Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
File:                     323830343a333265303a3a2f33322d3336203d3e20323635313032.roa (raw, json)
Hash identifier:          OfdtChBgab2wrznFFy+LmAWqKKVt1fdnNzay/Sb0nwc=
Subject key identifier:   E9:F9:83:80:EF:6A:5D:7B:A0:52:83:15:E0:A0:05:65:BD:AD:D5:73
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       7CC00AAB112D606B67CDB4E94D60097881D76007
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa
Signing time:             Tue 22 Sep 2026 14:06:59 +0000
ROA not before:           Tue 22 Sep 2026 14:01:59 +0000
ROA not after:            Tue 21 Sep 2027 14:06:59 +0000
asID:                     265102
IP address blocks:        2804:32e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 22:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:0a:ab:11:2d:60:6b:67:cd:b4:e9:4d:60:09:78:81:d7:60:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: Sep 22 14:01:59 2026 GMT
            Not After : Sep 21 14:06:59 2027 GMT
        Subject: CN=E9F98380EF6A5D7BA0528315E0A00565BDADD573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:d2:97:bc:ad:1b:7a:0f:f8:9c:f8:dd:f6:
                    55:51:80:a3:3a:d8:8d:49:98:b9:f8:f3:75:bc:74:
                    29:d3:bf:f0:8a:df:a7:63:da:9d:c6:65:07:c8:ba:
                    bc:28:17:dd:a7:83:25:a8:07:b8:98:7a:ca:7b:21:
                    8f:9f:6e:ec:bd:3f:d8:48:15:37:53:66:77:b7:18:
                    85:6a:d1:0a:aa:e5:27:df:b5:5e:f8:d2:bf:05:df:
                    34:9f:24:d7:22:84:3a:5a:c1:91:99:71:e4:d3:51:
                    a1:f3:51:71:d9:70:6a:da:d2:66:01:44:47:7b:92:
                    bf:5b:71:a1:56:65:e3:40:ea:9c:13:91:da:01:e4:
                    1c:05:9e:a8:20:f8:5d:27:08:de:91:23:2e:43:5c:
                    52:4b:e4:1d:ec:5c:ef:7a:18:27:41:2d:f2:c4:6a:
                    b8:ed:46:19:ec:5c:8b:d5:25:52:15:0b:a7:ab:4a:
                    e2:f3:cf:91:16:ed:bb:d5:ea:b1:53:19:5f:1f:ee:
                    e2:92:ff:21:c0:93:17:c3:ed:70:4d:91:e6:83:dc:
                    59:3c:fc:98:3e:15:f0:d5:32:df:c0:fc:a9:fb:c6:
                    10:29:50:6b:04:5e:88:aa:7e:de:e9:e8:d2:43:cd:
                    fc:5f:2a:8a:5a:43:d9:1f:2c:18:bf:bb:37:7d:c9:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F9:83:80:EF:6A:5D:7B:A0:52:83:15:E0:A0:05:65:BD:AD:D5:73
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/323830343a333265303a3a2f33322d3336203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:47:cf:fa:b7:e8:28:9a:d1:ac:9b:92:76:ca:4c:a1:8b:ee:
         c3:ce:3b:cd:ff:de:7e:30:bc:60:8f:6b:38:8d:fa:b2:ea:5a:
         fb:c8:da:5e:b2:a8:c5:97:94:13:1f:00:ae:4f:25:cd:9b:9f:
         25:33:4d:72:4e:e7:41:58:4a:1c:fa:d9:10:aa:92:bc:9d:82:
         f8:82:91:0a:2d:9e:7a:32:b8:91:4e:77:69:51:8a:80:4e:4d:
         99:76:7d:fa:ea:ca:57:29:21:f1:0c:7a:d8:1c:ec:ce:1c:f6:
         63:bb:25:58:91:49:25:5c:57:8d:5a:f9:22:66:52:97:e0:78:
         18:77:b1:54:96:42:5c:53:d3:db:48:57:28:20:28:c6:dd:05:
         a1:ac:72:4a:d1:d2:16:54:8e:95:19:44:0c:c5:ce:e2:eb:dd:
         06:46:07:bb:e7:7e:67:0b:52:0b:7d:1a:b9:a2:ec:fc:ca:0c:
         df:0d:e4:b9:c1:1b:38:02:8b:fe:90:03:e3:38:60:e2:41:0c:
         7c:ee:dd:5b:73:d2:60:72:5f:2a:8d:93:4d:9f:ff:84:36:39:
         a9:17:77:17:97:2e:03:02:cd:70:bc:99:e4:3b:e3:85:0e:aa:
         6e:9d:8f:84:28:49:ea:eb:d9:af:9a:38:e8:d4:0f:6a:e4:73:
         2b:72:7d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:52:19 2026 by rpki-client