Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31313a3a2f34382d3438203d3e20323634343039.roa
File:                     323830343a316532303a31313a3a2f34382d3438203d3e20323634343039.roa (raw, json)
Hash identifier:          jvPAwCxAAKHqGY6adFa9ieS5wbkPPPzMJ9GAexAIuRc=
Subject key identifier:   EA:F3:87:98:5C:60:CE:8A:4B:6E:22:9D:72:B4:BB:1B:64:9A:DA:B3
Certificate issuer:       /CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
Certificate serial:       161F4B648828BBB57954D0A2F2C22C7B74E6C34E
Authority key identifier: B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31313a3a2f34382d3438203d3e20323634343039.roa
Signing time:             Wed 09 Sep 2026 18:55:40 +0000
ROA not before:           Wed 09 Sep 2026 18:50:40 +0000
ROA not after:            Wed 08 Sep 2027 18:55:40 +0000
asID:                     264409
IP address blocks:        2804:1e20:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Oct 2026 22:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1f:4b:64:88:28:bb:b5:79:54:d0:a2:f2:c2:2c:7b:74:e6:c3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
        Validity
            Not Before: Sep  9 18:50:40 2026 GMT
            Not After : Sep  8 18:55:40 2027 GMT
        Subject: CN=EAF387985C60CE8A4B6E229D72B4BB1B649ADAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:86:22:69:19:c5:a3:62:db:31:fa:38:ff:
                    bb:12:6d:83:bc:81:4d:51:d0:eb:f7:67:b5:4f:84:
                    32:30:8b:1c:ca:d8:7c:5f:0b:5d:1c:85:27:62:8e:
                    11:d6:24:fb:fe:f4:f4:df:38:e5:d4:d3:76:8d:fb:
                    8e:22:d9:61:f4:32:38:7c:69:1c:3f:5f:7d:98:5c:
                    d9:a7:64:5d:27:c8:e7:4d:0b:bd:f5:ce:ee:99:4f:
                    d8:0e:d4:8c:6f:41:20:20:a5:1a:a8:75:ca:17:a3:
                    fa:c7:91:ec:1c:71:90:4d:29:36:59:70:87:86:fc:
                    8d:54:d5:b4:cc:5a:12:ce:97:39:b4:a4:7e:0c:8e:
                    9d:1a:07:21:59:e2:75:07:60:58:4b:e5:38:b0:72:
                    ed:44:c7:7d:c5:b0:9a:0f:cc:77:0e:50:cb:b9:43:
                    31:50:4a:c5:d3:e7:2f:4b:f9:31:a8:6a:73:dc:fd:
                    8f:35:28:c3:ac:25:be:c0:37:b8:65:d6:ec:31:db:
                    06:3e:3b:3f:33:c1:1c:ae:e8:25:09:52:8a:a0:75:
                    b1:42:98:9c:ed:bf:63:ef:c1:2f:01:f9:f9:9e:4b:
                    6f:b3:fe:6c:ec:25:22:cc:c9:1f:d1:e0:69:65:bd:
                    f0:57:06:1b:43:54:ad:e1:cd:62:01:c2:c7:6b:5b:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:87:98:5C:60:CE:8A:4B:6E:22:9D:72:B4:BB:1B:64:9A:DA:B3
            X509v3 Authority Key Identifier:
                keyid:B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/323830343a316532303a31313a3a2f34382d3438203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e20:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:64:41:ef:f4:75:52:16:d5:2a:c3:74:40:3d:38:36:c8:
         cb:69:0d:57:23:96:d2:45:89:96:f5:37:b7:08:14:e6:26:ad:
         22:95:0f:69:0d:c0:8c:5b:27:41:d7:87:fb:4e:1d:7c:c1:43:
         86:31:4b:43:3d:3f:a2:00:8c:2c:a6:d2:ff:7f:45:6e:4e:b1:
         0d:c5:cc:b6:8a:78:ed:b1:dd:70:fa:47:94:dd:23:78:1d:ec:
         10:f7:86:4d:cd:a0:b6:3f:55:c1:01:f2:f5:05:bd:d4:5e:e6:
         c6:29:6d:0d:a9:c0:cc:ea:fd:1c:21:ce:32:85:ad:34:ce:4f:
         34:6b:a4:18:2b:6a:b7:c8:eb:46:d3:b6:5b:b1:73:d4:be:5f:
         0e:2f:d2:aa:8e:21:22:0e:b8:68:06:a2:7b:45:eb:3f:bb:a2:
         91:d0:3a:01:9d:d0:7e:e9:6b:4d:7b:28:b9:96:fd:28:82:96:
         6e:54:c4:6e:c3:8d:a6:bc:1c:6c:f7:27:e8:ac:01:29:fe:b8:
         f6:0f:58:c1:79:c8:30:33:4c:f3:44:8a:8a:d5:57:8c:54:2d:
         3f:8b:42:73:65:3f:c3:3c:ae:b0:4a:3f:02:df:ad:50:ac:74:
         34:4d:e6:1c:42:27:53:88:13:18:a3:21:e4:16:43:e7:26:7d:
         9e:b9:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:55:36 2026 by rpki-client