Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33362d3336203d3e203533303735.roa
File:                     323830343a3931303a3a2f33362d3336203d3e203533303735.roa (raw, json)
Hash identifier:          WCrXazA+FA46RV+4yIjYYOxTIS6nmglSXUtPwTUWKm4=
Subject key identifier:   AE:E4:AC:82:44:54:82:8A:55:F8:68:EB:1C:D6:54:78:75:50:99:4E
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       072E5DA99258855CEC2FC671157DF8AC268C4D59
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33362d3336203d3e203533303735.roa
Signing time:             Mon 02 Nov 2026 00:06:58 +0000
ROA not before:           Mon 02 Nov 2026 00:01:58 +0000
ROA not after:            Mon 01 Nov 2027 00:06:58 +0000
asID:                     53075
IP address blocks:        2804:910::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2e:5d:a9:92:58:85:5c:ec:2f:c6:71:15:7d:f8:ac:26:8c:4d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Nov  2 00:01:58 2026 GMT
            Not After : Nov  1 00:06:58 2027 GMT
        Subject: CN=AEE4AC824454828A55F868EB1CD654787550994E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:d7:ad:5f:31:61:ab:2e:11:40:5f:82:86:
                    f5:33:46:9a:d5:76:a2:3f:6e:42:2a:26:47:20:63:
                    e1:28:6f:18:d8:82:94:0e:49:f0:55:a3:d8:8e:25:
                    d9:8f:e5:84:91:d9:ae:f8:75:38:52:19:ba:b6:49:
                    e5:88:0d:fb:8f:3b:32:9c:81:6e:f4:e1:da:48:cb:
                    93:4f:33:89:2c:28:c4:53:b4:73:d6:a7:f1:ca:18:
                    61:d8:00:34:da:87:84:40:fd:8c:19:3b:48:b9:c5:
                    e4:5d:f3:50:a1:7d:d5:bc:1b:f1:2d:ea:71:03:cb:
                    1f:80:b9:19:ee:ef:76:8b:7e:3b:4a:2d:f7:95:d9:
                    03:bd:cb:bb:7e:bc:c6:ee:c9:5c:22:d2:93:27:fb:
                    a8:46:93:2c:fb:41:66:be:89:7d:f8:89:a2:7f:ce:
                    51:97:7a:60:cb:a5:d2:9f:8a:c6:9b:d5:b7:20:53:
                    2e:74:c5:df:c7:25:ed:b2:70:da:2c:50:b4:57:96:
                    cf:bc:6e:ba:74:67:a5:76:bd:03:7f:a4:e5:6c:9a:
                    ba:ca:37:5c:18:25:3c:b3:f5:c2:7c:01:78:45:f1:
                    ed:d0:1a:3c:b4:dc:58:08:75:bb:f3:ad:27:2b:df:
                    2d:f8:aa:e8:71:15:1b:fc:37:62:b8:3c:95:aa:9e:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:AC:82:44:54:82:8A:55:F8:68:EB:1C:D6:54:78:75:50:99:4E
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/323830343a3931303a3a2f33362d3336203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:01:b6:f6:ba:34:3b:94:6f:0c:61:67:12:8c:69:21:36:
         0d:6c:0e:4c:19:9e:97:15:78:88:ac:66:db:32:1f:17:78:30:
         0e:d2:a6:2a:9c:7f:8e:6f:5c:43:4b:c5:6b:8f:cd:70:d6:a9:
         af:9f:95:2e:a5:76:45:7e:f4:df:42:9b:94:34:e3:d1:40:01:
         e9:d0:1d:b6:c9:17:6c:76:ae:9a:a1:78:92:f1:4f:07:44:63:
         5f:44:db:b8:ce:90:04:5c:90:41:a2:a1:bc:bc:1f:a9:b3:b8:
         95:a8:2e:f9:e9:49:ed:f4:a3:17:8b:9c:2f:14:a8:9e:2e:25:
         c1:23:fc:1e:f6:32:3a:2d:0d:ed:2a:4a:68:16:bd:cf:3d:43:
         fa:fe:bf:fb:4c:42:25:da:68:c2:fb:97:76:e8:23:81:1c:ab:
         cb:47:62:53:df:ab:4a:a7:96:14:93:9d:14:6f:e2:67:db:86:
         13:ef:69:8b:4e:90:c6:48:ba:d0:90:6f:ae:4c:54:db:12:26:
         de:f2:e1:51:93:97:8a:18:bb:76:75:d0:00:82:c5:6b:62:a6:
         c6:c1:31:fe:98:45:be:59:67:e3:c0:98:34:eb:62:a7:5b:de:
         74:33:94:27:32:8e:3c:b9:e4:b8:77:d5:ac:60:e3:25:a9:fb:
         46:fb:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:02:41 2026 by rpki-client