Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
File:                     323830343a383461633a3a2f33322d3438203d3e203238323233.roa (raw, json)
Hash identifier:          z6Z+Etu8bzez8tdNGraPa9Mm2LqPgzQgsKRpazP8PoM=
Subject key identifier:   57:AD:B0:AF:E4:E1:CF:3F:33:EC:26:7B:15:7C:8E:B4:14:3F:68:C0
Certificate issuer:       /CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
Certificate serial:       3CD0D22C08BA1783F97E24705353800E5BAA0D23
Authority key identifier: 27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa
Signing time:             Fri 23 Oct 2026 13:25:05 +0000
ROA not before:           Fri 23 Oct 2026 13:20:05 +0000
ROA not after:            Fri 22 Oct 2027 13:25:05 +0000
asID:                     28223
IP address blocks:        2804:84ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 20:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:d2:2c:08:ba:17:83:f9:7e:24:70:53:53:80:0e:5b:aa:0d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E1FC1146B53B145E431E07B4ED589B8C84542B
        Validity
            Not Before: Oct 23 13:20:05 2026 GMT
            Not After : Oct 22 13:25:05 2027 GMT
        Subject: CN=57ADB0AFE4E1CF3F33EC267B157C8EB4143F68C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:f4:71:a5:83:30:7f:75:b5:85:f6:bb:3e:
                    09:26:dc:48:4a:f8:f3:0a:ae:87:e4:31:b2:f8:0a:
                    5d:3d:d0:0a:e4:31:12:91:62:b4:09:dc:1b:60:18:
                    f2:73:26:67:6d:98:89:c1:05:b3:a9:a4:ad:f1:c1:
                    5d:1f:cc:ac:0c:c2:a1:93:cd:f2:89:3a:66:69:9c:
                    75:14:8b:8b:92:f7:e0:07:e4:73:05:b4:93:fc:38:
                    7a:e8:42:7c:3b:17:63:f5:63:54:63:21:43:dc:86:
                    40:0c:b6:80:e6:cf:b4:43:70:99:e4:c7:ad:15:de:
                    95:76:42:d4:5a:11:af:1c:79:76:16:a7:87:68:0d:
                    25:54:dd:e3:c1:f6:42:bb:c9:6a:43:71:31:62:65:
                    87:99:c1:a8:8c:7b:4d:6a:51:d9:be:25:37:89:52:
                    bc:e3:11:05:7f:05:0e:af:fc:cd:80:b2:90:84:94:
                    c7:a0:bb:41:c9:fc:29:24:de:87:ff:87:f3:77:f3:
                    9d:30:80:c7:17:5c:a1:68:92:5a:ba:f3:28:74:b0:
                    3c:d8:24:39:bb:fa:1a:33:27:8f:3f:fa:a0:99:57:
                    11:2b:f7:78:97:a7:5d:8d:a8:d2:dc:e9:f5:e3:45:
                    fc:85:ae:5d:88:54:10:15:58:74:54:ba:b5:34:67:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AD:B0:AF:E4:E1:CF:3F:33:EC:26:7B:15:7C:8E:B4:14:3F:68:C0
            X509v3 Authority Key Identifier:
                keyid:27:E1:FC:11:46:B5:3B:14:5E:43:1E:07:B4:ED:58:9B:8C:84:54:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/27E1FC1146B53B145E431E07B4ED589B8C84542B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27E1FC1146B53B145E431E07B4ED589B8C84542B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a3a2f33322d3438203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:d9:d2:b2:3d:7e:1d:7c:a9:c5:b6:05:63:0f:0d:59:56:
         7f:82:ff:14:47:0f:6b:2d:33:ac:7d:93:49:2a:a4:f0:6b:6c:
         7e:fd:df:dc:c3:5b:85:e1:5b:f7:92:43:71:ac:e5:d4:5c:5f:
         4d:72:e6:32:40:9e:f7:a3:95:51:42:06:90:fd:f2:7e:0d:5c:
         ab:b7:a4:09:27:d9:b0:fa:2f:79:48:86:7a:c4:46:a8:a7:47:
         85:85:76:22:8a:7b:8e:49:ed:62:e0:49:31:89:eb:ca:e1:72:
         f8:df:4a:68:51:aa:61:70:91:23:82:ac:a9:67:b2:b3:4c:5d:
         f3:3e:75:96:b7:75:d6:ea:46:b2:75:10:b8:31:76:9e:f6:e2:
         51:82:d1:0d:51:0c:84:24:8e:7c:29:6f:e9:05:a2:31:54:40:
         3e:28:b3:37:cb:27:3a:d4:19:f4:29:8b:d9:2c:8d:a8:08:3d:
         00:11:7a:17:83:ce:9c:fc:ec:3f:d4:5b:2e:e7:d9:b2:0c:16:
         ca:72:b9:51:de:fb:6a:c1:65:ad:3e:00:a5:f8:1c:0f:42:c7:
         19:73:7b:ad:ac:df:7e:9f:00:3d:0b:58:f2:cd:43:bf:0e:32:
         64:44:d0:b2:40:76:ad:91:81:4b:4a:9e:2f:ae:90:4c:85:f3:
         5e:d9:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:04:35 2026 by rpki-client