Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa
File:                     323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier:          LLufeGc6PP57xbNJT/x0T1V0sVd0Sk/QIL9ih7R8018=
Subject key identifier:   E8:28:32:85:76:54:C8:D9:0C:81:91:8A:5F:CD:78:CC:D2:1A:CD:41
Certificate issuer:       /CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
Certificate serial:       297277AD6E9EB66F43E52F19D26B491125507AB1
Authority key identifier: 43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa
Signing time:             Tue 29 Sep 2026 12:00:00 +0000
ROA not before:           Tue 29 Sep 2026 11:55:00 +0000
ROA not after:            Tue 28 Sep 2027 12:00:00 +0000
asID:                     272220
IP address blocks:        2804:1f54:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl
                          rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 11:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:72:77:ad:6e:9e:b6:6f:43:e5:2f:19:d2:6b:49:11:25:50:7a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F6494105F288322AFC1D7A1BF2AD6C876579D8
        Validity
            Not Before: Sep 29 11:55:00 2026 GMT
            Not After : Sep 28 12:00:00 2027 GMT
        Subject: CN=E82832857654C8D90C81918A5FCD78CCD21ACD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:30:fe:0a:55:8d:a2:64:d3:72:c9:d4:81:
                    fc:ee:6e:95:00:67:b3:13:9f:9a:91:b2:f5:c2:7b:
                    dc:f3:00:72:78:54:90:b6:24:fd:4b:36:2c:ef:74:
                    06:f8:fc:08:72:2d:75:70:b4:f9:b3:78:80:54:e8:
                    c0:f5:56:e0:56:ef:1b:b7:b9:4d:94:05:61:46:e8:
                    62:61:f4:8e:03:60:a4:cf:24:71:8a:47:93:64:ac:
                    58:31:cd:53:cd:eb:be:74:8c:99:89:a6:a3:3d:2b:
                    ff:9a:5b:bc:68:58:bf:48:4d:8c:a6:82:bd:36:fb:
                    8a:24:ac:db:00:cf:96:01:87:c5:90:dd:3a:25:a6:
                    b2:d9:37:31:c6:cb:af:07:a4:f9:ed:16:3e:84:6b:
                    d5:0d:4b:2e:e7:2f:b0:a7:01:8a:d3:49:64:af:f9:
                    e9:bb:3c:e0:9d:44:1d:f6:c4:fd:d0:39:18:6d:8b:
                    f5:bd:bd:14:0d:13:30:76:41:43:90:8b:90:b2:3e:
                    9f:74:79:d3:c6:f5:6e:27:7a:5a:55:12:b0:3e:3e:
                    5c:75:88:d7:1d:36:56:5d:95:2a:ab:36:c2:c3:e0:
                    fc:b8:63:72:30:96:88:2e:16:2e:4c:62:46:a4:e3:
                    46:65:18:de:31:91:00:90:80:15:10:27:f6:ca:b7:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:32:85:76:54:C8:D9:0C:81:91:8A:5F:CD:78:CC:D2:1A:CD:41
            X509v3 Authority Key Identifier:
                keyid:43:F6:49:41:05:F2:88:32:2A:FC:1D:7A:1B:F2:AD:6C:87:65:79:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/43F6494105F288322AFC1D7A1BF2AD6C876579D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43F6494105F288322AFC1D7A1BF2AD6C876579D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/0/323830343a316635343a666630303a3a2f34302d3430203d3e20323732323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f54:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:03:28:28:a9:6e:e7:f3:30:08:64:35:7e:d6:24:82:90:72:
         3f:44:3d:72:1b:b5:ca:60:9e:81:77:db:10:4a:92:65:4c:e4:
         9e:1a:7f:70:91:c7:e2:4b:ee:5a:b9:69:95:c4:e6:64:46:8d:
         51:46:3e:04:2f:75:49:e5:8e:39:fd:ca:09:6f:f8:e1:1f:ba:
         80:8e:56:1b:b4:f2:e2:82:07:8e:68:27:2f:20:07:14:30:26:
         a3:02:5b:22:84:2e:35:05:74:7f:aa:48:7e:50:da:72:a5:d5:
         3f:f0:7e:45:c3:02:58:d8:cc:bd:94:4f:2a:0d:d4:c1:0c:84:
         b5:97:a8:95:ee:81:d3:0e:52:bc:33:c8:f8:2b:d0:86:9d:4e:
         85:b4:5f:8b:ee:25:ee:bf:cf:90:46:fd:a9:f7:c7:df:5f:82:
         91:43:aa:e1:e5:52:15:33:36:d0:ad:31:38:13:ee:0d:d4:e4:
         17:cc:8c:b1:50:b9:5e:7d:3c:1c:c1:56:f2:10:1e:90:f7:d4:
         2e:d6:9a:95:a9:96:22:af:56:20:da:b4:9c:6d:1b:2f:3a:e7:
         71:28:25:f0:39:ba:97:74:37:b3:ac:72:46:65:03:5b:ca:76:
         93:ad:8a:ad:9a:95:55:47:a8:14:00:48:47:8b:37:90:02:2b:
         90:a5:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----