:4b:8a:b6:
                    8e:9d:9e:1e:e9:c0:50:b6:28:0d:2f:0d:9e:75:d2:
                    ac:e6:bd:4f:86:7e:75:59:19:60:7c:79:a4:e2:a7:
                    1e:58:49:65:be:d1:b2:cd:49:a8:82:f0:98:05:94:
                    1b:96:55:ed:11:b3:04:25:a7:f2:0c:e5:a4:d6:54:
                    36:b5:20:06:1e:e1:d5:c5:01:cd:51:49:b4:3b:86:
                    21:f7:b7:bd:4b:82:ae:d8:67:8d:81:1c:b9:40:4a:
                    0a:a6:85:42:10:36:18:80:54:4d:ce:77:bd:21:d1:
                    1d:95:64:7c:8b:80:ce:53:10:9d:17:f9:7b:79:34:
                    0d:55:d0:89:07:52:a9:22:79:fa:bd:34:c9:65:15:
                    e3:e3:3b:b5:87:a9:29:9e:85:d4:90:02:90:e3:cc:
                    89:1c:84:5f:9b:39:ec:60:0f:14:c1:39:46:83:5a:
                    e8:fb:23:fa:38:95:a0:49:bc:fc:92:fc:ea:50:d8:
                    8a:60:01:b1:fa:d2:1c:4d:8b:d1:24:80:44:95:f4:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A6:51:F8:85:D4:5E:51:B4:97:E5:20:C8:14:B6:47:D7:4F:23:57
            X509v3 Authority Key Identifier:
                keyid:EC:95:1E:F2:EF:F9:29:58:D0:D8:63:7B:70:8E:50:8C:6D:F3:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/EC951EF2EFF92958D0D8637B708E508C6DF31901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC951EF2EFF92958D0D8637B708E508C6DF31901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:04:e7:f8:a5:92:79:28:53:67:15:a0:01:d7:92:98:ca:
         bf:d0:60:b1:0e:56:c0:ed:b5:b7:55:b4:04:2b:df:71:11:6e:
         fb:79:48:c0:f4:14:93:9e:ea:db:c1:69:57:77:9d:23:14:17:
         1c:75:ce:b3:dc:a0:3e:49:2b:47:8b:d7:90:da:7e:4d:fe:20:
         bc:89:ae:84:e3:80:c1:7c:7e:13:41:5c:c8:9f:1e:7c:f3:35:
         7e:33:b7:21:5f:a8:e4:7f:e3:2e:a9:2a:69:de:9a:19:a9:7a:
         9a:43:42:d1:c6:81:73:a1:9d:51:a1:d3:89:18:f0:0a:5d:52:
         4c:06:d8:de:6f:50:c2:2e:57:0c:fa:66:14:7d:db:6f:58:21:
         8e:a8:6c:03:f6:0a:30:10:2a:1a:0d:f0:36:67:06:32:fa:2c:
         a9:e1:8b:ab:d1:34:17:81:57:42:8a:85:4e:9f:96:71:85:9d:
         e3:38:60:b1:fe:a0:cc:1b:e3:7e:fe:a9:2b:69:54:d0:31:63:
         ae:da:6c:4b:4b:1f:7a:e2:71:77:d5:5f:c7:d2:e8:b4:46:9d:
         59:17:4d:5d:ba:0a:13:15:3f:de:e9:03:62:df:7d:68:79:28:
         06:d0:11:be:94:70:65:c6:2d:37:01:9b:ba:93:cc:2d:34:e7:
         9a:ce:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:11 2026 by rpki-client