Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/323830343a366566633a3a2f33322d3438203d3e20323730363331.roa
File:                     323830343a366566633a3a2f33322d3438203d3e20323730363331.roa (raw, json)
Hash identifier:          EGp8HTk7A4mwiZ7HGGJ28CTTfAndFFhY33Ka2reerRc=
Subject key identifier:   D0:C1:B9:26:1D:4B:DB:87:0D:C2:5A:94:4B:BB:3F:29:90:0F:0D:32
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       26A3F4FC7771D68717845949A07F623DE44149DD
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/323830343a366566633a3a2f33322d3438203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:37 +0000
ROA not before:           Thu 27 Aug 2026 02:16:37 +0000
ROA not after:            Thu 26 Aug 2027 02:21:37 +0000
asID:                     270631
IP address blocks:        2804:6efc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a3:f4:fc:77:71:d6:87:17:84:59:49:a0:7f:62:3d:e4:41:49:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:37 2026 GMT
            Not After : Aug 26 02:21:37 2027 GMT
        Subject: CN=D0C1B9261D4BDB870DC25A944BBB3F29900F0D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:c8:5a:2f:f3:34:08:ac:04:6c:86:2b:e6:
                    74:81:3a:44:fc:41:cb:81:a7:82:fb:c1:7d:e3:5e:
                    8f:77:3a:a9:c9:ed:b5:38:b9:74:9e:16:28:f2:e3:
                    6a:69:c4:5a:29:dd:6a:fe:9e:0f:02:3c:06:ef:b8:
                    ac:b0:eb:af:f2:68:74:d2:eb:15:f4:14:a7:0d:45:
                    10:f4:21:32:05:73:6c:52:69:ba:39:0a:83:1d:8b:
                    6c:b4:36:4f:ce:aa:b3:55:c6:f8:d2:f3:5d:d8:f6:
                    7c:e7:29:c4:8b:40:67:0c:94:40:41:e7:6a:35:f2:
                    10:62:c3:9e:00:14:aa:29:f6:0e:7f:a9:e0:63:02:
                    d9:bb:e1:b0:f4:93:1e:4c:fa:8e:94:68:d9:ce:8a:
                    1b:d2:cf:54:3d:16:6e:1f:f1:90:68:08:fd:f5:1d:
                    74:3a:c0:85:47:88:a5:a2:7c:ca:7a:eb:b3:d5:fd:
                    e6:32:35:a7:25:08:f7:b5:0c:29:68:c3:b5:f7:d2:
                    c4:a4:66:01:15:2f:51:73:cf:9f:88:04:27:e4:c8:
                    7e:24:d8:77:92:75:b1:b9:c1:ef:7d:ec:6e:05:d3:
                    71:47:b5:ea:d5:ba:e0:2a:fe:f9:c5:67:b7:ca:fb:
                    42:11:ee:8b:b9:16:e8:fb:99:59:f2:9a:d6:e6:4e:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:B9:26:1D:4B:DB:87:0D:C2:5A:94:4B:BB:3F:29:90:0F:0D:32
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/323830343a366566633a3a2f33322d3438203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:2f:71:c2:bf:a8:99:fe:de:85:b5:05:8f:48:cc:5b:ec:1d:
         6f:78:b5:f7:1f:5e:c6:ad:69:f4:7d:c9:ae:e7:6f:73:f0:32:
         c7:2a:39:77:cd:50:d7:09:a8:4f:ae:22:ae:5e:4c:39:c0:28:
         8e:26:ed:43:9a:4d:03:21:80:a4:96:67:f6:f7:0b:36:d6:50:
         d1:7b:3f:8c:ab:65:50:4e:30:1c:6b:03:be:67:da:db:8e:ab:
         a5:02:8e:8b:27:e8:33:29:04:04:6a:7d:fd:5b:7c:57:79:ab:
         3a:d3:4b:8d:39:db:80:d9:e7:76:ed:44:90:15:5e:23:76:44:
         24:a6:70:1c:d3:15:7d:82:cd:4c:a5:2f:b3:a7:73:e0:c8:74:
         da:74:c4:c6:2f:98:90:87:6d:50:a9:20:01:22:ef:db:d2:38:
         c1:82:c8:4a:a2:77:70:1a:1a:2d:e4:bf:42:cf:73:cb:c4:6d:
         5f:03:6c:3e:d6:61:4d:7b:4d:43:e4:01:6f:a5:b2:02:de:78:
         50:53:ef:8a:91:d3:be:1c:6d:fe:b6:27:45:68:60:3a:a3:84:
         b6:1f:70:0b:aa:87:ef:0a:df:48:7e:d9:d5:83:d7:6d:b9:b4:
         f8:2a:4a:9a:81:53:79:68:47:54:59:cc:f9:d0:6a:26:97:df:
         07:12:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:55:00 2026 by rpki-client