Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/323830343a366431343a3a2f33322d313238203d3e20323730353131.roa
File:                     323830343a366431343a3a2f33322d313238203d3e20323730353131.roa (raw, json)
Hash identifier:          MbWiPnK+PuILfNRWLXDCitgJw5NfpxzGDjJfUqBkqFA=
Subject key identifier:   67:BD:24:3A:A3:66:5F:A0:AE:37:EF:7B:ED:49:D9:F8:7A:65:B0:03
Certificate issuer:       /CN=12EB67BEED5EB28032FB6879781B3451D6017F0E
Certificate serial:       50AE2A4E0A91F7C187871DFA3BE3D25499D4E53A
Authority key identifier: 12:EB:67:BE:ED:5E:B2:80:32:FB:68:79:78:1B:34:51:D6:01:7F:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12EB67BEED5EB28032FB6879781B3451D6017F0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/323830343a366431343a3a2f33322d313238203d3e20323730353131.roa
Signing time:             Wed 09 Sep 2026 18:40:46 +0000
ROA not before:           Wed 09 Sep 2026 18:35:46 +0000
ROA not after:            Wed 08 Sep 2027 18:40:46 +0000
asID:                     270511
IP address blocks:        2804:6d14::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/12EB67BEED5EB28032FB6879781B3451D6017F0E.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/12EB67BEED5EB28032FB6879781B3451D6017F0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12EB67BEED5EB28032FB6879781B3451D6017F0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 21:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ae:2a:4e:0a:91:f7:c1:87:87:1d:fa:3b:e3:d2:54:99:d4:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12EB67BEED5EB28032FB6879781B3451D6017F0E
        Validity
            Not Before: Sep  9 18:35:46 2026 GMT
            Not After : Sep  8 18:40:46 2027 GMT
        Subject: CN=67BD243AA3665FA0AE37EF7BED49D9F87A65B003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:93:56:79:bf:cd:c1:58:d1:c2:f3:73:bf:
                    76:96:e2:46:5b:d0:8f:ff:5a:80:42:67:7e:35:48:
                    ad:bc:f0:0c:e5:45:a2:cd:e9:25:2a:26:f4:5b:39:
                    61:63:1c:a3:4e:2c:2e:6a:f3:0e:30:8b:2d:46:9d:
                    72:0c:b2:08:4d:7b:67:3b:44:d5:fb:db:36:0b:89:
                    c2:5f:76:6e:91:43:30:35:3d:da:b3:12:a4:73:5a:
                    b6:ce:22:31:bf:95:6a:c3:71:02:7a:2f:6b:c9:92:
                    ff:8c:8a:1b:06:29:9f:e5:65:8e:38:ac:94:81:43:
                    9d:dc:06:af:eb:8d:39:1e:11:f4:0a:e5:7f:2c:19:
                    78:29:35:e2:5e:7e:bd:1a:a3:5e:0e:e4:ec:ae:d4:
                    7a:ee:84:02:f1:78:b8:ae:5a:14:fc:58:e6:17:a6:
                    49:55:ee:e0:dc:32:dd:9d:7b:fd:23:e8:2b:f8:13:
                    7b:e0:e4:a9:49:70:b3:df:ff:8f:f2:82:0d:d1:9a:
                    d1:7a:d8:07:21:0e:ec:ea:8b:66:80:bb:7e:36:28:
                    86:83:e8:e4:15:a1:e4:c0:5f:61:72:f7:ae:fb:b6:
                    64:02:7c:a2:d9:9f:a1:9f:fc:32:58:2d:81:d1:b4:
                    50:04:6f:d6:7f:ee:2d:58:2a:67:74:48:b7:75:f6:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:24:3A:A3:66:5F:A0:AE:37:EF:7B:ED:49:D9:F8:7A:65:B0:03
            X509v3 Authority Key Identifier:
                keyid:12:EB:67:BE:ED:5E:B2:80:32:FB:68:79:78:1B:34:51:D6:01:7F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/12EB67BEED5EB28032FB6879781B3451D6017F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12EB67BEED5EB28032FB6879781B3451D6017F0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/0/323830343a366431343a3a2f33322d313238203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:9a:5f:8b:ec:72:57:a2:8a:d7:e2:47:fa:5e:e9:3d:0e:fd:
         0c:22:1a:10:d0:f8:77:dd:39:3e:d0:8d:e3:2b:2b:6b:9f:10:
         c3:4f:b5:ca:f4:48:ff:93:c6:d9:1f:61:5f:47:af:ad:35:d3:
         77:63:4f:d5:45:e2:ad:af:f4:bf:d1:32:1d:64:79:8d:c8:d2:
         44:77:b8:4b:f1:e0:5d:a7:cd:1f:5b:23:15:bc:51:4d:44:72:
         86:05:a7:43:a9:59:7d:34:80:c4:b9:92:ee:29:cc:2e:84:1c:
         54:cf:f4:3d:e1:69:0d:4e:b1:27:2a:72:7d:a3:76:4a:1e:2a:
         c6:54:89:94:e7:d3:27:4b:6a:74:35:3b:c3:94:7b:74:98:7a:
         66:88:c8:bc:5a:df:db:37:8c:d4:90:39:aa:9b:60:c0:b9:5c:
         7c:e4:4f:fc:78:be:6e:0b:f1:45:c5:f7:17:f5:98:99:eb:60:
         31:11:95:b5:72:97:cb:fc:11:ab:f0:48:2d:e9:f0:dd:10:bb:
         1e:b1:58:62:64:38:d5:8f:c3:7c:4f:ae:70:14:76:cd:f6:52:
         53:44:df:dd:14:fe:f3:da:e9:d4:11:01:62:01:b0:04:86:8e:
         a7:40:dc:e4:7b:09:19:98:d5:63:41:cf:c1:23:f0:40:0f:80:
         93:ab:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:18:24 2026 by rpki-client