Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
File:                     323830343a333138343a3a2f33322d3438203d3e20323635303231.roa (raw, json)
Hash identifier:          HsoQQtMvHHT9nsb6anIWDNkIOnmUfBgHuk/hriYHrfY=
Subject key identifier:   ED:51:D7:09:98:AD:17:1F:23:C8:AA:DE:0C:F5:94:0E:D6:D9:F2:C5
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       48C8D75F98D7553914BD9F9E02D9AFE53EE93647
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa
Signing time:             Mon 26 Oct 2026 02:38:25 +0000
ROA not before:           Mon 26 Oct 2026 02:33:25 +0000
ROA not after:            Mon 25 Oct 2027 02:38:25 +0000
asID:                     265021
IP address blocks:        2804:3184::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c8:d7:5f:98:d7:55:39:14:bd:9f:9e:02:d9:af:e5:3e:e9:36:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:25 2026 GMT
            Not After : Oct 25 02:38:25 2027 GMT
        Subject: CN=ED51D70998AD171F23C8AADE0CF5940ED6D9F2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:fc:9f:09:c9:d2:ec:e0:b1:61:66:22:93:
                    93:a3:cc:44:0a:55:f8:51:ec:b6:4a:0e:30:49:aa:
                    f0:9e:ea:3b:42:41:09:06:e4:a6:ce:6a:e8:58:af:
                    01:f8:65:82:cd:88:33:4c:8d:8c:66:da:4d:65:04:
                    fd:f5:9c:71:a5:d4:88:45:d7:4d:ad:b3:58:7f:91:
                    67:7f:f0:39:f7:b0:10:f7:de:c3:fb:c8:60:56:c3:
                    15:e2:5a:a8:9a:6b:4d:5e:1e:03:e8:58:21:8b:f0:
                    b6:fe:2d:f8:ba:e7:72:ff:79:e7:62:08:b9:53:8e:
                    d5:06:13:b1:33:4f:d4:7b:76:73:ad:63:ae:de:60:
                    ca:f7:8b:1d:db:90:23:b3:85:5e:e6:1a:86:0a:90:
                    6c:2a:2d:18:fc:c8:db:1c:0a:59:17:f9:2a:3d:c1:
                    4f:be:bf:7b:37:6b:46:b2:61:ca:27:fc:1f:97:31:
                    96:ff:74:93:70:25:ca:45:da:0f:1f:0f:ba:92:d3:
                    95:da:76:9d:86:6a:22:45:2a:a7:80:db:cf:d6:54:
                    08:94:6f:0a:47:de:86:f1:46:a2:7e:f5:31:b6:e7:
                    42:68:ae:0d:e6:bc:cb:84:34:1b:f2:60:39:8b:48:
                    ae:1e:88:54:78:71:79:1e:0d:af:57:f4:c7:46:39:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:D7:09:98:AD:17:1F:23:C8:AA:DE:0C:F5:94:0E:D6:D9:F2:C5
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a333138343a3a2f33322d3438203d3e20323635303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3184::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:44:b5:53:bb:38:bc:f0:85:a2:12:55:bd:7e:91:2f:5d:34:
         84:4e:fb:b8:82:d6:74:1a:3f:59:f7:f6:8e:dc:0a:18:b1:31:
         67:0f:e1:d9:5b:7d:cc:62:65:59:4c:50:ae:3d:de:8c:06:b0:
         4f:2d:05:73:18:46:42:80:9b:19:80:56:b3:23:95:1f:0e:22:
         01:f6:fb:09:cb:59:08:47:f4:8b:5c:a0:c2:4f:27:bc:2c:e5:
         04:b5:e9:33:81:d0:75:71:c1:ca:54:c9:4b:57:7e:01:75:51:
         30:23:5b:13:d7:5e:ee:7f:54:f0:cf:5b:c9:1d:cf:4a:0e:29:
         c3:89:7d:65:11:c1:5c:b2:93:c4:23:3c:eb:ef:1f:24:c2:d0:
         f0:bc:00:6d:a4:de:57:be:38:b4:60:03:ea:8d:b9:3f:cf:2a:
         23:96:96:cf:d6:fc:e5:6f:3f:c0:84:d1:4d:71:2d:a2:6e:1a:
         81:af:02:3c:46:46:47:ce:e7:5e:f8:e0:69:c2:a7:e6:d7:7d:
         c1:38:18:17:54:f9:13:81:b7:09:69:e1:73:b2:6c:b9:63:8c:
         e5:7d:cd:e5:68:05:d1:9a:34:5c:fb:56:21:b3:2e:9a:f2:64:
         57:94:bb:e0:27:c0:6e:83:04:25:77:9b:9e:d8:15:31:a2:4e:
         3b:32:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:22:41 2026 by rpki-client