Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa
File:                     323830343a373434633a3a2f33322d313238203d3e20323730393732.roa (raw, json)
Hash identifier:          mAGeWyOvupLK4mwbC2bZEedIO8bvuJ3ctka2BKLLPko=
Subject key identifier:   51:65:15:39:6F:C4:5D:2F:23:75:83:DF:A8:C9:16:85:DB:57:28:9A
Certificate issuer:       /CN=BF36A2B9A3E27762F582C1C4B5497A28F4298803
Certificate serial:       7C862B30F166A78DB2223FB677F082D94935F36E
Authority key identifier: BF:36:A2:B9:A3:E2:77:62:F5:82:C1:C4:B5:49:7A:28:F4:29:88:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa
Signing time:             Wed 02 Sep 2026 01:47:31 +0000
ROA not before:           Wed 02 Sep 2026 01:42:31 +0000
ROA not after:            Wed 01 Sep 2027 01:47:31 +0000
asID:                     270972
IP address blocks:        2804:744c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:86:2b:30:f1:66:a7:8d:b2:22:3f:b6:77:f0:82:d9:49:35:f3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF36A2B9A3E27762F582C1C4B5497A28F4298803
        Validity
            Not Before: Sep  2 01:42:31 2026 GMT
            Not After : Sep  1 01:47:31 2027 GMT
        Subject: CN=516515396FC45D2F237583DFA8C91685DB57289A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:bf:99:60:13:8d:81:02:9c:d3:74:42:18:
                    c4:fd:1c:c6:99:42:bc:59:db:b2:2a:6d:cb:14:56:
                    8f:e7:7e:56:15:92:62:04:47:91:59:2d:64:5f:eb:
                    e4:ef:95:db:21:ad:53:34:01:19:0f:32:86:6c:08:
                    b9:21:f0:a0:de:56:ec:31:1d:3b:d8:ec:79:93:b1:
                    53:5a:81:a6:11:e3:92:0b:25:af:8e:b6:a7:1d:b9:
                    95:b7:52:8b:97:4a:be:9c:93:69:4f:97:1c:d7:ca:
                    31:dd:c3:44:65:5d:af:eb:cd:24:fc:d1:28:9f:f1:
                    87:6f:f7:e5:0e:46:14:d1:b7:cd:e1:6e:54:6c:49:
                    9a:2b:60:23:92:ac:76:62:b9:be:1d:2a:ab:11:38:
                    c8:f2:ed:77:f7:e0:a5:08:19:d7:32:10:f8:1d:14:
                    1f:1d:0c:36:25:21:01:75:a4:81:10:4b:6c:3f:e8:
                    73:24:21:21:de:1e:9f:5f:d4:6b:c9:f1:a3:18:79:
                    52:6b:c1:87:65:92:f6:a3:c6:2f:77:e1:50:d5:45:
                    70:2e:91:bf:e2:40:95:19:04:65:0b:2c:b0:5d:55:
                    db:4b:1a:6e:e1:b1:5b:43:2f:41:28:6e:96:71:a8:
                    30:49:5b:04:71:00:ac:fd:17:ef:d5:a8:63:44:35:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:15:39:6F:C4:5D:2F:23:75:83:DF:A8:C9:16:85:DB:57:28:9A
            X509v3 Authority Key Identifier:
                keyid:BF:36:A2:B9:A3:E2:77:62:F5:82:C1:C4:B5:49:7A:28:F4:29:88:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/BF36A2B9A3E27762F582C1C4B5497A28F4298803.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF36A2B9A3E27762F582C1C4B5497A28F4298803.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/323830343a373434633a3a2f33322d313238203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:744c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:91:45:11:3d:55:b9:0f:07:10:ee:4c:35:b5:e9:6f:79:5a:
         cd:e6:bb:63:cb:81:cc:6b:d0:8d:8f:54:d7:2b:e1:e5:b6:d5:
         9b:3a:82:27:d6:69:be:d8:8f:09:9f:74:18:a3:c9:0f:2f:a5:
         2c:50:50:e2:ac:35:58:b9:a0:2e:b1:fd:47:ab:51:34:55:a5:
         72:0d:20:64:69:ec:b0:57:e7:dd:78:83:78:3f:f4:e2:25:1c:
         53:22:ee:ae:e5:81:9c:0c:fd:a3:8f:40:5d:04:8b:ed:d9:13:
         ff:71:f0:74:fc:51:75:9d:e2:8f:60:98:52:39:7e:a7:25:4a:
         b4:30:87:72:91:5e:4a:d1:55:9a:ad:78:9c:ae:34:18:bf:3c:
         71:52:6f:20:a9:4c:ce:42:fe:00:a1:44:c1:38:fe:bd:da:d3:
         70:4d:db:35:87:ea:30:2a:e8:1f:a2:32:90:58:cd:f4:61:04:
         e3:23:41:ab:ac:ae:ce:f6:25:bd:90:69:83:a8:77:8d:46:5a:
         72:66:23:6c:87:f8:89:8b:16:75:a2:f7:a2:44:a4:c2:48:3f:
         65:e3:c9:9e:ce:85:01:ef:ca:e7:03:84:1a:ae:45:6b:fd:c6:
         46:bb:e2:64:03:5f:35:f5:ee:dd:23:77:6a:d9:cd:88:d6:36:
         a4:aa:61:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:21:07 2026 by rpki-client