Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa
File:                     323830343a3762633a3a2f33322d3332203d3e203532383631.roa (raw, json)
Hash identifier:          wlYmUmD2mB3zXc2heYYDVUozV6k2Lbe31ILLW8ygwu4=
Subject key identifier:   D4:92:31:B9:E5:62:8E:8B:E7:F0:C8:2B:4E:CA:AA:3B:67:9B:B2:C3
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       2D2626355F46A5B67220AD45638E5EB6D3AB7CDB
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa
Signing time:             Tue 27 Oct 2026 15:46:36 +0000
ROA not before:           Tue 27 Oct 2026 15:41:36 +0000
ROA not after:            Tue 26 Oct 2027 15:46:36 +0000
asID:                     52861
IP address blocks:        2804:7bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 03:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:26:26:35:5f:46:a5:b6:72:20:ad:45:63:8e:5e:b6:d3:ab:7c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Oct 27 15:41:36 2026 GMT
            Not After : Oct 26 15:46:36 2027 GMT
        Subject: CN=D49231B9E5628E8BE7F0C82B4ECAAA3B679BB2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:59:ae:f1:7a:ae:0a:4d:e5:4a:57:70:25:
                    26:81:1f:d4:95:1e:5c:52:f5:51:63:6c:c6:23:f1:
                    5c:05:ab:9f:3b:25:78:07:36:d2:44:bd:2a:3c:6a:
                    ab:6c:23:b7:3b:00:3e:c1:64:c4:25:f4:50:d0:c7:
                    f9:8c:45:5e:6f:2a:c4:98:2f:b0:29:0e:3e:20:12:
                    0e:6e:17:f3:bc:7e:19:2d:f6:62:dc:4c:05:d2:b3:
                    a6:08:75:59:0f:da:89:c7:f1:79:6e:40:33:5a:9e:
                    00:b4:07:d4:64:83:8e:29:7b:6e:44:3b:02:d9:a5:
                    8f:e6:81:d5:bc:11:37:27:c5:b5:06:54:35:1d:3c:
                    72:c0:ba:a1:44:fc:48:fc:5d:d8:c3:55:0f:92:ef:
                    7f:f7:35:87:ab:42:95:bd:17:65:19:4b:c8:4c:48:
                    8e:ad:92:92:45:04:b8:e3:a2:3b:9c:37:d5:cb:0a:
                    48:89:9b:8f:fc:83:6e:d4:61:21:f1:5d:37:f1:88:
                    48:af:15:3c:f1:8e:2a:5b:74:35:c0:2f:12:bb:ee:
                    cc:f5:87:dd:95:fe:c6:cd:2a:1e:49:2b:22:79:a3:
                    65:aa:d6:c3:66:65:62:9f:17:98:05:3d:b9:d6:f0:
                    90:1a:70:4b:bf:9a:86:0c:a9:63:3f:6a:d1:de:de:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:31:B9:E5:62:8E:8B:E7:F0:C8:2B:4E:CA:AA:3B:67:9B:B2:C3
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/323830343a3762633a3a2f33322d3332203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:e1:d0:2e:f9:6d:fc:86:72:10:9e:43:07:bf:8f:f2:81:63:
         97:a2:a0:3d:3e:9f:24:ef:62:73:ca:ab:7d:3c:89:8f:a4:d4:
         e4:6a:6a:55:4a:6e:18:9c:97:3c:88:9e:86:a3:9a:78:1d:11:
         cf:f9:e1:d1:d3:c6:6b:4c:e1:10:ab:a7:18:c4:9a:96:66:66:
         e8:a7:0d:1f:c4:95:c2:39:c9:d9:9b:e8:72:70:a3:c0:67:f4:
         d5:cb:9c:e3:87:60:09:92:a5:04:d9:a1:0f:8a:a0:d7:51:b9:
         a4:f6:a0:55:ed:7b:87:65:50:90:e8:ee:05:30:f0:72:92:8d:
         8c:4e:21:6a:c2:07:3e:bd:c8:50:b1:f5:3b:9f:fc:11:63:0f:
         b6:0b:48:17:0d:1b:96:19:4a:54:bb:7f:37:50:14:03:c5:8f:
         b8:d1:9c:f7:e7:4a:a1:8a:f5:9c:f4:48:03:2d:68:e7:50:2e:
         af:75:d0:30:da:3a:34:7c:a5:1a:3d:06:ef:99:a2:62:5f:36:
         7f:1e:4f:02:5e:5f:d9:8e:be:51:b0:ab:08:24:ba:09:48:97:
         80:c9:22:03:2e:e0:fc:98:6c:f6:a1:65:4c:1b:49:cb:9a:0a:
         27:5e:30:84:15:ac:a3:98:49:16:fe:9e:b8:85:f2:c9:f9:36:
         b2:87:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:03:14 2026 by rpki-client