Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa
File:                     323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa (raw, json)
Hash identifier:          opqKVooQrnhmLaw9kgL45UwYd7gPDvs8jenBpmSfhso=
Subject key identifier:   C4:79:99:D8:1B:15:09:93:72:AE:22:0A:A1:11:41:B4:61:E7:70:86
Certificate issuer:       /CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
Certificate serial:       3766DB6189C03569665DF4A96C9C82783D9013C0
Authority key identifier: A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa
Signing time:             Tue 29 Sep 2026 00:37:32 +0000
ROA not before:           Tue 29 Sep 2026 00:32:32 +0000
ROA not after:            Tue 28 Sep 2027 00:37:32 +0000
asID:                     269466
IP address blocks:        2804:6510:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:db:61:89:c0:35:69:66:5d:f4:a9:6c:9c:82:78:3d:90:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9A12339E6516165145BF0BEBCAA6D86DAFCEB52
        Validity
            Not Before: Sep 29 00:32:32 2026 GMT
            Not After : Sep 28 00:37:32 2027 GMT
        Subject: CN=C47999D81B15099372AE220AA11141B461E77086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:5a:bd:c9:53:34:4c:65:51:1e:c1:70:01:
                    84:4b:22:6d:a9:91:ab:23:14:c1:96:e2:4b:9a:99:
                    36:1f:cf:72:91:aa:02:a5:8e:f0:3a:f7:35:de:f2:
                    4b:62:2e:b8:32:c7:a2:65:9f:a8:35:6b:f9:43:57:
                    f6:96:84:56:e9:79:b7:3e:61:7f:5a:2f:5f:b1:bc:
                    db:d0:a5:70:96:49:61:d2:01:4f:f0:7b:4a:af:7f:
                    1f:99:a8:a7:12:d2:41:d6:3a:c3:88:50:87:f0:dd:
                    76:74:94:96:e9:d4:70:18:71:6e:f5:53:3e:aa:50:
                    5f:d1:5b:d8:28:ef:03:c0:fa:e6:c3:52:fe:2c:d6:
                    66:40:9a:fa:9c:62:dc:88:c8:9a:70:e4:a8:67:da:
                    6e:b0:80:62:69:16:d4:02:bf:68:ff:19:a6:a2:e5:
                    e5:41:cd:35:32:3a:19:08:e0:93:33:80:35:c9:a7:
                    0f:79:14:ae:31:49:ec:5c:e9:71:8d:c7:f2:8e:e8:
                    b7:76:5e:c1:fe:e2:de:ff:3a:c2:d3:49:96:3d:98:
                    3a:5d:13:00:cf:98:45:17:65:82:fa:dc:3c:67:8c:
                    51:10:28:51:bb:96:b5:2b:8a:1f:b1:cb:5a:60:72:
                    1a:d8:51:00:6a:02:ef:e0:5a:59:cb:33:47:9e:7c:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:79:99:D8:1B:15:09:93:72:AE:22:0A:A1:11:41:B4:61:E7:70:86
            X509v3 Authority Key Identifier:
                keyid:A9:A1:23:39:E6:51:61:65:14:5B:F0:BE:BC:AA:6D:86:DA:FC:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9A12339E6516165145BF0BEBCAA6D86DAFCEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a383030303a3a2f33342d3334203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:0c:b9:50:be:a4:26:8d:7d:cf:ec:b7:97:41:bb:9d:e4:
         d8:dd:51:50:80:fd:cf:a2:30:15:c8:df:0a:f1:89:dd:c2:3b:
         94:e5:da:c7:c3:a9:b2:3c:46:b0:56:74:dd:f5:39:69:7e:43:
         8e:53:72:94:4f:31:4e:f2:db:fa:b3:ec:d9:a6:91:2f:55:70:
         b5:78:0e:03:18:29:7f:81:ce:f7:db:ed:f8:09:e6:ce:2d:81:
         f3:31:65:84:6a:4d:27:fd:54:9b:cc:00:5b:ee:10:5b:0e:7a:
         df:00:01:60:c1:98:3b:56:7f:5c:51:20:4d:98:7b:67:71:e2:
         0b:b5:12:3f:47:09:89:af:24:94:ba:98:e5:3a:a5:c7:ec:bb:
         84:7e:57:a2:7e:c5:88:57:b8:e4:02:29:7f:df:34:7e:68:0c:
         b9:e9:80:cd:a9:ea:ca:72:0e:33:12:5d:33:b4:ba:3e:e3:00:
         76:43:ad:92:49:3c:84:ac:7b:b7:07:42:27:a3:6e:c5:6e:b9:
         36:ec:28:6b:7c:30:06:6a:64:f9:7f:44:9d:ca:15:51:76:67:
         d2:1f:54:c9:5a:8e:f0:c8:c6:6d:38:8e:aa:8d:29:97:da:4b:
         a5:ae:b5:fc:e3:cb:a4:c3:c4:af:5f:25:ad:f3:7c:b7:c6:c8:
         fd:ec:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:49:57 2026 by rpki-client