Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/323830343a363230303a3a2f33332d3438203d3e20323639323730.roa
File:                     323830343a363230303a3a2f33332d3438203d3e20323639323730.roa (raw, json)
Hash identifier:          mXNn4faIoNy79WzqvtGAH8Dp0It3QEuyiiszM0PpsgI=
Subject key identifier:   7F:37:04:BC:6D:0C:4D:E5:3E:5D:15:F5:10:3F:A5:DB:EA:CC:58:3D
Certificate issuer:       /CN=D6D2BF07629487B957BED477B9A0F98CD9127931
Certificate serial:       3EE4BE28BD02867F052495E4A08D658ADE6CE8A9
Authority key identifier: D6:D2:BF:07:62:94:87:B9:57:BE:D4:77:B9:A0:F9:8C:D9:12:79:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/323830343a363230303a3a2f33332d3438203d3e20323639323730.roa
Signing time:             Fri 25 Sep 2026 19:59:22 +0000
ROA not before:           Fri 25 Sep 2026 19:54:22 +0000
ROA not after:            Fri 24 Sep 2027 19:59:22 +0000
asID:                     269270
IP address blocks:        2804:6200::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.crl
                          rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:be:28:bd:02:86:7f:05:24:95:e4:a0:8d:65:8a:de:6c:e8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D2BF07629487B957BED477B9A0F98CD9127931
        Validity
            Not Before: Sep 25 19:54:22 2026 GMT
            Not After : Sep 24 19:59:22 2027 GMT
        Subject: CN=7F3704BC6D0C4DE53E5D15F5103FA5DBEACC583D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:4b:a5:f0:d3:3a:19:2a:65:97:55:8f:97:
                    64:25:32:5c:5d:05:2a:ca:11:20:a1:b6:07:09:57:
                    e3:9a:63:c2:8e:9d:3b:1b:d1:be:aa:6d:e7:92:a3:
                    be:8f:3e:93:39:01:34:5b:46:89:fa:2f:c2:6b:0f:
                    b3:95:8e:19:34:16:13:98:c1:83:86:44:52:8f:ae:
                    f6:a4:7f:8e:2c:3e:01:7f:ea:c9:1f:e3:7a:02:04:
                    ad:a5:5c:6c:35:5a:41:5d:dc:ed:be:a5:9d:06:7f:
                    f5:0f:3d:07:7a:86:5c:0d:dc:b7:6a:ca:4f:18:7a:
                    49:71:0a:1f:40:fc:26:85:96:24:ec:3e:16:bb:29:
                    de:f1:85:58:03:5d:10:b5:c7:6a:64:e6:96:cc:82:
                    ab:43:bf:fc:b8:77:63:6e:a1:5e:bd:3f:b2:80:28:
                    ca:50:2b:99:b0:b4:95:6f:0b:31:c9:50:81:9c:12:
                    b8:e5:41:9f:8a:a0:0a:fc:41:2c:5a:d4:35:f6:07:
                    56:1d:2b:08:93:ef:9b:31:f7:d8:05:a1:57:69:96:
                    74:aa:b1:40:1e:f5:d0:84:4a:4f:77:da:e4:91:2f:
                    d4:21:56:12:a2:60:4d:72:49:07:02:10:35:f0:ac:
                    67:39:6b:5a:df:12:7b:17:a5:81:b5:1c:aa:98:56:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:04:BC:6D:0C:4D:E5:3E:5D:15:F5:10:3F:A5:DB:EA:CC:58:3D
            X509v3 Authority Key Identifier:
                keyid:D6:D2:BF:07:62:94:87:B9:57:BE:D4:77:B9:A0:F9:8C:D9:12:79:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/D6D2BF07629487B957BED477B9A0F98CD9127931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D2BF07629487B957BED477B9A0F98CD9127931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sDkpigeUXoG4kUotvkpAQg2civCBuZSJgzjyYedVKTk/0/323830343a363230303a3a2f33332d3438203d3e20323639323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6200::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:82:fd:42:07:af:e9:11:51:a8:01:2d:4b:00:7d:9e:bb:d1:
         5d:1c:61:ba:cf:f8:b1:24:c8:26:ce:1d:66:0a:6a:24:db:67:
         64:e2:2e:d8:81:a4:28:e9:d4:e4:15:c1:08:5e:db:38:5a:a2:
         54:6c:65:69:87:aa:0d:99:1d:8b:47:3d:5e:c6:90:d3:73:28:
         1c:af:b0:25:65:d3:85:6a:92:c1:45:33:76:39:e0:5e:d6:7d:
         a9:47:3a:0d:ac:10:85:f7:ea:ef:7b:47:30:a2:0d:85:dd:68:
         6e:51:3a:85:2b:48:42:33:ff:43:29:93:dc:77:33:6c:78:30:
         42:86:77:a2:dd:68:cf:3e:2d:c5:4a:3c:d4:15:f4:86:3e:bc:
         24:0f:1e:1b:74:22:09:be:0e:89:ec:69:7c:2b:a3:5a:d7:8e:
         e0:e4:23:8e:08:5e:c5:62:5f:93:2a:24:cb:81:7a:45:e0:da:
         d7:03:a3:3f:b5:e1:cd:b8:82:3c:dc:fa:4d:18:3c:bd:eb:1a:
         8c:c8:12:ae:33:0c:ba:1a:92:13:37:93:d7:d0:f3:61:93:ef:
         c6:ab:2a:c6:35:2e:b8:21:8a:ab:a8:44:da:8f:bd:20:97:06:
         f7:a1:2c:3b:02:47:19:e9:91:05:04:c9:44:bf:20:4d:88:b0:
         b6:be:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:53:08 2026 by rpki-client