Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
File:                     323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json)
Hash identifier:          PXpCdUSmcp1ypdToG6Wd/II+eK11O7Qf/WrFR+VVkfw=
Subject key identifier:   CF:E6:A8:3A:AC:8F:D7:10:9E:AA:33:DF:13:ED:74:5A:ED:FA:53:68
Certificate issuer:       /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
Certificate serial:       24392985F90830E11AA00FE087E7F22ACD15D030
Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
Signing time:             Mon 26 Oct 2026 21:25:27 +0000
ROA not before:           Mon 26 Oct 2026 21:20:27 +0000
ROA not after:            Mon 25 Oct 2027 21:25:27 +0000
asID:                     273760
IP address blocks:        2804:8bcc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl
                          rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:39:29:85:f9:08:30:e1:1a:a0:0f:e0:87:e7:f2:2a:cd:15:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01
        Validity
            Not Before: Oct 26 21:20:27 2026 GMT
            Not After : Oct 25 21:25:27 2027 GMT
        Subject: CN=CFE6A83AAC8FD7109EAA33DF13ED745AEDFA5368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:d6:17:dd:80:2f:64:00:4a:db:43:65:7b:
                    1a:ba:d5:57:36:87:d2:23:e6:fc:e5:70:94:04:a7:
                    21:68:6a:33:34:9a:8e:d8:2d:4e:9e:f7:c2:67:e7:
                    76:c4:1d:a9:0e:cf:89:11:82:f3:1f:56:4a:a3:b4:
                    a9:00:03:ea:b1:9d:15:fa:d2:30:9b:a7:6e:7d:b4:
                    a0:60:49:16:11:21:09:89:a9:61:ae:83:f2:3d:f7:
                    db:75:12:b2:6e:48:3a:b0:15:c4:5a:4e:5e:a6:80:
                    e1:ef:9f:d3:7d:1e:24:ef:12:cb:e0:0c:ad:05:f0:
                    8e:88:0b:31:dd:0f:c6:39:e4:b2:40:ab:83:47:e1:
                    19:20:90:c4:48:01:f9:81:83:e7:38:be:ff:f8:67:
                    75:0e:eb:f1:13:c5:41:1f:84:b8:8c:b9:3b:a7:00:
                    bd:a8:c2:54:5c:c6:1e:d2:16:25:cb:bd:a9:e1:97:
                    3a:2c:22:c0:05:33:f4:96:dd:2d:a2:dc:1e:ca:e7:
                    31:9e:26:68:3f:92:4c:eb:a4:57:f6:e0:f6:19:f6:
                    09:d0:41:50:f9:a1:d3:d6:ee:bd:d8:aa:c2:08:da:
                    35:37:3a:22:73:64:f2:ed:fe:f3:50:5c:3a:6a:1a:
                    04:55:24:14:9e:3a:a9:c1:0f:13:3a:56:ee:a2:b3:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:A8:3A:AC:8F:D7:10:9E:AA:33:DF:13:ED:74:5A:ED:FA:53:68
            X509v3 Authority Key Identifier:
                keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:42:95:54:13:c1:37:ac:a0:7a:84:91:c0:ff:f8:44:e0:
         ba:70:2f:96:f4:7f:35:a2:46:f7:0f:aa:98:ea:8c:15:e1:2f:
         73:5a:43:3b:eb:a5:aa:50:8d:29:4c:84:cd:02:26:11:82:f2:
         3c:c2:8d:fb:88:7c:cc:5e:3a:e2:05:cd:ea:92:f9:29:f0:65:
         c9:d0:8d:68:8d:64:ec:9d:b4:c6:b5:36:b0:8c:8e:36:cd:11:
         4a:14:07:9d:0a:03:c8:0f:c2:fc:e8:ba:e9:e3:e3:44:35:ad:
         b4:bf:15:21:a7:4e:66:9e:7c:54:67:65:4f:40:fc:64:b9:cd:
         1a:17:7b:4d:0e:96:84:67:d6:b6:e4:d0:35:92:e7:20:1d:49:
         1a:d0:c6:8b:fa:15:6e:a4:f6:03:c7:ee:04:f7:8c:ce:ec:13:
         c4:30:53:68:59:2e:34:2b:e7:d2:14:ae:0c:84:76:c6:68:a0:
         90:e5:82:b9:24:66:b1:f9:f8:fc:1c:08:02:36:15:34:0b:9e:
         10:af:d9:18:25:65:1d:51:a7:0f:54:07:15:46:b1:28:1b:d8:
         38:a5:c7:4d:3a:2e:5a:75:d9:c1:8f:e7:11:c3:f5:97:52:7a:
         d3:4c:c9:d9:65:e4:f5:41:7b:56:bf:7d:6e:f2:d1:df:fe:c9:
         8c:9f:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:06:52 2026 by rpki-client