Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3338203d3e203533313832.roa
File:                     323830343a313138633a3a2f33322d3338203d3e203533313832.roa (raw, json)
Hash identifier:          Gv794ACVVDs4swsEP8387WzxKNu+rF1LgIbWTKcUauc=
Subject key identifier:   B4:CE:E1:77:6D:42:7F:07:65:23:00:8D:35:7B:5C:4B:31:2E:7A:10
Certificate issuer:       /CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
Certificate serial:       57D0D1DAFEAF6F2DF53045C8FDE0214F9FA025EF
Authority key identifier: 13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3338203d3e203533313832.roa
Signing time:             Wed 14 Oct 2026 18:33:42 +0000
ROA not before:           Wed 14 Oct 2026 18:28:42 +0000
ROA not after:            Wed 13 Oct 2027 18:33:42 +0000
asID:                     53182
IP address blocks:        2804:118c::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl
                          rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 21:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d0:d1:da:fe:af:6f:2d:f5:30:45:c8:fd:e0:21:4f:9f:a0:25:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804
        Validity
            Not Before: Oct 14 18:28:42 2026 GMT
            Not After : Oct 13 18:33:42 2027 GMT
        Subject: CN=B4CEE1776D427F076523008D357B5C4B312E7A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:47:64:be:82:6a:b7:8d:ac:78:fb:ce:1c:
                    21:2f:f8:3b:6d:b2:56:8e:94:90:9a:a8:33:96:11:
                    20:69:5d:6b:df:7c:fd:df:cc:88:8b:17:47:8c:77:
                    ae:92:be:08:f3:78:cf:0b:af:cf:15:b5:e8:d0:0a:
                    89:9c:ce:fe:25:87:e5:8f:64:95:a9:ab:90:a3:a9:
                    85:6d:9f:f6:d1:b2:c1:1c:d9:a8:42:a3:d8:9c:1b:
                    51:8b:ab:fb:c7:16:53:5b:91:7a:1d:45:2d:8c:a7:
                    7e:0b:95:8f:79:8a:34:12:a4:91:3c:c7:b3:83:16:
                    14:ea:f5:1c:11:81:1b:cd:94:7e:c7:90:3a:f7:2e:
                    a8:ed:b9:03:77:c8:16:ed:19:c3:57:3e:0f:1d:c1:
                    73:51:47:9c:89:6f:15:fe:45:4e:23:4d:a8:61:84:
                    28:10:68:78:cc:d0:b8:c2:d0:92:db:d3:0c:44:58:
                    38:12:82:59:24:bd:1b:23:80:4a:cd:16:2e:dd:e4:
                    3a:eb:a8:00:2f:fc:f9:b6:b0:05:95:dd:fb:bc:10:
                    c1:d5:1d:26:fd:26:ee:6e:5f:bd:be:4a:88:83:73:
                    7d:e8:71:80:3e:b6:32:fd:9b:53:29:ec:dd:bf:92:
                    18:05:96:97:5a:22:96:0b:e3:68:31:82:bb:0b:d6:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:E1:77:6D:42:7F:07:65:23:00:8D:35:7B:5C:4B:31:2E:7A:10
            X509v3 Authority Key Identifier:
                keyid:13:85:9B:0B:B4:F0:46:8D:0B:A8:B5:FE:50:6B:90:E1:AC:C1:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13859B0BB4F0468D0BA8B5FE506B90E1ACC1F804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3338203d3e203533313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:118c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:54:8b:5c:b7:26:a1:66:be:bd:52:aa:ae:17:fc:42:55:bc:
         a1:73:94:ef:3e:e2:77:6f:8c:26:0d:f5:6f:ff:b0:5b:e5:c4:
         03:d2:82:bc:5c:db:0b:56:bf:87:1a:c8:11:96:13:7e:30:a8:
         ff:38:92:b0:93:3c:12:6d:aa:d1:7e:a5:f8:0e:18:d0:72:2e:
         4b:1d:79:ef:ef:d6:c5:cc:aa:8c:0c:e1:ca:34:97:66:94:7d:
         7e:83:df:69:bf:eb:f0:2e:63:5c:8b:46:b6:3c:7d:e3:99:66:
         29:83:04:2e:d5:f4:80:84:5a:02:c6:c7:85:55:b8:3d:f8:f7:
         7f:72:ae:21:82:33:cc:98:15:5d:d6:8b:e9:24:e2:6b:18:9c:
         4a:7c:36:c7:08:c6:98:67:88:07:25:26:0b:1e:63:da:89:64:
         34:9a:6e:7b:a8:2f:51:a4:36:df:46:dc:56:37:24:14:d8:7b:
         3e:6d:4b:ae:b7:3d:4d:8e:83:ac:15:40:15:f6:62:6a:ac:d2:
         cd:06:0c:02:29:70:14:16:9f:21:e7:4d:58:3f:87:5e:a6:b1:
         d0:61:2d:79:b1:e9:d2:90:04:f2:5b:b5:5c:99:66:e8:c0:a9:
         99:b8:26:0e:4d:0c:c7:2c:08:9f:62:4e:8d:ea:6e:b7:ed:7c:
         62:4b:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:59:47 2026 by rpki-client