Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a3264383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          wxl2gD7G9jboYJas+CVIFHM3iV6MCA9kJcHTpLPbO/k=
Subject key identifier:   B7:49:F1:C1:21:73:EE:26:AC:E2:2B:9F:3A:59:E7:9E:68:14:A4:3B
Certificate issuer:       /CN=132F53BC348CF68D09D3533C15EF68FEA9C52BE2
Certificate serial:       5D7EA6D346EA5526E1A59565BCA58896024E29C7
Authority key identifier: 13:2F:53:BC:34:8C:F6:8D:09:D3:53:3C:15:EF:68:FE:A9:C5:2B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Thu 15 Oct 2026 17:41:38 +0000
ROA not before:           Thu 15 Oct 2026 17:36:38 +0000
ROA not after:            Thu 14 Oct 2027 17:41:38 +0000
asID:                     52532
IP address blocks:        2804:2d8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7e:a6:d3:46:ea:55:26:e1:a5:95:65:bc:a5:88:96:02:4e:29:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132F53BC348CF68D09D3533C15EF68FEA9C52BE2
        Validity
            Not Before: Oct 15 17:36:38 2026 GMT
            Not After : Oct 14 17:41:38 2027 GMT
        Subject: CN=B749F1C12173EE26ACE22B9F3A59E79E6814A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:8a:5a:12:c4:2e:06:20:87:8b:26:b2:0b:
                    29:b7:1f:d2:36:89:f6:a0:94:c8:1b:c9:83:b2:0a:
                    13:b2:3e:60:a9:0f:e0:bd:46:ee:fd:0e:7a:7b:ff:
                    9a:ae:36:0b:03:d6:c5:01:b0:5e:96:b9:7e:44:9b:
                    5e:2f:33:b8:08:71:32:9f:fe:4b:03:08:94:9c:e1:
                    d2:c1:47:36:c0:77:f4:8b:37:5a:35:0c:90:64:ca:
                    33:bb:18:fb:8b:f7:76:3c:f7:18:aa:d9:d3:44:32:
                    dc:ac:3b:33:80:85:e9:a6:c6:30:4a:02:f8:88:74:
                    8d:e5:54:b3:75:4d:db:22:5c:e1:c4:0e:09:66:3a:
                    4d:41:e9:a0:d5:82:4c:74:fa:c6:60:57:53:14:41:
                    53:71:1f:3c:ed:57:46:6c:4c:60:b2:a4:d4:e1:ed:
                    0f:aa:7f:ee:91:f3:2e:b9:36:e8:95:01:06:eb:70:
                    42:82:44:56:93:42:68:e5:6a:f4:b3:36:2a:34:8f:
                    e5:31:8c:2d:8b:70:65:ad:29:79:48:f4:f2:52:d0:
                    cd:54:ce:ca:d8:79:d8:28:3d:07:81:4b:77:da:fb:
                    07:e8:b4:84:ac:97:ee:a2:fe:3f:d6:8f:58:47:12:
                    f4:6b:b4:56:f2:0e:b3:f1:f4:07:ef:16:5f:74:a3:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:F1:C1:21:73:EE:26:AC:E2:2B:9F:3A:59:E7:9E:68:14:A4:3B
            X509v3 Authority Key Identifier:
                keyid:13:2F:53:BC:34:8C:F6:8D:09:D3:53:3C:15:EF:68:FE:A9:C5:2B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132F53BC348CF68D09D3533C15EF68FEA9C52BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:35:1d:ba:c2:52:94:6b:dc:99:e8:74:5b:8c:60:a3:de:5d:
         8c:f3:0b:60:14:28:28:1c:13:2a:77:9a:07:ef:c1:1c:83:24:
         06:9f:f2:8d:5c:05:77:17:43:6f:a2:eb:8d:d0:4a:b6:62:ef:
         3b:3f:dc:ff:24:24:53:58:86:8c:99:82:7b:5d:72:b4:3b:f4:
         22:f1:16:df:1c:54:f3:e5:fa:ce:78:44:00:ae:3b:c8:ab:7f:
         c0:94:0e:64:50:3e:ac:0d:38:61:55:2d:e9:4a:79:fd:23:ad:
         a0:97:12:3f:63:78:ab:7a:a4:e6:a7:09:e7:ea:4f:45:8a:b5:
         75:c2:c0:1e:8e:b8:77:ce:a9:8a:c6:a0:33:a3:28:9e:93:54:
         05:a9:be:9a:5a:38:18:04:d5:b3:02:1c:09:9d:80:27:d6:fe:
         67:ca:b2:07:71:f2:f4:f0:17:fc:1f:dc:9f:0d:3a:68:53:0d:
         c5:6d:e7:19:21:d9:df:83:e4:d6:c6:20:ce:89:ae:2f:8a:3d:
         cf:1b:1e:f8:db:36:23:bc:ae:55:74:c1:b7:9c:80:a9:22:c6:
         f2:7e:fe:39:c4:19:ca:54:cc:1a:ee:03:75:8a:1d:a1:03:9c:
         19:94:5c:3d:06:a0:9a:d3:8d:f8:46:9c:00:d4:b9:90:20:6f:
         bc:c0:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:15:27 2026 by rpki-client