Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa
File:                     323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa (raw, json)
Hash identifier:          RizOJvv9AAvVT1PH0eQrjsoVt+sf0dIfjMJwO7zsdTA=
Subject key identifier:   10:89:E2:55:08:ED:B2:56:B8:90:9E:48:15:9C:1F:F0:B4:51:29:39
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       575C46BF545879DA1E7C3980A800258DA0702053
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa
Signing time:             Thu 08 Oct 2026 19:02:29 +0000
ROA not before:           Thu 08 Oct 2026 18:57:29 +0000
ROA not after:            Thu 07 Oct 2027 19:02:29 +0000
asID:                     269656
IP address blocks:        2804:67e0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 12:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:46:bf:54:58:79:da:1e:7c:39:80:a8:00:25:8d:a0:70:20:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Oct  8 18:57:29 2026 GMT
            Not After : Oct  7 19:02:29 2027 GMT
        Subject: CN=1089E25508EDB256B8909E48159C1FF0B4512939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:a0:2b:45:6f:4c:1e:c0:f7:89:21:86:79:
                    e7:50:20:60:89:77:20:64:d0:d5:c1:b0:58:b9:ba:
                    48:dc:95:c0:a7:14:c6:52:7d:b3:5e:ac:01:b2:6f:
                    c7:eb:99:3a:44:72:91:9d:e1:e7:e3:bc:82:26:a7:
                    fa:2d:8c:76:7b:f8:3c:05:b1:10:43:57:a7:0c:c7:
                    2a:71:79:08:91:f1:fd:0b:60:d7:97:62:af:a0:c7:
                    c6:47:83:3b:08:44:e9:ab:bb:e9:b5:c8:86:8e:41:
                    1b:20:d4:21:3b:67:15:f3:76:aa:f5:0a:31:8b:14:
                    07:55:88:36:ef:1d:7c:2d:49:c6:10:28:6e:4a:03:
                    49:98:de:72:99:b1:ea:e8:00:c1:95:b5:6a:d8:28:
                    d8:56:ff:dc:75:ad:74:ba:61:65:b5:b4:44:10:6e:
                    ff:8a:21:fc:58:a7:a5:d1:75:fa:e8:e7:3a:a0:db:
                    31:82:6a:48:4c:59:eb:f8:69:c6:32:21:5c:1d:b8:
                    d6:98:2b:89:82:7c:1b:96:25:f4:35:a4:28:1e:81:
                    22:77:fc:24:87:07:d0:3f:28:de:ea:de:62:36:8e:
                    fc:e5:31:c7:52:6d:83:81:be:5d:df:e7:84:b4:ae:
                    05:97:2e:17:92:2e:9f:0d:27:29:3e:66:72:32:ae:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:E2:55:08:ED:B2:56:B8:90:9E:48:15:9C:1F:F0:B4:51:29:39
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/323830343a363765303a643030303a3a2f33362d3336203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67e0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:aa:78:e0:76:62:ec:cb:c8:a5:59:d2:ca:68:e1:bb:56:
         fa:58:a0:80:03:1f:96:28:66:5d:88:8c:69:74:11:5e:07:cf:
         34:5f:82:92:3e:aa:4d:1f:bc:a2:a4:84:4b:1a:38:dc:82:e2:
         50:c0:51:06:50:3d:6f:4b:c4:74:c8:1b:96:47:be:2e:35:69:
         1a:4f:1b:6f:3d:b2:0d:c0:86:9b:da:a4:07:5c:f8:c1:e4:cf:
         25:fb:34:dd:de:4b:30:d5:08:87:c9:07:6c:8f:e7:10:4c:2f:
         ab:ab:35:4d:11:d5:39:88:6d:2b:61:32:4c:be:eb:e1:04:05:
         04:ae:d5:c0:6c:56:c0:76:3f:56:c0:d1:0e:27:72:f2:98:2c:
         7e:95:cb:35:62:55:51:ce:4e:e7:5d:29:7d:61:3e:3b:c4:8e:
         cd:cd:3a:a5:1d:0d:6a:f4:6c:04:9f:9e:82:14:7b:cc:0d:55:
         13:e7:48:64:e5:1f:25:58:8b:b5:f5:08:14:ff:c6:aa:a4:95:
         0f:13:97:db:21:22:76:24:9f:2e:6a:e7:ec:93:53:8b:43:2a:
         bb:26:96:3a:84:ad:01:fe:69:45:60:51:ff:8a:f6:50:36:e3:
         dd:ed:2f:47:df:9f:e6:2b:97:75:51:aa:06:c2:83:c1:48:bd:
         62:44:95:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:27:51 2026 by rpki-client