Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3332203d3e20323639353036.roa
File:                     323830343a363561383a3a2f33322d3332203d3e20323639353036.roa (raw, json)
Hash identifier:          +QbBFyTpI4OzSZHKRTBKvnSciHsAn20EyfSefREL/60=
Subject key identifier:   F7:FF:1B:07:F4:2F:56:2D:30:C8:F1:D0:E0:6A:C2:1D:BD:15:31:5C
Certificate issuer:       /CN=FEB32A1F9E346C730274833B3480FD499BD027A1
Certificate serial:       200A62C612CE07AA56E59611735952C5A807AC1B
Authority key identifier: FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3332203d3e20323639353036.roa
Signing time:             Mon 19 Oct 2026 03:39:01 +0000
ROA not before:           Mon 19 Oct 2026 03:34:01 +0000
ROA not after:            Mon 18 Oct 2027 03:39:01 +0000
asID:                     269506
IP address blocks:        2804:65a8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl
                          rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 02:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0a:62:c6:12:ce:07:aa:56:e5:96:11:73:59:52:c5:a8:07:ac:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB32A1F9E346C730274833B3480FD499BD027A1
        Validity
            Not Before: Oct 19 03:34:01 2026 GMT
            Not After : Oct 18 03:39:01 2027 GMT
        Subject: CN=F7FF1B07F42F562D30C8F1D0E06AC21DBD15315C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:ce:d0:7d:e7:5a:33:d7:0a:fa:6e:dc:a5:
                    0b:91:58:fc:4e:22:d5:73:a9:6f:20:7a:1a:57:6f:
                    ed:62:34:93:7b:80:a6:d3:35:97:3e:39:d2:04:cf:
                    ed:90:51:f8:19:6e:0f:61:e8:06:4d:bb:51:08:a2:
                    ec:ce:a7:24:21:fc:7e:b6:65:c5:e4:5c:79:f1:34:
                    bd:b0:d7:a0:8f:be:2b:e3:d5:1f:06:7c:26:99:e0:
                    44:4c:ec:40:5c:01:5a:c1:c0:ee:05:1a:b7:2b:86:
                    1c:7c:90:b2:ca:03:40:15:24:72:61:1f:a3:73:57:
                    ca:64:34:2e:c1:39:e9:66:84:bb:16:06:36:5d:a5:
                    88:03:90:3d:83:9b:a0:a1:f2:58:8c:e5:18:9f:3f:
                    64:24:e6:07:fb:ab:e4:af:28:25:43:b6:94:8c:66:
                    6f:63:4a:f5:98:34:eb:75:5f:3a:4f:8e:fa:df:40:
                    f3:6a:99:c1:97:c6:c8:10:5b:dc:01:34:aa:67:8e:
                    aa:b8:dd:30:6e:3d:8a:52:65:cc:b3:df:c1:5b:82:
                    fa:d6:70:dd:f4:c1:79:13:5e:cb:be:a7:ce:d5:82:
                    e0:47:c8:50:e0:08:41:0a:e5:84:50:ed:a1:0d:ec:
                    51:09:1c:5d:4b:61:85:e8:f0:0d:f6:89:7d:50:d1:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FF:1B:07:F4:2F:56:2D:30:C8:F1:D0:E0:6A:C2:1D:BD:15:31:5C
            X509v3 Authority Key Identifier:
                keyid:FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33322d3332203d3e20323639353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:08:1a:aa:5f:89:f8:0d:93:a9:46:18:0a:b9:02:d0:e0:
         98:7b:09:6a:b9:af:de:a5:1e:d0:07:8c:f3:fe:40:78:3c:6b:
         ec:2f:1b:6b:c2:44:b0:73:c0:8d:2e:3b:9d:85:b4:24:25:63:
         72:b9:ea:9d:90:de:16:1f:dd:5a:8c:1c:4b:5b:2d:be:bf:31:
         28:25:cb:37:73:5c:f6:a5:54:37:0e:12:52:c0:7f:53:f9:12:
         cd:a2:23:06:a0:8d:e1:ec:62:43:22:8b:2b:4b:1e:d6:21:63:
         a0:6a:c1:85:6e:3a:ed:e2:ed:dc:9b:7f:76:db:a0:be:62:e9:
         32:c1:b4:6d:f3:fe:27:c8:1d:1c:22:fd:05:66:61:60:e3:50:
         47:2f:db:b6:be:10:71:99:7e:fc:1f:d6:d1:97:f5:bc:f4:e1:
         9a:f2:9d:1c:0d:73:7d:1f:df:10:bf:40:12:99:3d:60:c2:b7:
         a4:d6:c7:10:ad:fe:36:9a:b1:b3:3f:4f:17:0c:4a:b6:6d:83:
         af:70:b8:57:e0:bf:9a:5f:79:1a:07:6e:44:4f:20:bc:3b:cd:
         40:df:06:c2:01:cd:26:07:e3:35:29:72:27:38:2f:11:ad:bf:
         b2:2c:81:ae:ab:ae:ee:f5:15:8f:43:1d:e5:57:9b:b2:7e:25:
         29:b1:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:25:28 2026 by rpki-client