Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa
File:                     323830343a353833303a3a2f33322d313238203d3e20323638313132.roa (raw, json)
Hash identifier:          Y5sZaAWwNUzsGexjTFN8cHIC++yphGeBgDH2mE4NuCk=
Subject key identifier:   B1:5C:D7:72:60:8E:6C:B2:7D:C9:59:2A:8C:E4:8B:5B:D8:32:67:41
Certificate issuer:       /CN=A43CC0A54B8BF054FA861BC64B030A447B1C0BCF
Certificate serial:       12D9342ECD701A0C9D2A27292731A213340AA9C3
Authority key identifier: A4:3C:C0:A5:4B:8B:F0:54:FA:86:1B:C6:4B:03:0A:44:7B:1C:0B:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa
Signing time:             Mon 28 Sep 2026 11:48:06 +0000
ROA not before:           Mon 28 Sep 2026 11:43:06 +0000
ROA not after:            Mon 27 Sep 2027 11:48:06 +0000
asID:                     268112
IP address blocks:        2804:5830::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.crl
                          rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 08:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:34:2e:cd:70:1a:0c:9d:2a:27:29:27:31:a2:13:34:0a:a9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43CC0A54B8BF054FA861BC64B030A447B1C0BCF
        Validity
            Not Before: Sep 28 11:43:06 2026 GMT
            Not After : Sep 27 11:48:06 2027 GMT
        Subject: CN=B15CD772608E6CB27DC9592A8CE48B5BD8326741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:68:5a:1b:17:00:f4:21:68:87:46:3f:ee:
                    e1:12:a8:19:8c:a7:d8:5f:95:b8:31:de:5c:55:14:
                    c9:2a:18:6e:c3:f7:3f:47:8f:ca:47:16:e2:7e:6b:
                    6c:2e:1e:5c:72:89:c0:db:ae:4d:cd:44:dd:9a:c2:
                    cd:88:38:c6:9d:a0:28:05:c8:53:b5:64:f6:de:1a:
                    6f:84:df:14:22:65:48:ad:78:5e:7f:70:92:60:c2:
                    70:b7:5b:bc:c8:c2:91:a8:ff:ce:c6:e7:9c:96:5e:
                    9a:be:cb:dc:54:6e:a8:af:c8:6e:5e:44:bf:4b:f5:
                    6d:77:58:0b:15:f6:60:3d:da:12:88:4d:19:50:c9:
                    c9:db:21:56:54:d8:15:80:37:36:f0:44:c7:cf:da:
                    41:e7:59:68:67:14:f4:77:a0:0a:a3:7d:46:71:53:
                    b0:ff:eb:99:90:e1:c4:e3:8d:2c:ee:70:3c:c6:05:
                    14:3e:bf:e2:75:9c:58:46:52:ad:05:a0:42:00:54:
                    23:ac:de:ea:d2:7b:3c:91:5b:4d:56:9a:70:68:e8:
                    6d:0c:98:3d:b9:b8:61:e9:d2:84:c7:1e:76:51:23:
                    80:6e:ea:bd:20:70:6b:c2:07:ae:6a:d3:14:63:ee:
                    ba:52:a9:65:ae:cd:f5:fa:1e:cf:e7:cf:97:31:c6:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5C:D7:72:60:8E:6C:B2:7D:C9:59:2A:8C:E4:8B:5B:D8:32:67:41
            X509v3 Authority Key Identifier:
                keyid:A4:3C:C0:A5:4B:8B:F0:54:FA:86:1B:C6:4B:03:0A:44:7B:1C:0B:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A43CC0A54B8BF054FA861BC64B030A447B1C0BCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/0/323830343a353833303a3a2f33322d313238203d3e20323638313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5830::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:48:b4:b3:e4:fa:1f:93:6d:fa:7c:67:36:07:7d:45:13:e8:
         cf:f7:15:9d:fb:95:7c:a7:72:2f:19:9d:08:cc:1b:c1:dc:ca:
         e4:8d:4d:c5:03:14:df:55:de:53:35:ad:cc:6e:ff:8e:de:1c:
         c7:eb:95:8f:29:31:40:47:88:8c:61:3b:7a:dd:7e:86:10:d2:
         b2:fa:9c:93:3e:e7:cc:5a:91:99:5a:e5:f0:65:86:e8:d3:03:
         13:a8:9f:33:af:8a:2c:25:bc:33:ef:37:ef:ef:2d:ed:68:19:
         44:fe:8f:b3:77:92:09:ae:2d:40:2f:e6:aa:51:5e:ec:fa:30:
         0e:9a:34:3f:16:09:3c:30:eb:95:21:42:33:34:0f:bb:9e:e7:
         1a:e7:d8:18:fc:16:a1:e5:7e:53:d1:bb:e4:58:02:81:53:ca:
         4e:4d:f4:15:2b:06:e6:50:c3:49:a5:70:3e:2f:1d:aa:b7:e4:
         c4:35:4a:e7:60:73:02:ac:fd:84:8b:a6:6e:16:3b:3b:ee:a9:
         50:e1:dc:45:9d:a4:24:c6:a7:1f:36:b3:ec:bd:7d:81:ca:4f:
         ad:76:b9:6a:42:99:3d:0e:11:e7:48:36:ca:b1:04:73:25:3d:
         8e:ad:80:1c:31:2e:8c:d2:27:1c:17:4d:09:c6:18:44:08:7c:
         00:8a:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:38:14 2026 by rpki-client