Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3438203d3e20323637393335.roa
File:                     323830343a353537303a3a2f33322d3438203d3e20323637393335.roa (raw, json)
Hash identifier:          BmJvRc1Sav/ym0I6jznvuzh7ihIEt7hWxz0+rJ9tLE0=
Subject key identifier:   2B:31:DB:BC:0D:30:52:A9:89:A8:8A:80:96:13:F4:56:72:1D:6E:77
Certificate issuer:       /CN=BCC86117790FACD118FC7E66429C05044C82F03F
Certificate serial:       36851160B81BA1B66C787333850372BF39284161
Authority key identifier: BC:C8:61:17:79:0F:AC:D1:18:FC:7E:66:42:9C:05:04:4C:82:F0:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC86117790FACD118FC7E66429C05044C82F03F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3438203d3e20323637393335.roa
Signing time:             Thu 01 Oct 2026 17:14:43 +0000
ROA not before:           Thu 01 Oct 2026 17:09:43 +0000
ROA not after:            Thu 30 Sep 2027 17:14:43 +0000
asID:                     267935
IP address blocks:        2804:5570::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/BCC86117790FACD118FC7E66429C05044C82F03F.crl
                          rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/BCC86117790FACD118FC7E66429C05044C82F03F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC86117790FACD118FC7E66429C05044C82F03F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 13:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:85:11:60:b8:1b:a1:b6:6c:78:73:33:85:03:72:bf:39:28:41:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC86117790FACD118FC7E66429C05044C82F03F
        Validity
            Not Before: Oct  1 17:09:43 2026 GMT
            Not After : Sep 30 17:14:43 2027 GMT
        Subject: CN=2B31DBBC0D3052A989A88A809613F456721D6E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:0a:b1:04:c4:15:fb:51:80:19:07:d2:05:
                    1f:2a:99:9f:69:e3:70:3e:b9:97:35:7d:c5:4f:39:
                    cd:3a:ad:6b:83:e8:ce:db:d3:64:ec:ec:b3:5a:93:
                    96:c0:c6:e3:61:f8:3a:50:4b:4d:b7:61:ac:e0:8e:
                    52:4e:c6:9a:98:69:f8:36:c5:7d:af:ac:d2:29:a9:
                    0f:13:4f:5e:48:a0:28:42:56:38:6c:9e:46:4a:70:
                    a8:61:3c:e6:48:3c:51:4a:16:ef:81:a9:df:44:7d:
                    c0:84:dd:1c:6f:0e:8d:f9:3e:58:c0:2e:5d:73:16:
                    61:8c:b4:2e:02:ec:bf:d2:66:e0:16:51:a8:a2:89:
                    0a:04:2e:d1:eb:6e:47:24:66:da:8a:9a:ab:5b:b3:
                    3c:8e:b5:e9:06:ac:4a:4c:73:ba:a9:fc:fa:fe:0b:
                    4d:37:86:ff:f4:b3:8f:98:84:7c:81:f0:38:05:a0:
                    18:93:5e:73:04:d3:e7:94:56:74:de:56:ff:b1:fd:
                    33:3c:fb:e8:52:d3:a1:84:f1:2d:39:6f:43:79:34:
                    28:6a:d2:83:3a:f0:80:ab:c8:3c:2d:f2:f1:2a:ed:
                    30:61:e6:38:01:5a:f7:3a:06:1f:20:08:d0:6f:5d:
                    ab:b2:19:35:67:99:79:5a:bf:15:60:66:16:a9:b4:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:31:DB:BC:0D:30:52:A9:89:A8:8A:80:96:13:F4:56:72:1D:6E:77
            X509v3 Authority Key Identifier:
                keyid:BC:C8:61:17:79:0F:AC:D1:18:FC:7E:66:42:9C:05:04:4C:82:F0:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/BCC86117790FACD118FC7E66429C05044C82F03F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCC86117790FACD118FC7E66429C05044C82F03F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/323830343a353537303a3a2f33322d3438203d3e20323637393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5570::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:86:ea:bb:00:51:c8:1f:aa:64:c2:8a:cc:7d:81:d5:d6:
         6c:01:d9:e6:ce:60:58:33:00:96:bf:5b:ef:38:42:ce:d7:8b:
         1f:45:07:f2:c8:d1:d5:bd:99:1c:d1:67:fb:b6:a0:59:df:74:
         bd:22:48:f8:23:a8:cf:9b:6c:04:db:88:e9:e6:9b:f0:f1:47:
         34:94:bd:5f:b5:b3:98:0f:ae:f6:8b:a8:ac:92:82:8d:3b:9c:
         63:34:2e:29:61:8b:be:e7:40:8d:8d:68:03:cd:e9:6d:1a:6d:
         61:46:7d:e1:20:c6:c8:c5:de:26:cd:64:2b:4b:f0:63:1b:6b:
         93:5e:7e:56:63:9c:74:b2:fc:c5:4c:ee:b8:e7:c0:b7:00:66:
         d6:18:f6:7a:d5:5e:8c:5e:ae:d5:fa:fa:99:10:d6:22:45:67:
         37:60:ff:37:e2:50:78:0f:8a:fa:77:dd:0f:d9:02:52:7c:de:
         cb:47:c4:a9:e6:25:b9:33:77:0d:35:46:be:24:6b:f7:75:33:
         5c:ee:49:7c:29:1c:9a:f7:26:20:37:fc:90:09:74:2a:10:46:
         05:a5:f9:0a:05:fc:73:2d:84:20:20:7c:c3:52:a9:47:d8:1e:
         24:56:7d:c7:f3:11:06:49:17:68:0e:41:a8:14:10:52:f6:9c:
         a8:d1:c5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:06:19 2026 by rpki-client