Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
File:                     323830343a363637343a3a2f33322d3332203d3e20323639353539.roa (raw, json)
Hash identifier:          v3FMWa3hpk+hCcWiPUHT4ve+iCaLVoRO3Y4rVyHKOgQ=
Subject key identifier:   DB:31:C5:76:EE:F6:95:66:48:24:BB:BB:64:B7:94:C0:F9:F4:2E:9D
Certificate issuer:       /CN=58EA1BAA379234C366BD09E463793EF3ECA07837
Certificate serial:       0C2CD10EC344FC674729F3D2242560AFD4553631
Authority key identifier: 58:EA:1B:AA:37:92:34:C3:66:BD:09:E4:63:79:3E:F3:EC:A0:78:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58EA1BAA379234C366BD09E463793EF3ECA07837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa
Signing time:             Sat 17 Oct 2026 12:31:23 +0000
ROA not before:           Sat 17 Oct 2026 12:26:23 +0000
ROA not after:            Sat 16 Oct 2027 12:31:23 +0000
asID:                     269559
IP address blocks:        2804:6674::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/58EA1BAA379234C366BD09E463793EF3ECA07837.crl
                          rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/58EA1BAA379234C366BD09E463793EF3ECA07837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58EA1BAA379234C366BD09E463793EF3ECA07837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 25 Oct 2026 02:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2c:d1:0e:c3:44:fc:67:47:29:f3:d2:24:25:60:af:d4:55:36:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58EA1BAA379234C366BD09E463793EF3ECA07837
        Validity
            Not Before: Oct 17 12:26:23 2026 GMT
            Not After : Oct 16 12:31:23 2027 GMT
        Subject: CN=DB31C576EEF695664824BBBB64B794C0F9F42E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:8d:c5:e9:3d:50:4b:fd:e5:f4:f2:c9:49:
                    3a:55:db:5a:57:c9:29:2d:86:36:22:b5:b9:00:98:
                    73:f2:e8:cc:33:23:ec:af:ad:05:6e:dc:06:0b:38:
                    4c:cf:db:a3:ab:a6:9c:0e:7f:58:fe:d0:8c:0a:15:
                    1d:28:c1:e4:95:84:cd:dc:b2:de:36:80:17:32:68:
                    ec:c1:f2:51:fc:61:26:7f:b4:cc:e2:e6:89:63:29:
                    cf:7c:16:86:96:05:c7:29:24:05:61:7e:fd:de:35:
                    39:2b:ab:13:d9:1d:ea:65:f4:85:3d:ed:62:ec:97:
                    da:8f:d6:db:77:55:7b:10:94:97:50:46:08:b5:24:
                    cc:7c:dd:85:15:ad:02:5b:b0:c2:b4:28:77:28:52:
                    a9:26:d0:0e:13:c0:2b:79:7f:53:71:ff:6a:d4:ee:
                    a0:5b:19:77:d5:a7:2d:63:7c:07:7c:0b:ef:ea:bd:
                    9a:29:92:cf:0c:56:32:48:b1:cb:33:2a:c3:fc:a7:
                    da:e7:bf:23:14:08:80:54:b0:a5:a1:8a:f6:fe:3f:
                    8a:5f:34:d3:81:26:1c:e9:15:2b:b1:71:f7:74:2c:
                    14:13:b3:1b:b9:c1:96:f5:17:1a:0a:28:9d:e0:b4:
                    32:d1:86:54:51:fe:c7:4d:aa:b8:6b:57:8d:86:3a:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:31:C5:76:EE:F6:95:66:48:24:BB:BB:64:B7:94:C0:F9:F4:2E:9D
            X509v3 Authority Key Identifier:
                keyid:58:EA:1B:AA:37:92:34:C3:66:BD:09:E4:63:79:3E:F3:EC:A0:78:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/58EA1BAA379234C366BD09E463793EF3ECA07837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58EA1BAA379234C366BD09E463793EF3ECA07837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KUnzuLDtiMsq6FwDAtvE2REnLXT88PyjKaiJB2agxzi/0/323830343a363637343a3a2f33322d3332203d3e20323639353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6674::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:f5:bf:71:01:11:c7:b6:42:0d:54:68:1f:98:25:a5:25:
         08:09:15:41:0e:e2:91:4c:a7:59:1a:5f:cc:6f:1e:2a:eb:67:
         23:1e:b4:d0:c7:8d:a1:58:cd:d6:74:0f:f0:3c:6e:0a:54:ed:
         1f:d4:67:b9:5b:e4:d1:74:31:d4:d8:5e:18:8f:df:f1:9d:f5:
         f4:9b:16:1b:99:a5:89:28:c4:f0:39:6f:70:99:e7:e2:05:1d:
         27:d3:00:79:0b:8f:a2:30:0c:7a:90:e7:1f:6a:7b:a0:99:fb:
         bb:c1:3e:57:8f:41:22:8b:5f:c5:b3:83:9a:e2:b6:7f:7a:14:
         9c:81:3b:6f:23:d7:99:2b:aa:c6:11:fa:52:33:85:6a:79:ef:
         dd:bf:02:d5:b9:8d:f4:85:ef:b8:2e:b1:ef:ef:3a:bf:51:bc:
         6d:4d:93:30:90:36:9b:13:aa:cb:a6:c9:a9:48:38:e4:84:af:
         b7:cc:43:9a:8e:85:16:ed:18:84:d4:e5:b0:a0:a2:1b:fb:f1:
         fa:52:46:6f:ee:a3:8f:f8:a7:e9:82:ab:e7:ec:9e:8c:b2:86:
         7f:43:aa:e8:4d:7e:fc:95:0f:43:a3:27:cb:a0:6b:10:94:50:
         6b:44:76:61:9c:b5:18:e5:2f:8a:9a:6d:f6:3c:cd:9a:8d:ee:
         d2:dd:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:22:10 2026 by rpki-client