Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
File:                     323830343a323566383a3a2f33322d313238203d3e20323634333135.roa (raw, json)
Hash identifier:          /9Sih95ueAmSmzNkCIhs6tS3EOUfL4ZpY3f0U2BjLpI=
Subject key identifier:   39:F9:F4:0F:A8:96:7C:AF:CC:58:44:EA:AF:73:9C:01:71:62:5A:7A
Certificate issuer:       /CN=E330B7528C644112A7518D6BB5E8909965919657
Certificate serial:       0ECB9F67D0CD9D84274B6055D9CB63A034BC8E5D
Authority key identifier: E3:30:B7:52:8C:64:41:12:A7:51:8D:6B:B5:E8:90:99:65:91:96:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E330B7528C644112A7518D6BB5E8909965919657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa
Signing time:             Fri 02 Oct 2026 16:10:23 +0000
ROA not before:           Fri 02 Oct 2026 16:05:23 +0000
ROA not after:            Fri 01 Oct 2027 16:10:23 +0000
asID:                     264315
IP address blocks:        2804:25f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/E330B7528C644112A7518D6BB5E8909965919657.crl
                          rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/E330B7528C644112A7518D6BB5E8909965919657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E330B7528C644112A7518D6BB5E8909965919657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 19:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cb:9f:67:d0:cd:9d:84:27:4b:60:55:d9:cb:63:a0:34:bc:8e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E330B7528C644112A7518D6BB5E8909965919657
        Validity
            Not Before: Oct  2 16:05:23 2026 GMT
            Not After : Oct  1 16:10:23 2027 GMT
        Subject: CN=39F9F40FA8967CAFCC5844EAAF739C0171625A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:32:30:19:aa:45:98:5c:82:79:1d:8f:2f:
                    62:ca:26:cf:27:96:b7:64:64:b7:71:ae:c7:76:8f:
                    3a:3a:6f:2e:da:11:66:42:b3:80:c3:bb:33:f7:04:
                    20:45:d6:44:87:53:dd:ee:98:c4:43:a9:14:0a:f3:
                    e2:59:ca:76:55:20:81:58:7d:38:b7:eb:32:c1:52:
                    ce:52:20:c1:d2:b3:a5:d1:0e:29:86:47:21:8b:8d:
                    90:c6:96:57:33:06:aa:2e:bc:3b:fc:72:55:ec:06:
                    65:74:b1:20:27:ca:8a:56:1c:02:5a:cd:f2:31:36:
                    6e:8a:71:2a:92:75:87:41:56:1f:3f:a7:65:a0:38:
                    a9:4d:e9:5f:5b:ac:eb:2b:1e:88:88:da:0d:58:35:
                    ca:ee:4f:b4:af:a2:ef:53:c4:b0:8b:51:4c:c5:2f:
                    bc:c8:29:09:a5:2a:c5:1d:c8:e3:a6:e9:6c:83:0b:
                    a5:f3:c7:a6:57:60:e7:a3:26:fd:40:ec:97:95:b5:
                    87:76:09:03:3b:c8:99:e3:b2:69:4b:f5:20:e4:44:
                    39:9e:75:78:64:67:85:1f:46:83:96:5a:8e:53:ee:
                    08:3b:fc:4d:34:53:fd:c6:60:8c:ee:5f:ca:e6:3d:
                    81:9d:d4:3c:68:62:bf:05:cd:88:b3:a1:75:5c:58:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F9:F4:0F:A8:96:7C:AF:CC:58:44:EA:AF:73:9C:01:71:62:5A:7A
            X509v3 Authority Key Identifier:
                keyid:E3:30:B7:52:8C:64:41:12:A7:51:8D:6B:B5:E8:90:99:65:91:96:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/E330B7528C644112A7518D6BB5E8909965919657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E330B7528C644112A7518D6BB5E8909965919657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVBB3yx5ZuMhbzq6ycARvhENXPw5LdK5WdsWatkeNnm/0/323830343a323566383a3a2f33322d313238203d3e20323634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:ce:93:6a:ac:44:d2:07:ac:12:7a:07:17:36:e9:fa:a1:
         43:a8:e9:55:f1:7b:57:f1:2d:d4:f1:89:30:76:15:60:a0:5a:
         42:75:a6:50:4b:db:fa:12:44:82:ce:a5:68:f8:a4:8d:07:b4:
         91:da:d3:57:5a:0d:6e:4f:c0:c7:f2:94:39:a8:34:0c:12:ae:
         f7:61:1a:bd:f4:03:64:f3:68:b0:75:4a:11:8f:04:e1:36:a2:
         e0:d1:02:10:4c:d6:da:aa:7e:40:51:34:7a:7f:3b:d7:91:13:
         d8:be:24:99:29:a5:63:a2:5b:b8:56:c0:81:41:5a:64:f7:1c:
         0c:5a:30:53:ca:5e:ea:6c:92:4d:bb:33:ee:f3:78:cf:69:f7:
         10:cc:ff:88:c9:0a:be:29:43:11:0c:63:50:d6:13:d0:2a:90:
         21:7e:e7:1f:1a:e5:68:72:a2:04:32:dc:d6:cf:b8:a5:0c:08:
         15:bc:19:aa:d0:6a:9c:07:24:f4:eb:88:94:2e:c3:ba:34:43:
         54:50:23:51:5a:52:70:e2:2e:ed:c0:08:d7:27:b1:05:16:20:
         02:7a:da:92:65:86:75:9c:ac:1b:80:6d:69:a0:76:ac:15:47:
         9c:5c:82:f8:d4:53:fb:03:20:29:51:62:9f:d8:4d:4e:95:57:
         41:17:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:40:23 2026 by rpki-client