Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a613730303a3a2f34302d3430203d3e20323733343433.roa
File:                     323830343a386562343a613730303a3a2f34302d3430203d3e20323733343433.roa (raw, json)
Hash identifier:          wreiaoSQRMaxIU8WdE09yMr+pnO6cnpoAUlcypyUZVI=
Subject key identifier:   53:91:BE:D7:EA:FF:10:2C:CD:20:78:15:67:A5:FB:A0:E3:E6:E5:74
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       7902F8B465C068A44E6D74C106BCC1B1D12EEF94
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a613730303a3a2f34302d3430203d3e20323733343433.roa
Signing time:             Thu 01 Oct 2026 18:21:38 +0000
ROA not before:           Thu 01 Oct 2026 18:16:38 +0000
ROA not after:            Thu 30 Sep 2027 18:21:38 +0000
asID:                     273443
IP address blocks:        2804:8eb4:a700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 02:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:f8:b4:65:c0:68:a4:4e:6d:74:c1:06:bc:c1:b1:d1:2e:ef:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct  1 18:16:38 2026 GMT
            Not After : Sep 30 18:21:38 2027 GMT
        Subject: CN=5391BED7EAFF102CCD20781567A5FBA0E3E6E574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:62:47:83:cc:09:a3:7f:19:45:27:0c:70:
                    79:f0:3c:d3:73:69:1e:5d:3d:af:79:61:40:5e:9f:
                    af:88:76:71:d3:89:68:28:07:34:ab:4b:d8:77:42:
                    e8:65:63:25:d5:cd:86:25:2c:e0:4d:f5:31:5d:9f:
                    0e:38:3a:0d:cc:d0:36:fa:89:0b:dc:f9:92:58:e3:
                    88:c2:e7:11:d8:d3:7a:94:8a:92:5d:5f:15:63:d9:
                    1a:c7:5d:a1:08:09:44:c6:5a:46:55:e6:71:78:2f:
                    b0:73:99:a5:31:26:31:de:34:76:c3:7d:ae:a7:76:
                    a5:3d:aa:d5:7e:d1:da:02:ae:fb:bb:36:17:90:98:
                    58:75:aa:64:da:c0:cf:e6:cd:24:5f:70:bc:e0:6f:
                    07:03:0a:dc:cd:ac:92:9f:17:22:4a:21:46:07:a2:
                    a6:20:51:85:8f:3e:a8:2d:71:55:e4:fb:2a:36:29:
                    de:f1:c7:e7:46:2d:b5:c7:80:6d:59:de:97:d7:50:
                    9f:fc:b1:6f:a2:b4:2a:48:6d:6b:1f:17:ae:00:52:
                    ef:23:a6:42:94:4f:ab:de:56:4c:68:51:58:84:db:
                    33:b3:72:48:21:3a:05:f1:b8:35:69:d5:43:78:07:
                    aa:e4:7d:ee:87:94:36:ee:11:41:a1:2b:25:89:bb:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:91:BE:D7:EA:FF:10:2C:CD:20:78:15:67:A5:FB:A0:E3:E6:E5:74
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/323830343a386562343a613730303a3a2f34302d3430203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb4:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:17:8b:cd:9f:55:b5:7e:c2:2c:32:e5:1d:77:e0:f9:eb:93:
         79:91:e8:9d:e2:a6:4c:aa:0f:64:67:88:1f:3f:20:08:2c:8d:
         92:67:b0:e4:ac:68:53:d7:0a:3d:3f:b9:77:b3:ec:84:79:49:
         b4:f5:50:10:b8:26:74:82:44:a0:0d:26:b2:fd:75:19:22:10:
         50:aa:9e:00:09:e5:cd:30:da:99:3a:a4:00:3f:0b:76:a6:aa:
         a4:da:3b:7c:10:2b:81:10:44:63:69:19:83:5f:cb:3a:8d:86:
         0e:d4:c0:73:7e:2e:b6:79:46:71:d6:fc:42:9e:1f:3d:3a:15:
         90:c6:be:f5:7e:74:17:e7:a6:35:b3:43:f3:fc:02:5c:0f:20:
         8c:29:3b:45:87:cd:28:82:a2:5e:f6:25:26:0b:14:20:d8:11:
         6a:e9:fa:ea:13:54:6b:59:f4:7d:d6:02:32:d9:f8:f2:53:39:
         a2:a5:1b:3f:93:ef:1a:89:8f:36:87:96:81:e7:63:e7:a6:43:
         62:bf:9b:42:de:52:40:2d:3e:ee:d4:f2:a0:ba:c8:a1:89:1d:
         1c:c9:69:e1:d9:e0:bd:54:14:5f:85:db:38:d0:97:92:f9:91:
         31:83:aa:74:28:c8:5c:7f:8b:77:b1:60:bd:53:ad:63:2c:5a:
         bc:17:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:24 2026 by rpki-client