Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33322d3332203d3e20323636303433.roa
File:                     323830343a333961633a3a2f33322d3332203d3e20323636303433.roa (raw, json)
Hash identifier:          EYWtDiGU6kuvb1uF88n0rlNeLQAxvxiHAe5/7xLCNGI=
Subject key identifier:   50:F4:68:C9:DC:62:F6:57:DA:AD:96:A7:C6:F5:99:3D:90:6C:28:B8
Certificate issuer:       /CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
Certificate serial:       06DEF2692AABBDCEE9D4A92593F5FF761F0E62FB
Authority key identifier: 85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33322d3332203d3e20323636303433.roa
Signing time:             Fri 18 Sep 2026 13:09:56 +0000
ROA not before:           Fri 18 Sep 2026 13:04:56 +0000
ROA not after:            Fri 17 Sep 2027 13:09:56 +0000
asID:                     266043
IP address blocks:        2804:39ac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl
                          rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 18:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:de:f2:69:2a:ab:bd:ce:e9:d4:a9:25:93:f5:ff:76:1f:0e:62:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858791F3197B2403C043B8C781E30FFF6C1C8C19
        Validity
            Not Before: Sep 18 13:04:56 2026 GMT
            Not After : Sep 17 13:09:56 2027 GMT
        Subject: CN=50F468C9DC62F657DAAD96A7C6F5993D906C28B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:18:a4:41:58:e9:21:34:b4:63:9e:58:56:
                    6a:88:dd:3b:63:dc:5a:ec:90:5f:e3:9f:2d:84:51:
                    ef:60:1b:f5:67:1f:02:80:4a:ef:b7:72:7b:94:b2:
                    07:03:38:4c:3b:34:97:f0:cd:c3:84:55:e2:35:e3:
                    43:f8:fd:69:6a:74:b4:e9:f2:a0:51:fa:10:5f:b1:
                    68:95:e6:1a:67:a4:70:81:81:15:44:a2:82:08:f7:
                    d0:b9:f4:ae:c4:94:45:e3:da:4b:b8:09:7d:f2:11:
                    e2:9c:90:11:eb:84:51:ae:a9:5d:cc:b2:9b:4e:00:
                    42:b3:ad:9a:f2:b4:e4:c2:14:29:a1:22:4f:3c:b5:
                    5f:43:63:3e:b3:f3:33:36:74:0f:fd:a5:06:8e:a7:
                    e1:df:e7:db:c8:48:16:e3:ed:04:7f:0b:02:ca:ec:
                    bb:90:8d:4e:e5:fd:fa:59:75:1d:f8:f4:aa:09:a5:
                    83:9f:69:2e:26:2a:f9:47:fb:20:d6:24:bf:13:31:
                    ef:a2:17:19:e4:6d:fc:37:84:34:b9:d0:c4:69:74:
                    dd:ed:22:7c:3a:fc:7c:38:e7:d5:d4:4e:a3:5e:1b:
                    f7:9c:cd:18:d3:7f:55:75:7d:b8:30:23:cb:bf:54:
                    dd:c0:23:06:bc:c5:d0:7b:5f:80:15:9f:b3:4b:09:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:68:C9:DC:62:F6:57:DA:AD:96:A7:C6:F5:99:3D:90:6C:28:B8
            X509v3 Authority Key Identifier:
                keyid:85:87:91:F3:19:7B:24:03:C0:43:B8:C7:81:E3:0F:FF:6C:1C:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/858791F3197B2403C043B8C781E30FFF6C1C8C19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/858791F3197B2403C043B8C781E30FFF6C1C8C19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/293HmVsWXysLqgCkbDqkDxSDVoHyC2hefSyTYzmYMroC/0/323830343a333961633a3a2f33322d3332203d3e20323636303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:15:10:4c:05:48:6c:e9:d2:51:5b:1d:e3:8a:74:60:91:d0:
         d7:d3:3d:56:55:dc:7a:9f:e0:ff:79:8b:e6:51:77:a7:19:ea:
         19:22:21:bc:8d:f9:51:7b:76:43:68:1e:b8:60:16:8b:0a:1e:
         86:ff:be:c1:4f:12:46:fc:2f:11:dd:02:95:70:e2:ba:a5:19:
         c1:4a:d4:8e:05:5b:36:43:73:56:b0:85:7e:b5:97:7f:5e:41:
         e3:c0:2a:c7:3d:9a:ee:90:f5:a4:7e:04:3a:af:e9:90:88:7b:
         8c:e1:a5:a4:b9:5f:62:70:63:ff:9f:c4:3e:e3:87:d8:fe:ad:
         cc:57:9b:95:64:13:68:6e:62:e6:b8:72:50:01:91:f2:c5:a4:
         12:4e:9e:84:50:59:a2:71:4d:75:31:4c:c9:49:b7:cc:b6:15:
         99:c5:d2:64:7f:78:2e:2e:7e:c5:59:3d:2a:20:f4:3d:97:ba:
         19:80:a5:15:07:4c:c8:6c:89:35:6d:6f:72:4a:ee:36:42:12:
         7c:fe:4b:ce:61:fc:63:34:6c:9e:93:06:a0:01:d4:7f:6c:fd:
         67:bb:eb:8b:3b:0b:43:fe:58:46:24:c6:bd:4d:ae:16:dd:35:
         b5:cb:a2:30:b6:d8:f2:46:7c:e6:3a:e3:e5:0e:67:52:3b:30:
         b7:67:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:21:16 2026 by rpki-client