Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/323830343a383530303a3a2f33322d3332203d3e20323732353531.roa
File:                     323830343a383530303a3a2f33322d3332203d3e20323732353531.roa (raw, json)
Hash identifier:          CBIq5+SmYQ+347oARmwE53P6gjlXudiTkX7wOOA4njg=
Subject key identifier:   88:3C:F2:10:9B:B2:5B:A6:F7:40:36:DE:C1:C6:76:C3:6C:B8:40:99
Certificate issuer:       /CN=AACEE4867A0C24D908C141EFC783E360667720AB
Certificate serial:       259A48001F8D8E60913C6345E2DD2855CDC5BCF7
Authority key identifier: AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/323830343a383530303a3a2f33322d3332203d3e20323732353531.roa
Signing time:             Fri 25 Sep 2026 21:04:24 +0000
ROA not before:           Fri 25 Sep 2026 20:59:24 +0000
ROA not after:            Fri 24 Sep 2027 21:04:24 +0000
asID:                     272551
IP address blocks:        2804:8500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl
                          rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 09:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:48:00:1f:8d:8e:60:91:3c:63:45:e2:dd:28:55:cd:c5:bc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AACEE4867A0C24D908C141EFC783E360667720AB
        Validity
            Not Before: Sep 25 20:59:24 2026 GMT
            Not After : Sep 24 21:04:24 2027 GMT
        Subject: CN=883CF2109BB25BA6F74036DEC1C676C36CB84099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:ee:cb:fe:9f:6e:de:68:1f:53:a7:13:61:
                    b9:f5:b6:bc:bc:38:fa:e2:eb:5e:7f:aa:5b:76:fe:
                    64:db:3b:25:b0:7f:10:9c:71:1f:07:9e:db:a3:3a:
                    46:5b:14:1b:31:ea:ec:9d:bf:80:64:a9:f6:fc:62:
                    65:86:60:94:31:f7:df:b4:f7:72:89:33:a6:0c:f6:
                    87:77:1c:c3:de:04:43:36:82:11:56:24:15:79:f6:
                    da:14:14:c8:cf:e3:b9:f1:20:7f:b0:bf:ca:66:dc:
                    f7:f9:87:ee:e2:ac:36:b2:87:eb:c7:09:3a:2e:49:
                    64:45:24:67:86:a6:91:85:94:ef:56:ff:d3:82:a8:
                    30:2c:d0:ee:9e:99:c6:bb:81:ed:28:29:67:65:e9:
                    d6:2b:7c:59:04:cc:f6:3d:fd:a9:bf:8b:dd:c6:64:
                    5d:b5:8c:8c:c9:b5:8c:45:6a:fd:2c:61:f9:83:c7:
                    dc:77:40:d6:60:75:70:88:8e:cf:a1:18:dd:86:1c:
                    ea:0d:89:53:b0:f3:10:8b:05:ee:f6:39:a2:31:be:
                    bb:e7:47:3a:bf:a7:76:f9:bc:cf:39:f5:1d:51:db:
                    7f:3e:82:4f:3f:f9:a9:46:96:e2:f8:34:90:b6:cf:
                    b6:7f:45:44:66:14:18:b6:9b:0d:8c:26:5f:85:48:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3C:F2:10:9B:B2:5B:A6:F7:40:36:DE:C1:C6:76:C3:6C:B8:40:99
            X509v3 Authority Key Identifier:
                keyid:AA:CE:E4:86:7A:0C:24:D9:08:C1:41:EF:C7:83:E3:60:66:77:20:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/AACEE4867A0C24D908C141EFC783E360667720AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AACEE4867A0C24D908C141EFC783E360667720AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzRjPRLMR1hUnhk5C6S9rbawsPTCBmR75ZgD4126rUc8/0/323830343a383530303a3a2f33322d3332203d3e20323732353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8500::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:02:2c:63:bf:f8:aa:6a:54:20:e9:e1:45:44:8c:38:e9:
         6c:98:8b:cd:90:9d:76:ac:55:0b:fd:7a:57:d4:b3:ed:8c:3b:
         63:05:9b:97:83:6f:dd:60:e0:7e:e0:db:b3:58:d0:b1:e1:3c:
         18:8d:85:2d:1c:39:59:8d:4a:23:cb:85:40:2f:94:11:c3:66:
         59:12:86:4d:f2:f0:42:9c:d8:2f:5f:11:64:9c:5a:15:1e:7c:
         86:b5:44:e9:ba:2e:c1:a9:0f:0f:9d:69:1b:f1:55:19:44:df:
         21:76:3f:56:6b:ef:e0:82:f1:a6:c4:3a:a4:4c:2d:e2:22:43:
         53:85:32:96:2a:a7:b3:a0:ed:4f:2e:2e:18:bb:84:bc:b0:5e:
         ce:6c:74:df:b2:24:05:5e:dc:94:8c:ee:dd:25:aa:f1:5e:61:
         a6:d6:38:43:9c:93:15:7d:dd:16:99:7c:e6:0e:c6:7b:fe:d2:
         de:5a:1d:98:7b:ec:91:c8:64:95:87:f4:5c:64:69:59:4d:98:
         96:b6:bd:14:65:a8:4c:e3:45:90:23:32:04:93:c0:4f:13:01:
         c3:8e:13:c6:03:a2:64:27:9f:27:7e:87:b1:d3:9a:b6:b9:88:
         15:99:6d:34:9b:f8:a4:83:c8:75:9b:5b:3b:b8:e9:20:7e:84:
         2b:78:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:33:06 2026 by rpki-client