Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa
File:                     323830343a376264633a3a2f33322d313238203d3e20323731343539.roa (raw, json)
Hash identifier:          PAqvWliC4XVD5dTtL8yU7AA86JO724tY/YRK59nYAbs=
Subject key identifier:   8E:AA:99:B5:D5:93:90:30:49:94:14:DD:38:A8:B1:B8:07:13:A0:03
Certificate issuer:       /CN=49974245DAE2998045E6D85E6D99256AFE462C70
Certificate serial:       2A7B57B395FA88F4783BFAEFA7EB75F6576EA8FC
Authority key identifier: 49:97:42:45:DA:E2:99:80:45:E6:D8:5E:6D:99:25:6A:FE:46:2C:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49974245DAE2998045E6D85E6D99256AFE462C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa
Signing time:             Tue 27 Oct 2026 12:51:08 +0000
ROA not before:           Tue 27 Oct 2026 12:46:08 +0000
ROA not after:            Tue 26 Oct 2027 12:51:08 +0000
asID:                     271459
IP address blocks:        2804:7bdc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/49974245DAE2998045E6D85E6D99256AFE462C70.crl
                          rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/49974245DAE2998045E6D85E6D99256AFE462C70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49974245DAE2998045E6D85E6D99256AFE462C70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7b:57:b3:95:fa:88:f4:78:3b:fa:ef:a7:eb:75:f6:57:6e:a8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49974245DAE2998045E6D85E6D99256AFE462C70
        Validity
            Not Before: Oct 27 12:46:08 2026 GMT
            Not After : Oct 26 12:51:08 2027 GMT
        Subject: CN=8EAA99B5D5939030499414DD38A8B1B80713A003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:c8:97:7e:4f:f9:c0:e6:7e:0e:eb:e6:1e:
                    dd:3e:29:e8:e9:31:83:53:3f:c7:c7:86:85:92:6f:
                    b0:83:2d:20:36:54:7c:0b:48:d5:70:0d:68:9b:4d:
                    f2:c0:63:9d:a6:77:eb:30:7c:9f:2f:84:bc:3b:e6:
                    0f:fb:4e:e2:c3:0f:15:27:eb:3e:00:51:d4:ba:97:
                    f1:2c:e6:44:9a:ae:1a:87:2d:64:79:c5:6e:c0:f0:
                    52:0d:73:fa:44:b4:6f:a9:c2:3f:a5:d7:39:22:92:
                    ec:3a:1b:8e:a3:cf:35:86:36:c6:d2:ad:4e:c5:97:
                    47:11:ca:e0:15:7b:7b:49:6f:41:9f:93:49:a8:77:
                    af:5d:ad:3c:63:32:46:d8:35:f1:51:7f:61:82:07:
                    1e:1c:06:df:ca:f6:f5:e1:1c:ad:fc:f9:bb:5b:d9:
                    c6:78:a0:d1:c1:95:38:ad:c3:87:38:42:cf:cb:d9:
                    b2:c0:c6:2c:2d:0d:b5:96:a6:88:cc:2b:e2:13:e5:
                    53:c3:33:57:46:f2:14:d3:9d:e7:a7:5d:05:14:d3:
                    3f:18:b6:ac:fd:36:54:a1:31:9f:f2:e0:ee:c4:a3:
                    62:36:11:97:a8:a2:1e:6b:4b:f7:88:be:8e:36:8d:
                    bb:dc:58:85:de:20:20:1a:3f:b9:b8:a0:ab:d0:f5:
                    4f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AA:99:B5:D5:93:90:30:49:94:14:DD:38:A8:B1:B8:07:13:A0:03
            X509v3 Authority Key Identifier:
                keyid:49:97:42:45:DA:E2:99:80:45:E6:D8:5E:6D:99:25:6A:FE:46:2C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/49974245DAE2998045E6D85E6D99256AFE462C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49974245DAE2998045E6D85E6D99256AFE462C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/0/323830343a376264633a3a2f33322d313238203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:2f:d7:c2:2c:5f:44:4a:6a:12:64:51:05:5e:95:39:fc:
         28:57:1a:5f:97:9f:cf:db:af:da:72:e4:be:f7:3d:45:f4:22:
         65:4f:f7:46:03:e4:cc:5c:5f:bd:af:2d:6c:8a:7e:dc:91:cc:
         0b:dd:40:5c:85:35:b3:a0:9a:20:cc:e7:ee:e7:8e:ec:4a:21:
         af:19:bf:a9:88:b8:0c:f5:4a:64:f6:3c:70:0b:f6:1b:84:62:
         e8:ba:7a:e3:95:06:d7:93:0f:8d:cc:8d:03:4e:04:95:7d:51:
         48:83:29:e8:38:3f:b3:40:a5:7b:75:2d:4f:f5:a4:91:cc:ee:
         20:19:78:a4:e5:37:69:51:20:aa:40:ae:e7:43:14:b8:3e:ef:
         99:5f:6e:9e:1c:7a:d1:09:07:b1:a6:76:92:3a:b1:63:9e:19:
         71:05:9e:ae:09:13:37:84:e7:c1:50:d2:8a:08:90:65:9d:9b:
         ce:7b:d2:8f:07:fd:18:70:43:aa:f5:11:c8:dc:a0:6b:22:67:
         8d:cb:8c:16:ba:c8:c2:dc:8d:b3:b0:32:b3:9b:73:46:f6:46:
         9c:97:f2:37:4a:a6:8c:ee:4d:6d:cb:cd:ca:7a:8e:69:a4:0d:
         cf:61:1b:72:41:ca:f2:80:51:b6:a4:2a:d0:36:8e:99:76:88:
         d4:a6:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:52:03 2026 by rpki-client