Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33332d3333203d3e20323639353036.roa
File:                     323830343a363561383a3a2f33332d3333203d3e20323639353036.roa (raw, json)
Hash identifier:          plPI0MRM4gB3TPN4RIO6Pz7rBh/Oyi9A2gEICN8+QbM=
Subject key identifier:   B1:5D:9C:2F:A6:94:5E:E4:82:D3:17:94:3A:EB:44:97:E6:C3:DA:E7
Certificate issuer:       /CN=FEB32A1F9E346C730274833B3480FD499BD027A1
Certificate serial:       040B8492FB0C50EEDA982037777CCEB21DEE1129
Authority key identifier: FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33332d3333203d3e20323639353036.roa
Signing time:             Mon 19 Oct 2026 03:39:06 +0000
ROA not before:           Mon 19 Oct 2026 03:34:06 +0000
ROA not after:            Mon 18 Oct 2027 03:39:06 +0000
asID:                     269506
IP address blocks:        2804:65a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl
                          rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0b:84:92:fb:0c:50:ee:da:98:20:37:77:7c:ce:b2:1d:ee:11:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB32A1F9E346C730274833B3480FD499BD027A1
        Validity
            Not Before: Oct 19 03:34:06 2026 GMT
            Not After : Oct 18 03:39:06 2027 GMT
        Subject: CN=B15D9C2FA6945EE482D317943AEB4497E6C3DAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:ab:5b:ac:0d:28:72:0f:a6:5a:fe:36:56:
                    33:85:f8:e4:af:1f:72:71:9f:51:50:5f:31:da:7a:
                    5a:93:d2:33:5c:57:93:7a:46:a2:60:13:a4:4c:5d:
                    3a:7b:75:d4:1a:1b:57:d8:00:8f:a4:e7:4c:f6:d8:
                    d0:7c:03:9d:ae:3b:74:f1:2b:41:31:90:ef:64:4a:
                    8a:1f:ef:cb:f3:4c:a5:a6:57:1e:f8:fc:6a:b5:7b:
                    e6:dd:78:da:4d:a6:f1:72:29:3c:56:ca:35:33:d9:
                    43:14:7e:e2:83:39:31:0f:ea:df:4a:0a:da:ae:ac:
                    24:5c:22:c7:e5:a7:26:e6:9f:55:f3:13:c1:03:1e:
                    65:48:63:14:66:49:ec:5f:19:27:84:e9:1d:38:e2:
                    d5:7d:7c:1c:96:d7:b1:c7:93:d5:f4:08:57:e5:8d:
                    d5:59:52:ac:b5:3e:6a:f4:d5:4a:7b:97:c0:c1:8f:
                    21:f1:3a:d7:57:8e:47:56:12:ab:5e:df:2a:d9:e6:
                    d0:a1:aa:62:a4:66:26:41:f0:ba:a9:8d:70:65:b8:
                    20:84:4e:5c:9b:0c:cb:49:de:7d:d4:13:d0:ca:47:
                    a5:98:b5:04:25:a3:15:48:98:f7:cc:d9:49:78:25:
                    82:89:dc:a0:2c:2e:5e:48:83:99:04:36:a8:ae:9e:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:9C:2F:A6:94:5E:E4:82:D3:17:94:3A:EB:44:97:E6:C3:DA:E7
            X509v3 Authority Key Identifier:
                keyid:FE:B3:2A:1F:9E:34:6C:73:02:74:83:3B:34:80:FD:49:9B:D0:27:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/FEB32A1F9E346C730274833B3480FD499BD027A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB32A1F9E346C730274833B3480FD499BD027A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/323830343a363561383a3a2f33332d3333203d3e20323639353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:a5:f8:55:58:cd:68:8f:4e:f5:b2:21:fa:e6:a6:f5:ee:9f:
         cd:f6:04:6b:14:72:0f:90:b6:ca:fe:0e:6d:02:2f:77:d5:4d:
         c0:35:71:c4:8b:a7:cc:27:a6:31:34:71:48:8b:16:08:c6:03:
         f2:8e:a0:f1:82:17:52:7c:b8:6b:a3:66:91:d7:d3:be:03:f4:
         b1:9b:46:85:10:af:a6:cc:46:56:53:ed:06:cb:7a:95:3a:40:
         10:a6:7e:7e:44:5f:1f:bc:16:97:05:90:70:ab:2b:c6:82:cd:
         ba:cf:9c:f6:66:75:4e:c8:d4:46:66:09:00:71:07:cf:75:86:
         1d:40:2b:a3:1a:62:04:21:99:ef:49:64:14:6c:4a:65:2b:c7:
         f7:b6:ca:11:19:2f:57:4a:9c:ab:6b:34:3b:e6:04:22:69:ff:
         00:91:c6:38:0f:39:92:8f:40:3a:17:5c:a7:04:8a:fe:c9:2b:
         2f:f7:83:da:8e:8c:60:e0:3b:00:68:cc:87:74:c5:35:4b:03:
         c9:21:59:cd:bc:d3:8c:93:00:bb:9e:27:45:f9:27:6a:f3:d7:
         e5:c1:18:25:4b:97:cc:00:04:31:d1:ff:94:ad:60:c2:4b:2e:
         2a:0c:fe:e5:cd:b4:11:b4:7b:55:9a:17:6a:ba:08:c3:94:36:
         b7:9d:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:07 2026 by rpki-client