Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a633030303a3a2f33342d3334203d3e20323639363635.roa
File:                     323830343a363830343a633030303a3a2f33342d3334203d3e20323639363635.roa (raw, json)
Hash identifier:          kUitexs9vE3A1Ua9MiN61hHUjy09Tcn6qWLe2ZR1rVA=
Subject key identifier:   63:99:C1:F6:57:A4:3E:F2:65:B1:DC:EB:75:A4:A7:66:85:A3:F9:15
Certificate issuer:       /CN=054909F1A4E8496D227A81ECF4A9154F1D934057
Certificate serial:       32052FB5BCD19D6B0475956BC8D0E3AF4AB1D1F0
Authority key identifier: 05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a633030303a3a2f33342d3334203d3e20323639363635.roa
Signing time:             Thu 17 Sep 2026 18:37:32 +0000
ROA not before:           Thu 17 Sep 2026 18:32:32 +0000
ROA not after:            Thu 16 Sep 2027 18:37:32 +0000
asID:                     269665
IP address blocks:        2804:6804:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl
                          rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:05:2f:b5:bc:d1:9d:6b:04:75:95:6b:c8:d0:e3:af:4a:b1:d1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054909F1A4E8496D227A81ECF4A9154F1D934057
        Validity
            Not Before: Sep 17 18:32:32 2026 GMT
            Not After : Sep 16 18:37:32 2027 GMT
        Subject: CN=6399C1F657A43EF265B1DCEB75A4A76685A3F915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:98:a3:8d:44:60:66:aa:70:99:da:74:c6:
                    21:94:9f:c6:65:cd:45:e2:7d:c7:a7:bb:1b:76:1f:
                    b6:05:d3:71:5f:a1:d9:17:98:df:bc:dc:1a:d1:50:
                    37:de:ea:fa:0f:9c:be:67:d6:fd:8d:df:93:03:aa:
                    22:5a:cf:90:99:bf:d8:09:94:a0:83:31:a2:ab:8d:
                    ae:eb:a4:8f:89:fc:8c:46:72:74:e1:8d:e2:b1:d7:
                    01:4e:86:9d:41:9b:55:8a:19:c3:ab:aa:1f:45:cc:
                    16:2e:ce:e7:b2:ad:47:5a:22:e9:0a:1d:a0:6e:ef:
                    b1:6a:0d:ad:b6:2a:2b:6f:4d:58:3e:6c:e7:eb:10:
                    8b:82:f1:89:b1:b7:d7:d1:f9:af:90:e0:c6:ac:7b:
                    b2:86:ce:63:5c:02:5d:f5:4b:4f:bd:d1:47:64:9e:
                    79:ff:59:e9:2f:e4:4a:92:22:54:67:00:f2:98:34:
                    55:1f:2d:97:7c:86:30:23:31:ce:11:31:2e:8c:56:
                    83:10:33:1c:5d:42:e3:ac:46:f8:45:fc:36:92:cc:
                    02:a8:66:30:1b:2c:dc:56:d5:c5:5a:7f:72:20:00:
                    3c:cd:8a:f6:4f:78:a1:b0:d5:6b:7d:ee:95:21:1d:
                    fb:54:40:fb:71:66:90:12:33:98:cc:b4:01:a6:41:
                    32:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:C1:F6:57:A4:3E:F2:65:B1:DC:EB:75:A4:A7:66:85:A3:F9:15
            X509v3 Authority Key Identifier:
                keyid:05:49:09:F1:A4:E8:49:6D:22:7A:81:EC:F4:A9:15:4F:1D:93:40:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/054909F1A4E8496D227A81ECF4A9154F1D934057.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/054909F1A4E8496D227A81ECF4A9154F1D934057.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhNxV4xhq8quzccPt9QL6eiQwqwvVzD9FRWGmUx1U5Jm/0/323830343a363830343a633030303a3a2f33342d3334203d3e20323639363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6804:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:e4:60:86:95:4b:69:8f:b6:6a:1b:33:b6:98:21:a0:d4:
         97:b5:61:45:78:6e:fe:0c:9b:10:b5:c2:2a:ff:b9:03:37:9d:
         9c:38:4c:e4:c9:39:52:80:da:03:3a:70:17:fb:99:ab:78:5d:
         fb:cb:62:1d:17:a7:f5:7b:71:c1:96:14:3d:99:d3:3d:b0:e9:
         87:03:b4:ec:f0:8a:7b:bd:95:45:81:cf:17:d8:db:ec:13:81:
         6c:88:50:f8:7d:37:7e:98:ef:42:33:79:1c:ef:79:de:24:11:
         d0:66:9e:b9:74:4d:6c:3d:db:c1:ef:75:27:b7:59:60:c7:f2:
         5a:04:e6:fc:f1:0e:8e:37:e4:be:b8:7f:98:95:5e:fb:ce:e0:
         32:da:9c:a3:8b:96:ae:d6:0b:55:83:fc:30:19:45:46:92:0d:
         c1:60:ad:a2:4e:90:30:cd:19:52:80:81:2c:6b:f2:f8:74:0c:
         77:cd:11:69:e1:c1:fd:b8:a7:7e:93:43:8e:c0:bc:bf:57:9d:
         3c:e1:1d:1e:07:c3:00:bd:d6:c3:e4:ad:1a:4d:02:7b:52:b2:
         bc:f5:5b:97:78:cf:c1:0a:93:90:3d:76:a0:f0:24:45:93:d8:
         a0:14:44:99:85:f9:e4:9a:8d:a1:26:63:5e:bc:46:d1:80:b2:
         1e:a6:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:30:21 2026 by rpki-client