Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa
File:                     323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa (raw, json)
Hash identifier:          gp1cuZtxOOgLcMSP8RIR0Obyjkcs85xazIDp5+HY0hE=
Subject key identifier:   88:64:E5:4C:40:04:1E:96:A8:DC:9B:28:25:D6:24:30:BE:CB:59:B5
Certificate issuer:       /CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
Certificate serial:       0B2C15936B1F3D89678DA85F7D7FAE5D61A69A9E
Authority key identifier: B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa
Signing time:             Sun 04 Oct 2026 14:04:10 +0000
ROA not before:           Sun 04 Oct 2026 13:59:10 +0000
ROA not after:            Sun 03 Oct 2027 14:04:10 +0000
asID:                     269502
IP address blocks:        2804:6598:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl
                          rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2c:15:93:6b:1f:3d:89:67:8d:a8:5f:7d:7f:ae:5d:61:a6:9a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65E7DF05538E025E5EF0533E401B97A4458BF8C
        Validity
            Not Before: Oct  4 13:59:10 2026 GMT
            Not After : Oct  3 14:04:10 2027 GMT
        Subject: CN=8864E54C40041E96A8DC9B2825D62430BECB59B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:5b:c9:4d:1d:79:04:4a:1b:dc:a8:fc:7b:
                    75:53:11:7e:b5:8f:89:af:db:71:40:d9:31:27:6e:
                    d4:2c:df:ad:1d:da:76:59:6b:a4:63:51:f1:bb:2a:
                    53:c2:c4:3c:b5:da:54:d6:d9:ca:3a:6f:a7:9c:e7:
                    69:9d:93:5e:78:4d:5b:dd:cf:60:f3:fd:ca:c1:ea:
                    40:b0:42:29:9c:26:5a:b2:91:85:35:04:f5:96:f0:
                    a0:9d:a4:7e:56:30:71:8b:6f:a1:8e:d4:d2:00:44:
                    dc:fa:b0:b1:85:37:11:35:c1:52:ac:43:33:ea:d6:
                    a2:1b:b8:e4:4b:f3:67:06:c9:d5:c0:c6:45:32:e4:
                    b3:f0:39:2c:c1:22:f5:60:6b:0e:16:de:66:bd:b6:
                    5c:0b:18:c6:c7:30:c1:57:f1:d1:8c:6d:91:de:8a:
                    56:a6:21:a5:78:db:c4:46:54:0a:5e:17:24:eb:fd:
                    15:02:96:95:07:1f:55:d3:5f:7b:0e:c6:35:60:e7:
                    3f:67:90:9e:01:3e:c5:c6:1f:f8:8c:be:c1:d4:eb:
                    1a:26:a3:c9:b7:6b:37:82:58:30:28:6b:e5:e8:89:
                    30:3a:41:05:4d:1f:ea:80:d3:80:67:86:ca:42:91:
                    6e:74:df:8e:14:17:8c:b0:1e:38:c4:bf:56:1b:58:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:64:E5:4C:40:04:1E:96:A8:DC:9B:28:25:D6:24:30:BE:CB:59:B5
            X509v3 Authority Key Identifier:
                keyid:B6:5E:7D:F0:55:38:E0:25:E5:EF:05:33:E4:01:B9:7A:44:58:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/B65E7DF05538E025E5EF0533E401B97A4458BF8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65E7DF05538E025E5EF0533E401B97A4458BF8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/323830343a363539383a663030303a3a2f33362d3336203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6598:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:a7:8e:02:82:ed:53:a8:c1:c6:e0:05:ec:74:e0:6e:b9:f5:
         98:68:f9:fb:85:27:6e:f6:4f:7e:f5:2f:dc:3d:0e:84:fc:71:
         ce:70:15:24:9a:89:37:36:b3:9d:84:d5:60:46:e7:8f:0d:eb:
         66:f9:e2:fb:11:47:c9:b8:c0:25:67:6d:0d:b0:50:47:5b:07:
         84:fe:58:8a:b5:0a:55:f0:ad:c4:0f:65:5d:0b:d6:51:6d:51:
         ae:23:a1:59:a4:90:4e:58:b6:4a:80:f4:5c:a0:96:1f:ff:63:
         30:89:39:48:ae:a1:e1:bd:5d:14:0e:2a:69:a5:40:67:3e:18:
         f0:3a:b7:a7:7b:cc:9b:6c:14:0f:d5:2f:88:85:43:76:4e:b6:
         38:4a:4e:b3:14:cf:f9:2f:41:16:bb:6d:f2:ce:36:35:c6:3b:
         72:c0:f5:3d:99:03:a0:e3:a2:4b:92:36:e7:65:04:29:bd:ca:
         f6:18:20:06:df:a7:64:e3:95:0c:1d:0e:5d:a8:bd:7d:4b:27:
         2a:78:1a:f7:e9:b2:4c:e5:1b:62:8a:c3:43:0e:ed:2e:1b:a9:
         bd:c9:e3:36:97:45:f9:18:9a:8a:94:96:f8:e9:ed:2c:89:f1:
         10:c2:b7:4d:8c:d0:b3:80:d0:17:ac:48:96:a6:6a:da:e2:49:
         06:ab:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 17:21:27 2026 by rpki-client